Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/15f31d5c-44c7-35ef-9205-6684e15d1f95.roa
File:                     15f31d5c-44c7-35ef-9205-6684e15d1f95.roa (raw, json)
Hash identifier:          gHiiOsbX9jRTm1nJblxyybBUSBFXz0H3H4awCSqWYgY=
Subject key identifier:   FE:72:52:D3:3A:2D:42:8E:BF:99:7F:EA:10:3B:34:0D:1F:75:D3:E8
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F432858400C38B9E3B47EEDE8F30844C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/15f31d5c-44c7-35ef-9205-6684e15d1f95.roa
Signing time:             Fri 25 Nov 2022 12:00:00 +0000
ROA not before:           Fri 25 Nov 2022 12:00:00 +0000
ROA not after:            Mon 28 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:0c:38:b9:e3:b4:7e:ed:e8:f3:08:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 25 12:00:00 2022 GMT
            Not After : Nov 28 05:00:00 2022 GMT
        Subject: CN=60667ac5-eee3-495f-b2ef-12335ced8643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ea:3f:dd:76:e5:a1:c9:3d:3f:25:43:7d:79:
                    d5:75:30:50:7d:55:10:eb:43:c9:05:ed:79:9c:c8:
                    76:67:8d:ad:05:2b:33:44:b4:5f:66:e1:19:b9:38:
                    b0:ee:e1:54:bd:fc:26:f0:43:39:fb:3b:51:82:9a:
                    a1:e6:c4:aa:c0:3d:f9:a2:f8:d0:b4:d9:7f:4d:a4:
                    14:ba:dd:3b:48:46:5a:4e:34:59:3a:97:a4:75:87:
                    5b:ff:2f:12:d3:72:8e:6e:29:0d:1f:5e:4b:b4:b3:
                    92:be:34:a6:3f:19:24:35:6c:49:28:d2:cb:ee:4e:
                    6c:71:27:a5:e9:92:fa:1b:1d:71:f8:99:6b:68:3f:
                    b0:48:7c:87:00:c4:7f:27:27:3d:f2:eb:4c:58:87:
                    b7:ec:4a:48:6c:9e:c5:62:f0:7c:bc:e6:fa:cc:01:
                    54:87:a2:4f:f7:47:42:66:44:a4:d6:37:0d:10:19:
                    aa:2a:2d:d8:41:ef:dc:7d:bd:f9:94:84:15:f8:6f:
                    11:e3:7b:d5:bc:71:16:74:1e:7f:24:e0:60:e8:bf:
                    ef:72:c7:af:4d:3d:e7:72:28:00:ce:51:25:ea:82:
                    fe:18:4c:75:69:26:cd:3d:a7:77:16:21:cd:cb:9c:
                    62:81:2a:4b:dd:d7:1a:cb:32:b0:4a:4c:bd:c0:bd:
                    79:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:72:52:D3:3A:2D:42:8E:BF:99:7F:EA:10:3B:34:0D:1F:75:D3:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/15f31d5c-44c7-35ef-9205-6684e15d1f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:b3:14:92:b9:84:b5:bd:88:5c:94:e5:0c:32:7e:7a:44:32:
         d9:6f:7a:1c:cf:17:e9:0f:2f:0d:1b:ff:7d:ef:1b:08:7e:13:
         49:2c:a0:37:68:40:bb:03:a5:81:b4:4b:b1:c9:f8:ca:1b:74:
         5e:a3:f8:53:db:eb:d8:0d:29:4d:91:d4:46:16:ca:56:3b:3f:
         f2:de:5d:ea:a7:ef:d5:a2:10:28:d5:5a:ce:61:f0:d9:6b:57:
         b6:e2:31:2c:f7:5a:43:f8:36:65:d2:d3:87:ac:a6:63:0a:05:
         92:ee:ec:aa:8e:ac:9a:d0:7c:a0:54:cb:61:73:f0:73:d3:3a:
         3c:48:70:f4:a8:01:38:5b:bb:5c:86:77:dc:4e:36:8a:80:21:
         7b:3d:67:73:9b:c3:82:8d:76:79:2e:cc:2f:d3:36:34:a1:84:
         f3:be:83:01:64:b1:15:2e:11:78:3d:54:6b:76:31:85:07:81:
         b9:1a:ed:eb:48:85:8a:03:c1:fd:30:be:64:a3:c0:7f:79:35:
         a7:d3:2c:17:68:46:6d:ef:47:3a:7f:c8:0d:30:5d:c3:37:cf:
         83:82:c4:57:18:d1:e3:f6:85:76:39:80:4f:f1:3a:51:53:b5:
         04:00:09:0d:e7:e8:71:da:93:7e:21:7a:9d:6d:1f:b4:91:8b:
         a2:7b:38:5f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEAMOLnjtH7t6PMIRMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMTEyNTEyMDAwMFoXDTIyMTEyODA1MDAwMFowLzEtMCsGA1UEAxMk
NjA2NjdhYzUtZWVlMy00OTVmLWIyZWYtMTIzMzVjZWQ4NjQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOo/3Xblock9PyVDfXnVdTBQfVUQ60PJBe15
nMh2Z42tBSszRLRfZuEZuTiw7uFUvfwm8EM5+ztRgpqh5sSqwD35ovjQtNl/TaQU
ut07SEZaTjRZOpekdYdb/y8S03KObikNH15LtLOSvjSmPxkkNWxJKNLL7k5scSel
6ZL6Gx1x+JlraD+wSHyHAMR/Jyc98utMWIe37EpIbJ7FYvB8vOb6zAFUh6JP90dC
ZkSk1jcNEBmqKi3YQe/cfb35lIQV+G8R43vVvHEWdB5/JOBg6L/vcsevTT3ncigA
zlEl6oL+GEx1aSbNPad3FiHNy5xigSpL3dcayzKwSky9wL15zwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP5yUtM6LUKOv5l/6hA7NA0fddPoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvMTVmMzFkNWMtNDRjNy0z
NWVmLTkyMDUtNjY4NGUxNWQxZjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACezFJK5hLW9iFyU5QwyfnpEMtlvehzPF+kPLw0b/33vGwh+E0ks
oDdoQLsDpYG0S7HJ+MobdF6j+FPb69gNKU2R1EYWylY7P/LeXeqn79WiECjVWs5h
8NlrV7biMSz3WkP4NmXS04espmMKBZLu7KqOrJrQfKBUy2Fz8HPTOjxIcPSoAThb
u1yGd9xONoqAIXs9Z3Obw4KNdnkuzC/TNjShhPO+gwFksRUuEXg9VGt2MYUHgbka
7etIhYoDwf0wvmSjwH95NafTLBdoRm3vRzp/yA0wXcM3z4OCxFcY0eP2hXY5gE/x
OlFTtQQACQ3n6HHak34hep1tH7SRi6J7OF8=
-----END CERTIFICATE-----