Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/0db3e406-610c-32c3-98e8-a6179b8b2f3f.roa
File:                     0db3e406-610c-32c3-98e8-a6179b8b2f3f.roa (raw, json)
Hash identifier:          gr7dc+wFYbC5s8/Rymk2vUJjwz8UYKQSK+YZZDhIvD4=
Subject key identifier:   D0:C8:65:4D:5F:0A:F0:FA:38:61:6E:8D:92:E5:BF:1B:0E:C5:19:BE
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D18CBF736F113F052A1FC6400
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/0db3e406-610c-32c3-98e8-a6179b8b2f3f.roa
Signing time:             Tue 01 Mar 2022 05:00:00 +0000
ROA not before:           Tue 01 Mar 2022 05:00:00 +0000
ROA not after:            Thu 03 Mar 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:18:cb:f7:36:f1:13:f0:52:a1:fc:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar  1 05:00:00 2022 GMT
            Not After : Mar  3 05:00:00 2022 GMT
        Subject: CN=3887ed5f-6dd5-4edf-a0dc-c65b8734afa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b9:21:60:ff:cd:b2:59:bf:3e:5f:8b:e2:2b:
                    b3:e6:d8:86:c2:6b:be:28:9f:b9:7f:4a:ce:36:5f:
                    22:49:ba:b2:fa:75:07:61:83:50:80:86:df:d1:57:
                    6e:38:fc:12:cf:8f:a5:a1:fa:01:ab:53:94:ef:be:
                    a9:f3:02:77:a1:6a:bc:ac:6f:0f:10:dd:da:3b:b3:
                    5a:f5:38:f4:55:42:36:4e:e1:05:2f:b8:d7:84:0d:
                    1a:b0:ba:d3:33:e2:93:24:9e:33:96:86:23:1c:54:
                    8a:ac:66:82:f5:c6:05:6c:de:cd:cc:1e:ce:fb:f0:
                    8d:bf:14:65:7c:6d:db:c7:b5:c0:ee:92:97:b8:6f:
                    52:69:ce:51:11:58:4d:1e:ea:c4:b7:b8:cc:61:65:
                    c4:fb:10:cc:7a:cb:20:9e:a2:08:3b:3f:be:d0:f0:
                    2c:da:d9:b3:67:c7:32:ee:54:76:9e:32:f1:80:86:
                    b3:1d:c0:94:a4:69:fb:b7:cd:08:7f:f3:42:5d:61:
                    57:cd:78:83:1c:48:cf:b3:57:14:9c:cd:e7:b4:7f:
                    3c:2e:9a:e2:7c:6e:53:4e:55:ad:22:0b:f1:06:7e:
                    3c:90:5d:dd:d1:6a:75:a7:a6:6c:79:10:61:25:d0:
                    09:68:70:fc:8b:20:ef:d0:0a:cd:ee:e6:c6:2c:d7:
                    9d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C8:65:4D:5F:0A:F0:FA:38:61:6E:8D:92:E5:BF:1B:0E:C5:19:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/0db3e406-610c-32c3-98e8-a6179b8b2f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:06:c5:e5:45:41:dc:2b:eb:67:59:11:6d:bb:c2:0f:0c:12:
         ba:03:db:44:e6:fe:61:15:06:5a:99:b5:b7:0a:19:38:13:5d:
         c0:33:d7:08:70:1c:b8:49:fb:f3:b4:4b:4d:9e:5f:be:46:28:
         17:f1:fe:3f:68:04:b9:73:a5:81:67:29:70:84:ea:a5:87:76:
         01:a2:11:f1:d1:bb:5c:02:f7:e6:57:f3:b6:63:4b:90:a1:44:
         0d:1c:cd:02:05:c1:15:ad:64:ff:48:59:fa:0f:12:28:c0:f8:
         9a:9b:90:d4:44:2b:ea:96:0b:0b:27:db:e2:c3:ff:a2:be:d0:
         92:4b:87:62:3f:89:39:a5:2d:ba:2d:f0:8b:79:52:c0:d2:48:
         a0:c5:22:99:ca:ec:a9:c1:db:5e:54:b4:04:ab:34:a4:73:85:
         7c:57:ec:a3:e6:dd:ee:5e:1a:bc:f2:24:c8:c7:0f:10:cc:71:
         65:a2:fe:14:c7:07:31:42:ed:6d:e9:91:c7:7a:c6:65:38:24:
         7b:9f:b7:bd:c4:ac:4f:6c:c9:be:75:0b:ba:36:1e:f8:26:bd:
         a7:ca:c2:46:97:9b:21:04:bd:f9:ce:d6:0a:75:e0:12:ac:eb:
         f5:e6:fd:1b:4f:f9:50:e6:10:fd:a3:36:6e:a5:7c:c1:93:3d:
         29:d4:a9:df
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD0Yy/c28RPwUqH8ZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDMwMTA1MDAwMFoXDTIyMDMwMzA1MDAwMFowLzEtMCsGA1UEAxMk
Mzg4N2VkNWYtNmRkNS00ZWRmLWEwZGMtYzY1Yjg3MzRhZmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7khYP/Nslm/Pl+L4iuz5tiGwmu+KJ+5f0rO
Nl8iSbqy+nUHYYNQgIbf0VduOPwSz4+lofoBq1OU776p8wJ3oWq8rG8PEN3aO7Na
9Tj0VUI2TuEFL7jXhA0asLrTM+KTJJ4zloYjHFSKrGaC9cYFbN7NzB7O+/CNvxRl
fG3bx7XA7pKXuG9Sac5REVhNHurEt7jMYWXE+xDMessgnqIIOz++0PAs2tmzZ8cy
7lR2njLxgIazHcCUpGn7t80If/NCXWFXzXiDHEjPs1cUnM3ntH88LprifG5TTlWt
IgvxBn48kF3d0Wp1p6ZseRBhJdAJaHD8iyDv0ArN7ubGLNedEQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNDIZU1fCvD6OGFujZLlvxsOxRm+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvMGRiM2U0MDYtNjEwYy0z
MmMzLTk4ZTgtYTYxNzliOGIyZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFcGxeVFQdwr62dZEW27wg8MEroD20Tm/mEVBlqZtbcKGTgTXcAz
1whwHLhJ+/O0S02eX75GKBfx/j9oBLlzpYFnKXCE6qWHdgGiEfHRu1wC9+ZX87Zj
S5ChRA0czQIFwRWtZP9IWfoPEijA+JqbkNREK+qWCwsn2+LD/6K+0JJLh2I/iTml
Lbot8It5UsDSSKDFIpnK7KnB215UtASrNKRzhXxX7KPm3e5eGrzyJMjHDxDMcWWi
/hTHBzFC7W3pkcd6xmU4JHuft73ErE9syb51C7o2HvgmvafKwkaXmyEEvfnO1gp1
4BKs6/Xm/RtP+VDmEP2jNm6lfMGTPSnUqd8=
-----END CERTIFICATE-----