Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/c651e722-2193-31a2-b24a-7364819681c1.roa
File:                     c651e722-2193-31a2-b24a-7364819681c1.roa (raw, json)
Hash identifier:          aDrgvvbJkRkgBYg5aDHO1JbVn7mn32uqdx3kF5RR8TA=
Subject key identifier:   D5:EC:46:57:E2:46:89:2C:CC:EB:5E:31:E5:93:A9:5F:B7:38:34:2D
Certificate issuer:       /CN=90e0e2fb-b856-4bab-b967-a8918ce1cb29
Certificate serial:       010D0C9F43285843A54565C53CA4AC90148D1A40
Authority key identifier: D9:F0:59:7D:DD:E5:0B:71:70:E9:D9:96:27:EB:07:0D:E8:54:20:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/c651e722-2193-31a2-b24a-7364819681c1.roa
Signing time:             Mon 23 Oct 2023 13:00:21 +0000
ROA not before:           Mon 23 Oct 2023 13:00:21 +0000
ROA not after:            Sun 21 Jan 2024 14:00:21 +0000
asID:                     13830
IP address blocks:        2001:506:30::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a5:45:65:c5:3c:a4:ac:90:14:8d:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90e0e2fb-b856-4bab-b967-a8918ce1cb29
        Validity
            Not Before: Oct 23 13:00:21 2023 GMT
            Not After : Jan 21 14:00:21 2024 GMT
        Subject: CN=adcb929d-0848-4a60-971c-a522bc77d537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:04:10:4d:fc:4e:95:d4:31:62:7b:53:40:90:
                    d7:40:c2:84:2b:b5:0f:d4:ea:8f:41:c7:e4:f5:cb:
                    8e:58:c8:e4:81:73:ef:9c:ff:5d:9c:fe:9b:05:e0:
                    13:4e:ec:56:11:9d:d6:9f:18:87:e4:a7:54:1c:f9:
                    c7:3e:9b:d0:9d:3f:f7:b1:4d:3b:d9:aa:c3:ff:ac:
                    3a:52:94:03:97:a0:b0:cc:81:db:f0:93:43:a5:1f:
                    58:55:e0:14:f3:bd:4e:c6:da:2c:d8:4a:30:47:2d:
                    db:36:9c:c9:a1:b3:b5:22:e1:c4:29:34:fe:85:4a:
                    da:82:88:fa:bb:ae:ea:1f:4a:91:b6:1e:a9:3c:5f:
                    42:c8:35:78:a7:7e:2a:bc:ca:38:59:41:3e:77:98:
                    bb:a3:ed:a3:b3:6d:42:52:91:70:c9:56:b7:ed:6b:
                    bd:2c:44:30:94:f1:be:e4:44:2a:58:b4:f2:b0:65:
                    ea:be:f0:37:13:aa:1d:42:e5:f3:2d:71:7d:1b:95:
                    48:bf:ce:e6:a1:64:f7:6c:02:e9:f6:cc:2d:44:61:
                    ec:b9:7f:e7:2e:f2:86:f2:34:c8:66:20:e7:e7:96:
                    68:4e:fa:91:49:65:3c:cc:94:3d:bc:e0:5d:0f:9f:
                    c0:ad:84:7a:6b:ec:97:8e:ef:5f:6b:0b:a1:3d:e1:
                    61:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EC:46:57:E2:46:89:2C:CC:EB:5E:31:E5:93:A9:5F:B7:38:34:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/c651e722-2193-31a2-b24a-7364819681c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/90e0e2fb-b856-4bab-b967-a8918ce1cb29.crl

            X509v3 Authority Key Identifier:
                keyid:D9:F0:59:7D:DD:E5:0B:71:70:E9:D9:96:27:EB:07:0D:E8:54:20:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:506:30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f3:0c:1e:6e:a5:23:51:c9:29:2b:58:09:f0:db:dd:8f:22:
         c2:fa:af:80:eb:cf:1d:8f:43:4a:f4:76:92:c0:d0:07:38:91:
         75:f6:91:f9:8f:a2:d2:09:ec:27:b6:30:64:f2:c7:1f:8a:a4:
         14:2d:39:74:bf:9f:b7:cf:7b:96:26:61:65:e0:8b:66:6e:83:
         96:56:f0:6d:b9:87:62:d9:7f:2e:26:07:e7:8a:82:33:01:27:
         dd:4b:a5:f9:1c:c5:c2:40:cd:2b:99:f8:94:4c:05:ca:c8:7f:
         ec:69:db:65:4e:00:36:5f:a5:67:b9:8b:7e:72:4d:94:f6:5e:
         81:d2:96:22:bf:93:76:b3:b6:12:d0:da:b5:69:e7:62:b9:e9:
         da:70:8c:e3:df:53:a2:97:db:7d:81:4f:38:97:36:37:b8:b2:
         92:87:64:f1:56:8a:52:0b:fe:40:03:a9:67:e7:e0:5e:e0:16:
         9f:c2:c2:eb:47:3c:bb:92:6f:c0:80:b6:8d:1d:ee:4f:74:36:
         e9:66:71:ae:7b:bc:9c:9e:f4:14:92:8a:79:5c:bc:35:2a:2a:
         a7:06:3f:bf:84:f9:c6:8b:ac:c3:6e:83:66:94:0d:b0:8e:4b:
         1c:df:f5:a9:8b:48:66:de:8d:bd:6a:cb:a2:ef:79:e0:05:1b:
         6e:b6:52:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----