Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f6e3be5f-2543-3da4-b8f1-203947ccc78c.roa
File:                     f6e3be5f-2543-3da4-b8f1-203947ccc78c.roa (raw, json)
Hash identifier:          RiWgDaLj+obNYqLUi/OxZdYyDaP4YNyJrjznysFlPXQ=
Subject key identifier:   48:B8:35:E4:8E:17:76:BB:81:03:51:B4:C2:BA:C9:24:D9:A9:D9:C4
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F432858401D571DDA0803D023866BE5D8
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f6e3be5f-2543-3da4-b8f1-203947ccc78c.roa
Signing time:             Thu 01 Dec 2022 12:00:00 +0000
ROA not before:           Thu 01 Dec 2022 12:00:00 +0000
ROA not after:            Sun 04 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1d:57:1d:da:08:03:d0:23:86:6b:e5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Dec  1 12:00:00 2022 GMT
            Not After : Dec  4 05:00:00 2022 GMT
        Subject: CN=9861a3c1-3d29-4435-880e-e8c28e151f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0c:09:ef:82:0c:ad:52:b5:11:72:93:ac:49:
                    cb:6d:12:8e:24:5a:7a:b8:36:65:73:be:c1:1a:ca:
                    a4:5c:22:5b:17:a7:51:df:fe:3a:3d:62:06:d5:a4:
                    c5:de:44:e9:23:46:19:af:11:dd:46:6c:63:db:03:
                    5c:2a:73:c2:58:02:ea:4a:31:41:b2:cd:13:3e:11:
                    01:c0:6f:33:a1:59:23:96:89:c8:68:a6:32:79:c8:
                    8f:df:c9:3e:38:72:36:c2:9f:e1:35:1f:68:4d:39:
                    3d:f7:ab:c9:33:f4:6a:19:91:99:f9:a1:05:04:ba:
                    b4:08:5e:58:ac:f4:14:6f:8c:78:31:92:24:e9:e4:
                    66:da:be:7c:52:9e:8c:32:90:a9:44:29:8f:91:a2:
                    f5:de:c8:39:e6:6f:01:a7:a1:27:36:35:29:ab:fd:
                    6a:eb:12:61:16:8d:12:4a:d4:e9:60:fd:b3:5c:b5:
                    18:96:c6:8f:ab:38:e4:82:47:75:ec:4c:09:a4:5f:
                    b1:f3:40:65:a7:bc:bb:14:a3:f1:76:bf:ac:64:f2:
                    2a:f3:d8:43:8e:b0:27:ad:be:f7:49:1f:a5:a2:5a:
                    e0:c7:92:4d:63:f0:a7:fc:5e:94:e7:c5:cb:23:bd:
                    11:ba:70:60:b5:99:49:c8:e9:82:67:c5:d4:67:78:
                    d8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B8:35:E4:8E:17:76:BB:81:03:51:B4:C2:BA:C9:24:D9:A9:D9:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f6e3be5f-2543-3da4-b8f1-203947ccc78c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:3b:92:0e:96:e1:ef:72:b4:55:f4:4b:d3:40:68:e7:0c:75:
         44:37:79:49:d6:26:3e:be:f9:f7:23:a1:96:7d:51:b0:a9:ca:
         7d:40:09:5b:fb:53:6f:9d:e3:9e:cf:4d:bd:23:a3:6a:1d:5b:
         51:92:5b:07:65:78:04:47:ac:b0:19:0f:5e:e9:90:91:ce:8c:
         63:ba:1d:a4:9d:07:86:46:9e:99:84:86:90:57:57:96:3f:a3:
         ac:05:62:bb:c3:91:bb:95:33:d7:a7:e0:81:33:d2:e4:4f:da:
         98:9a:92:f3:7f:bb:a0:d6:45:93:2f:15:de:65:c6:d1:f5:b1:
         18:b0:65:b2:b9:37:53:80:57:14:95:a2:aa:66:a7:e0:90:23:
         5f:4d:a5:f9:fd:46:92:04:b8:10:fe:8b:36:e2:e8:73:68:ec:
         42:ea:3a:0e:00:de:9b:ef:ea:13:8f:2e:72:61:bd:55:d9:f3:
         6a:a1:86:4f:4d:06:f3:14:48:98:d3:29:5e:7e:f9:68:bb:58:
         b0:92:cb:9c:98:c0:f8:da:f8:78:ac:5c:aa:27:59:de:34:28:
         bb:28:96:9f:18:34:95:0f:22:6b:01:ad:55:df:97:a4:8e:b3:
         eb:b9:fb:a6:7c:48:7d:b9:59:f6:05:00:d9:5e:e0:bb:77:48:
         01:16:72:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----