Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/b6ceeb90-1956-321c-ab38-835e7c15db59.roa
File:                     b6ceeb90-1956-321c-ab38-835e7c15db59.roa (raw, json)
Hash identifier:          JfEbNsbRHq8zyk0o3xSIO7Hf4WCZ9qY2dlIPNYEFRa8=
Subject key identifier:   A7:C7:17:F8:FE:C0:7A:32:E0:9A:39:EE:72:64:4F:EC:64:6A:E0:8D
Certificate issuer:       /CN=5054a223-c485-46b0-b02c-2fdc3bfe26bc
Certificate serial:       010D0C9F4328583EDA557804F1881EC39F24DC00
Authority key identifier: 8B:F7:51:E2:E3:D2:43:13:56:DE:2E:5A:0B:B4:F8:A0:BA:4D:40:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/b6ceeb90-1956-321c-ab38-835e7c15db59.roa
Signing time:             Fri 24 Jun 2022 17:36:07 +0000
ROA not before:           Fri 24 Jun 2022 17:36:07 +0000
ROA not after:            Mon 12 Nov 2029 05:00:00 +0000
asID:                     44570
IP address blocks:        2602:fba1:666::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:da:55:78:04:f1:88:1e:c3:9f:24:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5054a223-c485-46b0-b02c-2fdc3bfe26bc
        Validity
            Not Before: Jun 24 17:36:07 2022 GMT
            Not After : Nov 12 05:00:00 2029 GMT
        Subject: CN=b47850d1-98f3-4014-9c6a-8a72f9e23e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:fc:bb:65:2d:95:1b:a1:3d:7e:94:86:cf:
                    92:a4:9b:86:e7:1f:f1:69:cc:c5:41:31:66:bb:30:
                    2c:d1:e3:41:e9:35:6f:c7:c3:cd:a5:78:5a:e4:02:
                    e4:c5:16:2f:8c:eb:53:c5:e9:ec:37:92:62:0c:bf:
                    91:3a:fa:c7:17:cd:ce:84:45:ea:ab:f5:f2:78:82:
                    da:50:30:41:b7:b2:c4:b5:7d:e0:e8:15:d1:09:32:
                    38:1a:5f:fe:f4:39:a1:60:78:a3:d8:3b:34:78:6a:
                    3f:ad:82:37:1a:e1:dc:c7:df:0f:56:64:55:9a:6b:
                    e2:7a:53:5a:3e:9e:3e:35:9c:2f:f2:70:5e:57:7f:
                    4d:3d:c6:15:36:cf:6c:ce:5c:b2:59:4f:0b:eb:b2:
                    c1:54:02:e8:61:8f:5e:a1:9a:1c:6a:9c:67:e4:44:
                    d9:ad:b5:de:46:d4:7b:b9:29:03:20:e4:b0:2f:d3:
                    ae:d7:ae:af:45:9d:6e:c5:e6:5b:98:ae:74:67:94:
                    46:f5:0e:e5:8d:70:63:98:15:54:e5:82:dd:67:56:
                    cc:08:81:2a:48:96:78:5f:1c:6d:9e:fa:2a:d0:8b:
                    5f:e5:33:4a:25:19:d7:27:a4:2a:37:77:85:f1:4a:
                    84:53:94:9f:39:97:09:01:1c:70:4f:be:c9:b9:b9:
                    5b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C7:17:F8:FE:C0:7A:32:E0:9A:39:EE:72:64:4F:EC:64:6A:E0:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/b6ceeb90-1956-321c-ab38-835e7c15db59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/5054a223-c485-46b0-b02c-2fdc3bfe26bc.crl

            X509v3 Authority Key Identifier:
                keyid:8B:F7:51:E2:E3:D2:43:13:56:DE:2E:5A:0B:B4:F8:A0:BA:4D:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1:666::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:46:36:18:cc:c7:16:ba:2f:66:65:d0:9f:f9:f2:aa:22:3c:
         8a:e8:72:df:e3:f5:f4:b5:d3:ac:7a:9d:20:7e:e4:d8:84:ec:
         34:17:9d:79:99:cd:7a:f8:90:e5:d4:5e:22:34:e3:b0:f5:34:
         c0:15:15:71:72:be:7f:2f:00:a6:13:54:71:8e:9b:93:bb:a7:
         01:19:fb:9c:58:ca:e7:5a:13:4f:ae:c9:4f:89:40:94:50:13:
         ec:e9:58:0b:fc:5d:00:87:7f:19:cd:78:af:95:2d:86:27:ed:
         67:13:ed:53:11:3c:60:2b:75:91:db:f8:2e:d3:ab:bb:05:03:
         6d:54:55:e8:d3:9d:e7:d2:47:4a:c7:83:5f:11:5f:08:49:76:
         5b:d3:80:49:b7:43:b2:b1:97:48:ff:2c:23:07:7c:50:a5:2f:
         75:29:57:6a:3f:fb:62:2e:27:6c:36:08:b0:cc:92:aa:1d:25:
         ae:fd:f0:67:fd:78:4c:55:3e:46:13:c6:65:49:53:b6:fd:9f:
         4b:d3:85:bf:46:e6:e2:e1:1b:70:a2:7c:7c:63:57:93:47:e0:
         9a:07:f9:c2:e5:87:3f:ad:ff:81:67:e8:c9:34:83:d3:c7:c3:
         93:7e:10:51:ef:fd:22:23:89:a0:b3:6b:70:c8:25:83:e2:27:
         8e:fa:f4:7e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD7aVXgE8Ygew58k3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTA1NGEyMjMtYzQ4NS00NmIwLWIwMmMtMmZkYzNiZmUy
NmJjMB4XDTIyMDYyNDE3MzYwN1oXDTI5MTExMjA1MDAwMFowLzEtMCsGA1UEAxMk
YjQ3ODUwZDEtOThmMy00MDE0LTljNmEtOGE3MmY5ZTIzZTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ38u2UtlRuhPX6Uhs+SpJuG5x/xaczFQTFm
uzAs0eNB6TVvx8PNpXha5ALkxRYvjOtTxensN5JiDL+ROvrHF83OhEXqq/XyeILa
UDBBt7LEtX3g6BXRCTI4Gl/+9DmhYHij2Ds0eGo/rYI3GuHcx98PVmRVmmvielNa
Pp4+NZwv8nBeV39NPcYVNs9szlyyWU8L67LBVALoYY9eoZocapxn5ETZrbXeRtR7
uSkDIOSwL9Ou166vRZ1uxeZbmK50Z5RG9Q7ljXBjmBVU5YLdZ1bMCIEqSJZ4Xxxt
nvoq0Itf5TNKJRnXJ6QqN3eF8UqEU5SfOZcJARxwT77JublbLwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKfHF/j+wHoy4Jo57nJkT+xkauCNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDU0
YTIyMy1jNDg1LTQ2YjAtYjAyYy0yZmRjM2JmZTI2YmMvYjZjZWViOTAtMTk1Ni0z
MjFjLWFiMzgtODM1ZTdjMTVkYjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTA1NGEyMjMtYzQ4NS00NmIwLWIw
MmMtMmZkYzNiZmUyNmJjLzUwNTRhMjIzLWM0ODUtNDZiMC1iMDJjLTJmZGMzYmZl
MjZiYy5jcmwwHwYDVR0jBBgwFoAUi/dR4uPSQxNW3i5aC7T4oLpNQNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDU0YTIyMy1jNDg1LTQ2YjAtYjAyYy0yZmRj
M2JmZTI2YmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7oQZm
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALBGNhjMxxa6L2Zl0J/58qoiPIroct/j9fS106x6nSB+5NiE7DQX
nXmZzXr4kOXUXiI047D1NMAVFXFyvn8vAKYTVHGOm5O7pwEZ+5xYyudaE0+uyU+J
QJRQE+zpWAv8XQCHfxnNeK+VLYYn7WcT7VMRPGArdZHb+C7Tq7sFA21UVejTnefS
R0rHg18RXwhJdlvTgEm3Q7Kxl0j/LCMHfFClL3UpV2o/+2IuJ2w2CLDMkqodJa79
8Gf9eExVPkYTxmVJU7b9n0vThb9G5uLhG3CifHxjV5NH4JoH+cLlhz+t/4Fn6Mk0
g9PHw5N+EFHv/SIjiaCza3DIJYPiJ4769H4=
-----END CERTIFICATE-----