Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/167be533-8cf5-34c0-8a48-7069bb358351.roa
File:                     167be533-8cf5-34c0-8a48-7069bb358351.roa (raw, json)
Hash identifier:          SzI2PeOW2Ia1dvrcOAeXm2JyVlDNBFFFRYsEVwuaeSU=
Subject key identifier:   58:7D:74:6E:29:C8:0A:4F:9B:A9:A7:4E:B3:AA:14:F2:68:13:22:45
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FAF51FB82C5AD4F2371148940
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/167be533-8cf5-34c0-8a48-7069bb358351.roa
Signing time:             Sun 23 Oct 2022 12:00:00 +0000
ROA not before:           Sun 23 Oct 2022 12:00:00 +0000
ROA not after:            Wed 26 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:af:51:fb:82:c5:ad:4f:23:71:14:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 23 12:00:00 2022 GMT
            Not After : Oct 26 04:00:00 2022 GMT
        Subject: CN=3e0b10a5-9996-4c97-97e5-79b8d1b3a3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:94:b2:76:7a:a4:67:6f:e1:70:94:ac:45:10:
                    d1:5a:d3:d7:70:c7:81:7c:76:63:71:5a:1b:66:d4:
                    ca:22:01:5e:b4:85:d4:9d:22:a7:74:8c:78:36:97:
                    b2:ab:14:25:d5:c1:7a:06:b9:d8:c4:dd:55:28:6a:
                    47:86:71:49:36:81:4c:db:8a:b1:06:ff:af:65:ea:
                    bc:a7:2e:30:fa:b8:ce:00:2d:d4:1c:a7:b3:51:d9:
                    91:09:9d:2a:8e:52:ec:2f:0e:87:08:d1:65:dd:72:
                    be:d2:1d:68:f2:4e:c9:65:b2:91:af:dd:a8:86:e0:
                    ab:95:28:95:53:e9:7a:f5:93:94:22:0e:74:e2:3f:
                    a5:cf:49:eb:99:82:f2:86:3c:5a:41:f3:f7:d0:2e:
                    5a:f5:a5:9b:a9:16:1f:2d:40:61:53:fe:95:63:cb:
                    bb:14:4f:8e:d1:75:ff:00:9c:51:b2:50:c1:6f:10:
                    df:2f:f1:9b:05:20:02:a4:2f:94:5a:8a:fe:7b:51:
                    e1:7a:58:c1:c5:9d:ec:6b:5b:79:7b:fd:3d:bf:93:
                    61:d7:63:89:89:2e:7c:a3:45:65:bc:fc:92:20:75:
                    ee:4f:65:4d:90:b1:18:09:3d:45:72:ac:d9:0c:e7:
                    74:f0:02:7c:f6:db:f6:b2:6c:bb:37:0a:d3:55:5c:
                    eb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7D:74:6E:29:C8:0A:4F:9B:A9:A7:4E:B3:AA:14:F2:68:13:22:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/167be533-8cf5-34c0-8a48-7069bb358351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:8d:f1:d0:c2:a8:28:1b:5e:60:8b:ea:e9:00:f3:b3:59:f2:
         52:16:dc:36:ff:c0:39:ab:d1:e0:34:ab:5b:4d:d3:ab:4f:89:
         5a:07:2d:02:a2:77:eb:1a:09:79:17:87:93:a5:83:d7:a1:98:
         96:94:2f:e4:0e:fd:f4:54:cd:47:e7:1d:9c:84:01:d2:1d:f1:
         ab:c5:e1:9e:e0:e4:bd:3e:a4:1f:3e:53:09:7d:7f:2c:20:35:
         65:c9:11:8a:5c:53:3a:43:19:8c:fd:18:31:c9:73:cc:cc:9a:
         b3:83:c8:8d:4b:da:d1:9b:cd:f9:d8:06:63:8a:9e:41:a3:23:
         91:09:9d:34:c9:d3:44:e2:65:8c:e1:15:ba:4e:8d:96:76:57:
         da:ca:81:94:ef:86:4b:c1:e2:af:80:95:9b:f1:09:46:39:c6:
         ed:d5:ed:2b:13:81:2a:4e:31:d2:e6:06:a3:65:aa:33:66:81:
         f7:94:23:c4:86:5c:63:ed:b1:48:23:c2:d0:3e:f5:56:c5:08:
         ab:e6:d7:da:f2:69:f3:0c:5a:bf:a3:36:9f:dd:75:43:7f:cc:
         21:2e:8b:38:8b:c2:a3:50:e2:70:64:19:21:09:07:84:cc:c3:
         f0:ba:30:76:93:0b:71:4f:0d:0e:66:f5:d6:dc:92:5d:de:9f:
         44:f5:fb:33
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD+vUfuCxa1PI3EUiUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMTAyMzEyMDAwMFoXDTIyMTAyNjA0MDAwMFowLzEtMCsGA1UEAxMk
M2UwYjEwYTUtOTk5Ni00Yzk3LTk3ZTUtNzliOGQxYjNhM2I1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5SydnqkZ2/hcJSsRRDRWtPXcMeBfHZjcVob
ZtTKIgFetIXUnSKndIx4NpeyqxQl1cF6BrnYxN1VKGpHhnFJNoFM24qxBv+vZeq8
py4w+rjOAC3UHKezUdmRCZ0qjlLsLw6HCNFl3XK+0h1o8k7JZbKRr92ohuCrlSiV
U+l69ZOUIg504j+lz0nrmYLyhjxaQfP30C5a9aWbqRYfLUBhU/6VY8u7FE+O0XX/
AJxRslDBbxDfL/GbBSACpC+UWor+e1HheljBxZ3sa1t5e/09v5Nh12OJiS58o0Vl
vPySIHXuT2VNkLEYCT1FcqzZDOd08AJ89tv2smy7NwrTVVzr5wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFh9dG4pyApPm6mnTrOqFPJoEyJFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvMTY3YmU1MzMtOGNmNS0z
NGMwLThhNDgtNzA2OWJiMzU4MzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABuN8dDCqCgbXmCL6ukA87NZ8lIW3Db/wDmr0eA0q1tN06tPiVoH
LQKid+saCXkXh5Olg9ehmJaUL+QO/fRUzUfnHZyEAdId8avF4Z7g5L0+pB8+Uwl9
fywgNWXJEYpcUzpDGYz9GDHJc8zMmrODyI1L2tGbzfnYBmOKnkGjI5EJnTTJ00Ti
ZYzhFbpOjZZ2V9rKgZTvhkvB4q+AlZvxCUY5xu3V7SsTgSpOMdLmBqNlqjNmgfeU
I8SGXGPtsUgjwtA+9VbFCKvm19ryafMMWr+jNp/ddUN/zCEuiziLwqNQ4nBkGSEJ
B4TMw/C6MHaTC3FPDQ5m9dbckl3en0T1+zM=
-----END CERTIFICATE-----