Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/0fe87b9e-c3d6-3ec7-97b3-42c71bbed73c.roa
File:                     0fe87b9e-c3d6-3ec7-97b3-42c71bbed73c.roa (raw, json)
Hash identifier:          eV12RGXpR7IBiUjLiQrpWoxi0FBvuh0sNnUwBncr2V0=
Subject key identifier:   17:CC:54:03:8F:FD:E3:C1:A4:60:8A:8A:D4:C0:44:2A:26:FE:A1:83
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F432858400E55B5AFBF8350EA70DAE600
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/0fe87b9e-c3d6-3ec7-97b3-42c71bbed73c.roa
Signing time:             Sat 26 Nov 2022 12:00:00 +0000
ROA not before:           Sat 26 Nov 2022 12:00:00 +0000
ROA not after:            Tue 29 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:0e:55:b5:af:bf:83:50:ea:70:da:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 26 12:00:00 2022 GMT
            Not After : Nov 29 05:00:00 2022 GMT
        Subject: CN=276f6a57-73c4-4b66-a02b-4a04a815be62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:13:0d:70:08:96:bf:f7:3d:25:68:cd:81:21:
                    19:94:1c:8a:a0:a1:04:89:bb:fb:f7:7f:42:63:80:
                    5b:9f:e8:a8:5b:bd:c1:9a:9e:9f:55:6b:87:6d:11:
                    e8:02:5c:43:fa:2d:5b:d9:c7:f4:68:d3:c4:cc:a1:
                    98:b0:36:9b:b3:c6:98:f7:c6:85:9b:41:c7:08:60:
                    de:bc:7f:db:0c:34:06:e2:f6:d6:8d:6b:dd:a1:81:
                    a0:b8:3d:76:32:3f:08:33:57:d0:fe:41:9e:15:65:
                    23:2f:08:3e:22:cd:96:14:19:58:fc:c9:47:90:1e:
                    d6:25:3b:04:09:a1:a4:c7:99:9e:46:a7:28:4a:91:
                    ce:bb:65:92:0f:be:8d:35:88:e7:46:ea:34:ad:01:
                    66:6d:2d:37:b4:57:5c:d4:41:fe:b9:74:5f:b5:9f:
                    53:2a:11:07:a1:be:0d:67:ed:08:ac:dc:c7:50:a6:
                    ee:3f:eb:04:47:d2:22:8c:0f:0b:f7:e0:15:ee:41:
                    33:90:06:80:3a:62:4a:ac:6d:b8:83:e6:d1:6f:f2:
                    5c:1f:6f:e4:9f:0c:94:0c:39:ef:ac:24:e3:44:16:
                    ce:86:28:af:f8:9d:d2:06:4d:c5:b3:b3:98:26:76:
                    42:fb:cb:5e:3c:71:f9:9f:30:5a:ee:ff:ce:1c:ae:
                    8c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CC:54:03:8F:FD:E3:C1:A4:60:8A:8A:D4:C0:44:2A:26:FE:A1:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/0fe87b9e-c3d6-3ec7-97b3-42c71bbed73c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:49:66:1e:c8:fe:5b:c2:d2:61:a2:d0:24:67:b4:43:13:13:
         5b:27:32:76:a9:c5:62:1c:29:8b:57:4d:7b:74:2f:ad:9c:e6:
         60:2c:08:96:76:c0:33:93:e5:f3:a5:e5:5c:e1:bc:57:4b:bc:
         aa:1a:97:39:56:d1:ea:f4:d5:6b:d4:74:ea:62:97:4e:81:9e:
         5a:f7:a8:36:ae:e6:ad:d3:21:c1:5d:a0:47:8e:1e:f9:67:91:
         f0:65:36:de:e1:1d:30:13:a6:01:98:d8:0e:38:73:43:d4:9c:
         94:aa:d7:4e:f0:51:21:92:0b:c3:7a:03:8f:9a:59:34:dd:3d:
         82:ee:0f:68:d7:29:fe:8b:b3:94:93:23:d5:7b:80:65:d3:e9:
         6a:2f:4c:bc:2c:65:4d:92:3e:cb:c5:f8:25:14:94:3e:38:9a:
         ae:f3:c6:b5:a6:4f:dd:67:58:e1:40:95:13:26:55:07:af:cf:
         1c:e9:af:0c:eb:3d:94:ec:ee:bb:78:b1:53:b7:63:c7:74:d3:
         4d:51:36:42:3d:d7:fb:39:56:a8:75:d9:ec:69:ea:34:ba:ad:
         b8:26:1e:31:27:23:d3:fd:2f:fc:a8:f1:3c:22:d2:27:2e:90:
         c7:c5:b6:c1:e9:3f:dc:c6:36:2b:5f:e0:5e:a1:51:82:f9:2e:
         a7:6c:76:cc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEAOVbWvv4NQ6nDa5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMTEyNjEyMDAwMFoXDTIyMTEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
Mjc2ZjZhNTctNzNjNC00YjY2LWEwMmItNGEwNGE4MTViZTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphMNcAiWv/c9JWjNgSEZlByKoKEEibv7939C
Y4Bbn+ioW73Bmp6fVWuHbRHoAlxD+i1b2cf0aNPEzKGYsDabs8aY98aFm0HHCGDe
vH/bDDQG4vbWjWvdoYGguD12Mj8IM1fQ/kGeFWUjLwg+Is2WFBlY/MlHkB7WJTsE
CaGkx5meRqcoSpHOu2WSD76NNYjnRuo0rQFmbS03tFdc1EH+uXRftZ9TKhEHob4N
Z+0IrNzHUKbuP+sER9IijA8L9+AV7kEzkAaAOmJKrG24g+bRb/JcH2/knwyUDDnv
rCTjRBbOhiiv+J3SBk3Fs7OYJnZC+8tePHH5nzBa7v/OHK6MLwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBfMVAOP/ePBpGCKitTARCom/qGDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvMGZlODdiOWUtYzNkNi0z
ZWM3LTk3YjMtNDJjNzFiYmVkNzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG1JZh7I/lvC0mGi0CRntEMTE1snMnapxWIcKYtXTXt0L62c5mAs
CJZ2wDOT5fOl5VzhvFdLvKoalzlW0er01WvUdOpil06Bnlr3qDau5q3TIcFdoEeO
HvlnkfBlNt7hHTATpgGY2A44c0PUnJSq107wUSGSC8N6A4+aWTTdPYLuD2jXKf6L
s5STI9V7gGXT6WovTLwsZU2SPsvF+CUUlD44mq7zxrWmT91nWOFAlRMmVQevzxzp
rwzrPZTs7rt4sVO3Y8d0001RNkI91/s5Vqh12exp6jS6rbgmHjEnI9P9L/yo8Twi
0icukMfFtsHpP9zGNitf4F6hUYL5Lqdsdsw=
-----END CERTIFICATE-----