Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/0cce47ba-4149-3ab7-b838-562ccfd063f3.roa
File:                     0cce47ba-4149-3ab7-b838-562ccfd063f3.roa (raw, json)
Hash identifier:          xWK2+7yILj2vZ2vmXBBvHtt25d4yNYC6xHP5PfXztxc=
Subject key identifier:   F6:AE:A8:67:19:A5:B0:F9:16:73:66:00:F7:DA:7B:04:61:DD:EE:5C
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FD7A7A574B0F335FB74E9D140
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/0cce47ba-4149-3ab7-b838-562ccfd063f3.roa
Signing time:             Sun 06 Nov 2022 12:00:00 +0000
ROA not before:           Sun 06 Nov 2022 12:00:00 +0000
ROA not after:            Wed 09 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d7:a7:a5:74:b0:f3:35:fb:74:e9:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  6 12:00:00 2022 GMT
            Not After : Nov  9 05:00:00 2022 GMT
        Subject: CN=003fa801-3533-4be2-b3a6-078583260646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:3c:6d:76:0c:f9:1a:db:3c:5d:18:60:ec:
                    38:83:51:9d:0c:73:e0:9a:21:46:35:ab:b6:f8:fb:
                    18:0a:92:42:e2:2e:a7:cc:0f:08:2e:9b:72:00:d8:
                    53:b0:64:3e:22:b5:0c:36:10:0b:14:95:fd:1f:28:
                    8c:ed:58:6e:ff:48:2b:b9:c5:3a:a9:eb:0b:db:a6:
                    9d:16:36:fd:12:d1:6a:b4:eb:d8:e5:a1:a2:f6:76:
                    82:36:1f:23:67:79:a8:ed:5c:42:01:59:d4:a1:82:
                    1c:63:1f:a9:e6:90:3a:5e:f2:8b:96:7b:af:0f:fa:
                    5d:9d:45:a5:d2:06:32:a2:e5:69:57:fd:f6:ff:63:
                    f4:52:0a:af:c3:bc:22:88:9a:79:30:af:51:ea:1d:
                    60:78:6c:5a:72:4b:ac:b4:30:c9:e7:31:df:16:c9:
                    a5:8d:f1:67:33:87:a1:d4:93:95:97:74:36:3b:be:
                    b8:c5:58:24:8d:0f:26:79:63:50:4c:a2:31:0b:8c:
                    d1:75:51:c5:2b:f0:59:fb:28:af:54:b3:b8:4e:de:
                    d8:8d:db:76:c0:a2:b8:11:d1:d6:40:0e:e8:95:6b:
                    b2:1c:12:02:df:93:64:b6:66:d2:10:7c:70:3b:19:
                    a9:ed:60:27:68:d3:ce:23:40:a6:44:6d:a7:31:7e:
                    5f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AE:A8:67:19:A5:B0:F9:16:73:66:00:F7:DA:7B:04:61:DD:EE:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/0cce47ba-4149-3ab7-b838-562ccfd063f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:92:7d:62:c2:1b:1a:1f:13:61:66:f3:24:fc:fc:9e:4a:37:
         14:a3:24:de:5f:61:bf:2d:44:35:f4:39:63:11:1a:22:87:8d:
         7a:14:85:7c:19:a8:66:54:2b:8d:8c:41:dd:f7:b9:5a:5c:8d:
         ba:92:8f:79:cb:27:ff:f2:82:70:3f:eb:c2:9b:e9:69:45:ca:
         65:dd:da:9c:2d:1a:f6:43:85:6d:02:7b:34:e0:19:b5:82:34:
         a6:57:1b:3e:7e:1f:84:0b:f6:6e:9a:cd:53:4c:64:74:4f:df:
         eb:39:6c:61:a6:0e:46:4e:28:24:42:f7:2b:be:4f:00:37:0c:
         bb:ae:14:40:3d:30:99:13:60:24:be:b8:41:16:01:1f:a6:1e:
         2f:ba:a8:d9:ed:7f:dd:ad:3e:06:9b:f7:f3:04:ae:44:da:ed:
         eb:fe:6d:35:e5:0d:01:18:e9:ba:b8:88:fe:63:c2:12:05:f7:
         9e:dd:67:0e:93:f8:81:04:7b:c1:c9:64:44:a5:2f:fa:32:3b:
         49:03:17:f0:b3:a7:63:70:d7:f4:ed:93:34:0e:7a:fa:91:43:
         ac:96:63:03:52:be:2a:9d:b5:6e:28:39:a1:48:4e:9f:1c:0e:
         19:6d:9d:be:35:ad:e8:8e:db:82:b7:f2:51:ab:ca:45:c7:30:
         96:ea:ee:9e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD/Xp6V0sPM1+3Tp0UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMTEwNjEyMDAwMFoXDTIyMTEwOTA1MDAwMFowLzEtMCsGA1UEAxMk
MDAzZmE4MDEtMzUzMy00YmUyLWIzYTYtMDc4NTgzMjYwNjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzc8bXYM+RrbPF0YYOw4g1GdDHPgmiFGNau2
+PsYCpJC4i6nzA8ILptyANhTsGQ+IrUMNhALFJX9HyiM7Vhu/0grucU6qesL26ad
Fjb9EtFqtOvY5aGi9naCNh8jZ3mo7VxCAVnUoYIcYx+p5pA6XvKLlnuvD/pdnUWl
0gYyouVpV/32/2P0Ugqvw7wiiJp5MK9R6h1geGxackustDDJ5zHfFsmljfFnM4eh
1JOVl3Q2O764xVgkjQ8meWNQTKIxC4zRdVHFK/BZ+yivVLO4Tt7Yjdt2wKK4EdHW
QA7olWuyHBIC35NktmbSEHxwOxmp7WAnaNPOI0CmRG2nMX5f/QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPauqGcZpbD5FnNmAPfaewRh3e5cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvMGNjZTQ3YmEtNDE0OS0z
YWI3LWI4MzgtNTYyY2NmZDA2M2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHWSfWLCGxofE2Fm8yT8/J5KNxSjJN5fYb8tRDX0OWMRGiKHjXoU
hXwZqGZUK42MQd33uVpcjbqSj3nLJ//ygnA/68Kb6WlFymXd2pwtGvZDhW0CezTg
GbWCNKZXGz5+H4QL9m6azVNMZHRP3+s5bGGmDkZOKCRC9yu+TwA3DLuuFEA9MJkT
YCS+uEEWAR+mHi+6qNntf92tPgab9/MErkTa7ev+bTXlDQEY6bq4iP5jwhIF957d
Zw6T+IEEe8HJZESlL/oyO0kDF/Czp2Nw1/TtkzQOevqRQ6yWYwNSviqdtW4oOaFI
Tp8cDhltnb41reiO24K38lGrykXHMJbq7p4=
-----END CERTIFICATE-----