Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/0314d35e-5c2a-3e42-a452-7c1acef6cada.roa
File:                     0314d35e-5c2a-3e42-a452-7c1acef6cada.roa (raw, json)
Hash identifier:          C5qbhRlZONf3vtmM5NB1qn2Mug0rgZdoYWbqvy9xiPw=
Subject key identifier:   42:D2:C6:53:5E:77:B7:77:BB:A6:1B:E6:31:09:7D:EE:75:68:36:CE
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E86F0DE3542386A0E429718C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/0314d35e-5c2a-3e42-a452-7c1acef6cada.roa
Signing time:             Sat 09 Jul 2022 12:00:00 +0000
ROA not before:           Sat 09 Jul 2022 12:00:00 +0000
ROA not after:            Tue 12 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:86:f0:de:35:42:38:6a:0e:42:97:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul  9 12:00:00 2022 GMT
            Not After : Jul 12 04:00:00 2022 GMT
        Subject: CN=7aaf6903-a62b-40f7-8747-0bcb3fc2bd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:65:79:de:a5:87:fc:78:eb:4d:74:7e:7a:e7:
                    8d:55:b6:dd:46:b9:e8:bd:1c:f7:30:28:1c:b1:bc:
                    39:ec:9c:20:bd:50:0f:d8:25:fb:40:85:36:57:84:
                    ac:fb:ed:3a:46:b2:3a:8f:a8:73:d4:5e:5b:70:45:
                    8e:33:3b:f9:ff:44:bd:ab:a0:e7:d6:8c:8d:f3:03:
                    0d:26:52:73:9f:91:87:70:e2:5f:37:c8:a5:1d:73:
                    f1:b2:f6:a0:05:91:00:c8:e1:31:38:e3:72:a3:57:
                    90:93:d0:90:35:f8:04:4a:2a:84:fb:0a:b9:87:68:
                    f9:63:64:af:b1:43:6d:e0:45:10:c0:f5:7f:f2:54:
                    8b:73:b0:00:f5:ca:5f:ac:72:93:26:4c:7f:87:30:
                    d2:b8:d9:d7:08:f2:3e:79:17:e4:bc:ec:0f:a4:5e:
                    45:5a:c7:d4:50:a3:b2:d0:7b:1a:25:37:1d:47:eb:
                    45:60:8f:d3:bf:fd:bd:53:28:ef:dc:16:3f:0f:39:
                    95:ef:21:72:fa:41:9a:f2:11:24:e7:32:56:4c:d3:
                    00:7e:e8:08:76:e8:95:c8:cc:ea:c5:e5:66:06:50:
                    f9:85:00:f3:e1:76:96:6f:2f:3b:4e:fd:b6:12:5c:
                    6e:c6:71:64:cb:e1:f5:6a:5a:26:7c:63:d9:d7:9e:
                    69:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D2:C6:53:5E:77:B7:77:BB:A6:1B:E6:31:09:7D:EE:75:68:36:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/0314d35e-5c2a-3e42-a452-7c1acef6cada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:38:96:bc:17:e7:33:d6:61:1b:d9:e7:3c:16:b2:4b:4f:78:
         09:c5:dc:12:ea:3e:6c:48:9c:9e:cd:32:a1:e3:a8:55:07:5c:
         2b:fd:1d:2e:01:9e:ea:a5:ed:2f:7d:7d:54:1c:bc:eb:be:e9:
         f6:0d:2f:83:e2:c7:9f:e7:b1:4c:6f:3b:66:d6:ee:46:32:56:
         ac:d0:20:18:32:8d:d0:aa:18:2b:05:d6:b1:71:b6:ca:76:b7:
         b3:b0:43:fe:26:82:29:53:89:0d:9e:8d:18:58:80:37:61:91:
         5c:4c:d8:a1:e1:30:b8:80:ce:32:b2:2a:68:85:ac:e4:e2:10:
         d0:f9:6a:48:27:ff:0f:a4:d9:7a:9b:a2:67:2f:f4:a6:e2:3c:
         dd:35:48:21:be:76:19:ab:26:cf:d1:5e:6f:9a:cc:bf:03:39:
         26:96:cd:50:46:4e:e5:64:b1:37:87:d9:3d:dc:35:96:45:d9:
         66:67:4e:dc:1f:13:a2:96:a5:48:d4:cd:95:1e:06:5a:b1:bc:
         46:55:c6:ab:5f:2c:23:5a:9b:be:67:d6:93:84:06:17:5f:f9:
         8d:c2:77:9e:07:f9:df:b3:9d:ad:38:23:c2:4a:b4:e8:00:ff:
         95:cb:ad:76:0b:47:69:80:e2:e3:97:0d:c1:93:09:c7:18:85:
         c0:a1:a4:21
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD6G8N41QjhqDkKXGMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDcwOTEyMDAwMFoXDTIyMDcxMjA0MDAwMFowLzEtMCsGA1UEAxMk
N2FhZjY5MDMtYTYyYi00MGY3LTg3NDctMGJjYjNmYzJiZDFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGV53qWH/HjrTXR+eueNVbbdRrnovRz3MCgc
sbw57JwgvVAP2CX7QIU2V4Ss++06RrI6j6hz1F5bcEWOMzv5/0S9q6Dn1oyN8wMN
JlJzn5GHcOJfN8ilHXPxsvagBZEAyOExOONyo1eQk9CQNfgESiqE+wq5h2j5Y2Sv
sUNt4EUQwPV/8lSLc7AA9cpfrHKTJkx/hzDSuNnXCPI+eRfkvOwPpF5FWsfUUKOy
0HsaJTcdR+tFYI/Tv/29Uyjv3BY/DzmV7yFy+kGa8hEk5zJWTNMAfugIduiVyMzq
xeVmBlD5hQDz4XaWby87Tv22ElxuxnFky+H1alomfGPZ155phQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFELSxlNed7d3u6Yb5jEJfe51aDbOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvMDMxNGQzNWUtNWMyYS0z
ZTQyLWE0NTItN2MxYWNlZjZjYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIQ4lrwX5zPWYRvZ5zwWsktPeAnF3BLqPmxInJ7NMqHjqFUHXCv9
HS4Bnuql7S99fVQcvOu+6fYNL4Pix5/nsUxvO2bW7kYyVqzQIBgyjdCqGCsF1rFx
tsp2t7OwQ/4mgilTiQ2ejRhYgDdhkVxM2KHhMLiAzjKyKmiFrOTiEND5akgn/w+k
2Xqbomcv9KbiPN01SCG+dhmrJs/RXm+azL8DOSaWzVBGTuVksTeH2T3cNZZF2WZn
TtwfE6KWpUjUzZUeBlqxvEZVxqtfLCNam75n1pOEBhdf+Y3Cd54H+d+zna04I8JK
tOgA/5XLrXYLR2mA4uOXDcGTCccYhcChpCE=
-----END CERTIFICATE-----