Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/163b1c9f-26aa-3437-9230-0f6b7eb00b17.roa
File:                     163b1c9f-26aa-3437-9230-0f6b7eb00b17.roa (raw, json)
Hash identifier:          BvT7w8eKH4v6MtHsiKHhTU2KEyZkVNdxgv6He/hj8EI=
Subject key identifier:   E7:3F:37:35:F1:42:EB:0F:53:9A:75:1B:D5:59:EE:E1:22:E7:77:7C
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D16A9BFC9D6B17116E7046A80
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/163b1c9f-26aa-3437-9230-0f6b7eb00b17.roa
Signing time:             Mon 28 Feb 2022 05:00:00 +0000
ROA not before:           Mon 28 Feb 2022 05:00:00 +0000
ROA not after:            Wed 02 Mar 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:16:a9:bf:c9:d6:b1:71:16:e7:04:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb 28 05:00:00 2022 GMT
            Not After : Mar  2 05:00:00 2022 GMT
        Subject: CN=98d0e7f7-7402-4244-b99f-611dc9ecd5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:69:fd:c3:bd:9d:73:d2:b1:5f:7d:c9:b4:00:
                    6f:7a:31:2b:59:f5:9e:4e:f7:bf:f2:f2:31:a9:59:
                    76:90:27:08:b5:60:03:f1:ea:65:1b:14:79:14:4d:
                    9a:4c:2e:96:e9:69:7c:20:70:9c:79:88:f5:c5:be:
                    79:bf:91:2b:fc:92:f6:04:69:6a:fd:17:52:1a:08:
                    92:77:48:ce:4d:bb:43:1e:c6:2b:63:48:24:a3:55:
                    d5:98:d9:6b:d5:eb:c5:a1:4f:45:8b:26:f5:e6:7a:
                    79:e4:b6:6c:5e:ce:13:60:14:3c:f3:40:fb:32:a3:
                    8b:df:90:fa:56:b8:3b:ce:50:57:8a:02:3a:50:b9:
                    0d:a2:46:8e:58:8e:41:99:f6:20:dc:73:a8:61:ac:
                    b6:e5:64:d1:2c:5d:a8:44:c3:23:21:50:84:b4:bc:
                    21:48:da:15:1f:71:b4:02:fb:5b:8d:81:71:5f:9e:
                    a9:ca:0f:38:ab:b1:57:d7:71:fe:a4:b2:70:39:e4:
                    30:08:f3:6b:7d:c5:a1:d7:72:a1:fd:f5:06:1a:2e:
                    33:94:21:63:c8:c3:f6:d4:29:32:71:04:56:2d:cd:
                    c9:41:2e:be:89:02:2d:31:ea:1b:5b:6d:c2:d7:19:
                    e3:91:66:cc:6f:4a:36:fa:c2:5e:59:1a:70:83:e6:
                    42:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3F:37:35:F1:42:EB:0F:53:9A:75:1B:D5:59:EE:E1:22:E7:77:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/163b1c9f-26aa-3437-9230-0f6b7eb00b17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:6a:2e:49:67:95:16:11:d7:5d:c6:9e:46:a4:bb:80:07:8d:
         06:0a:ab:c8:7f:37:7d:ce:a8:85:48:ff:cc:a0:91:98:cb:ad:
         17:c0:7c:1c:ff:44:df:8c:d5:28:3c:30:16:c0:2c:be:45:a5:
         c3:48:46:3d:38:ed:98:23:28:8a:21:75:75:7c:c3:f5:23:d8:
         3a:fa:f7:91:20:1f:4e:ca:f9:09:bc:28:68:be:39:a5:57:32:
         6a:1a:e5:43:2f:70:1a:9a:4d:2f:e4:33:d3:d3:4d:70:7b:3e:
         a5:ff:fc:b3:60:14:73:9c:fc:46:bb:35:87:1d:42:25:d4:68:
         c3:e4:ea:44:ce:9a:b1:92:22:4e:51:71:03:af:cc:25:73:dc:
         db:75:a8:76:cc:80:e8:75:cc:d3:fc:a5:fc:1d:31:fa:54:34:
         c2:38:55:e3:6b:f9:0f:90:3e:93:dc:17:ae:8c:8a:43:a3:bd:
         65:d7:37:1d:bf:25:a6:39:7a:4d:d5:c8:57:55:7d:30:78:c0:
         0a:2f:d5:9d:13:98:d9:39:fa:c3:13:87:ea:28:0e:1f:eb:ca:
         08:79:df:71:54:ae:16:16:72:67:44:b4:08:58:95:66:9c:dc:
         da:3f:4a:da:31:f2:bf:77:4b:73:26:3b:74:52:e5:70:90:b9:
         05:b0:ee:df
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD0Wqb/J1rFxFucEaoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDIyODA1MDAwMFoXDTIyMDMwMjA1MDAwMFowLzEtMCsGA1UEAxMk
OThkMGU3ZjctNzQwMi00MjQ0LWI5OWYtNjExZGM5ZWNkNWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2n9w72dc9KxX33JtABvejErWfWeTve/8vIx
qVl2kCcItWAD8eplGxR5FE2aTC6W6Wl8IHCceYj1xb55v5Er/JL2BGlq/RdSGgiS
d0jOTbtDHsYrY0gko1XVmNlr1evFoU9Fiyb15np55LZsXs4TYBQ880D7MqOL35D6
Vrg7zlBXigI6ULkNokaOWI5BmfYg3HOoYay25WTRLF2oRMMjIVCEtLwhSNoVH3G0
AvtbjYFxX56pyg84q7FX13H+pLJwOeQwCPNrfcWh13Kh/fUGGi4zlCFjyMP21Cky
cQRWLc3JQS6+iQItMeobW23C1xnjkWbMb0o2+sJeWRpwg+ZCoQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOc/NzXxQusPU5p1G9VZ7uEi53d8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvMTYzYjFjOWYtMjZhYS0z
NDM3LTkyMzAtMGY2YjdlYjAwYjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIBqLklnlRYR113Gnkaku4AHjQYKq8h/N33OqIVI/8ygkZjLrRfA
fBz/RN+M1Sg8MBbALL5FpcNIRj047ZgjKIohdXV8w/Uj2Dr695EgH07K+Qm8KGi+
OaVXMmoa5UMvcBqaTS/kM9PTTXB7PqX//LNgFHOc/Ea7NYcdQiXUaMPk6kTOmrGS
Ik5RcQOvzCVz3Nt1qHbMgOh1zNP8pfwdMfpUNMI4VeNr+Q+QPpPcF66MikOjvWXX
Nx2/JaY5ek3VyFdVfTB4wAov1Z0TmNk5+sMTh+ooDh/rygh533FUrhYWcmdEtAhY
lWac3No/Stox8r93S3MmO3RS5XCQuQWw7t8=
-----END CERTIFICATE-----