Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f3a580f3-9f24-33eb-9d08-b556b86130c0.roa
File:                     f3a580f3-9f24-33eb-9d08-b556b86130c0.roa (raw, json)
Hash identifier:          tqr0h7beYdZErKAZtBjhHYZPiZ2L43kUO3F3kxS9KzU=
Subject key identifier:   9F:95:EF:BA:BE:CB:F2:D7:67:D3:D3:C0:AC:F3:FC:35:0E:37:2F:CE
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EAC022DAD1CB10CDF39DD7D40
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f3a580f3-9f24-33eb-9d08-b556b86130c0.roa
Signing time:             Fri 22 Jul 2022 12:00:00 +0000
ROA not before:           Fri 22 Jul 2022 12:00:00 +0000
ROA not after:            Mon 25 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:358::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ac:02:2d:ad:1c:b1:0c:df:39:dd:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul 22 12:00:00 2022 GMT
            Not After : Jul 25 04:00:00 2022 GMT
        Subject: CN=e4da7f23-5eb3-4086-8ca6-48720f53c799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:0b:15:40:ec:ad:33:35:c6:64:d1:3c:5c:
                    1f:89:d9:da:bd:f7:c3:3c:73:b9:63:8c:da:24:39:
                    fa:5f:5d:e5:49:f2:ee:ea:0d:11:18:ed:40:93:09:
                    3c:a7:c4:d9:62:d0:23:c5:28:1f:86:35:70:53:19:
                    ab:dd:8a:b9:c5:6d:5c:b3:64:0d:c7:51:c1:34:e7:
                    43:93:65:a2:71:e1:0f:fe:39:81:72:7c:d4:4a:9c:
                    0d:78:10:cb:7d:dd:56:52:e1:3d:79:8c:6e:4f:0c:
                    24:ef:a2:bb:48:18:df:e0:f8:32:74:f6:d6:64:33:
                    7e:de:7f:6c:4e:2b:53:d2:2a:88:8c:c2:3b:57:54:
                    e9:2e:7d:fb:ea:34:5f:e0:1c:ff:e0:c4:29:7b:b6:
                    7f:5b:93:d8:09:32:36:db:4b:47:3a:2c:94:04:30:
                    b2:2a:62:dd:2b:fa:2f:71:72:51:41:4b:f3:6c:7c:
                    3b:d9:2a:39:2e:41:41:86:af:fa:0a:a7:a5:ff:38:
                    ac:65:e0:a9:51:c6:e7:c3:fd:da:d0:75:a7:62:94:
                    ff:23:57:9b:f7:ab:70:47:02:dc:c3:dc:58:10:3c:
                    4d:03:a5:f0:64:99:18:68:eb:f9:3b:ec:12:fa:38:
                    88:b8:c3:8c:e7:18:58:75:d8:e5:19:3c:24:28:bc:
                    71:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:95:EF:BA:BE:CB:F2:D7:67:D3:D3:C0:AC:F3:FC:35:0E:37:2F:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f3a580f3-9f24-33eb-9d08-b556b86130c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:358::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:8d:ae:ad:11:b9:6b:df:28:e2:4b:df:4f:1b:e3:42:c0:ef:
         41:93:76:22:e0:6e:f8:f0:b1:8e:4b:b2:3e:4c:47:8d:a7:42:
         a4:c9:9a:8a:f0:01:e7:e8:e2:54:1e:4a:7a:5e:56:99:34:64:
         98:ca:6d:b9:51:3d:9a:c2:77:88:0d:61:0a:a1:4f:67:e2:a7:
         98:80:25:7c:06:b3:77:c8:9e:40:a3:4b:f4:3a:7b:6c:6b:4a:
         a5:01:de:e3:db:e7:68:9d:f2:c4:7f:c8:5a:9a:0b:11:0a:ae:
         de:a5:aa:f0:a4:58:f5:c5:fa:13:7d:b9:0e:c5:0d:19:92:64:
         4a:4f:d4:c3:42:9f:06:36:b0:2f:b0:96:6a:8a:b4:fc:92:b3:
         89:39:44:e7:a2:27:5c:e4:41:a0:d8:4f:76:ca:64:4c:f1:45:
         60:62:59:dc:35:a3:6f:aa:e2:5f:57:ff:b2:ca:df:46:83:9f:
         9a:a3:50:23:54:f6:30:eb:50:38:58:23:cf:c2:ec:76:39:42:
         1d:85:19:e5:21:df:10:18:3e:87:a5:2f:45:15:10:67:9f:fc:
         0e:d4:1b:96:9a:d9:b8:62:b0:66:1b:58:c5:b5:29:ee:39:30:
         97:2f:59:35:30:b2:af:6d:46:6d:b9:e5:6e:1a:4a:fb:bc:57:
         a5:d4:19:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----