Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1aea7105-abb1-3f32-9733-3d5ad01e4de0.roa
File:                     1aea7105-abb1-3f32-9733-3d5ad01e4de0.roa (raw, json)
Hash identifier:          AbB7NmzKqfAn++AnErU0PYQe271Dps6ckrZLUmRxvv4=
Subject key identifier:   09:F2:7B:2E:1B:24:7C:BA:84:1D:3C:58:E9:BD:03:4C:B4:5D:9B:85
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FB9D8E7A85ECF523AEC1E53C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1aea7105-abb1-3f32-9733-3d5ad01e4de0.roa
Signing time:             Thu 27 Oct 2022 12:00:00 +0000
ROA not before:           Thu 27 Oct 2022 12:00:00 +0000
ROA not after:            Sun 30 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b9:d8:e7:a8:5e:cf:52:3a:ec:1e:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 27 12:00:00 2022 GMT
            Not After : Oct 30 04:00:00 2022 GMT
        Subject: CN=81520951-849c-4145-9b3e-fd92a04d7da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:41:cf:b1:a8:67:55:eb:58:2f:7a:2c:03:fa:
                    84:de:f0:87:b2:e5:c6:21:bd:50:7c:c7:3a:89:1d:
                    69:a8:3a:fa:ab:d8:00:8f:78:e2:4b:a6:69:a2:9e:
                    2e:87:63:d6:ad:b3:8b:50:5e:6a:f9:d9:61:f1:db:
                    06:92:94:81:f6:f9:e3:e6:79:8a:c5:20:bc:7a:07:
                    ae:37:58:f9:9a:09:b0:50:e7:6c:b0:04:36:49:e4:
                    f2:b9:99:45:69:11:d3:1f:6a:95:ca:70:fe:ee:a6:
                    f9:2d:7c:fb:77:3e:93:c5:23:45:fb:ba:8b:82:ed:
                    b8:8b:76:92:af:0a:c3:9e:b3:94:e4:fb:b9:f5:35:
                    bf:a0:67:ff:75:e7:a4:58:20:72:93:23:41:73:59:
                    00:3d:5e:5c:3e:f1:6a:3e:5c:b4:3c:a9:2b:2a:d4:
                    f4:c5:84:ff:a5:d3:2d:f7:a2:c2:28:30:b5:8b:6b:
                    43:5e:a0:e8:42:87:9e:db:fa:b6:c8:ff:d4:f8:22:
                    bb:58:0f:80:69:e1:aa:e9:3e:0a:a5:a0:51:82:ac:
                    c0:d9:fd:3e:f1:da:cb:a9:b7:79:bc:e1:87:19:70:
                    c0:f1:48:57:9c:66:77:71:e0:9e:9d:40:50:08:65:
                    8e:97:1d:e9:af:6f:d6:40:aa:b0:ef:0d:68:a6:f0:
                    e6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F2:7B:2E:1B:24:7C:BA:84:1D:3C:58:E9:BD:03:4C:B4:5D:9B:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1aea7105-abb1-3f32-9733-3d5ad01e4de0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:6e:d0:90:97:c4:ed:1e:70:33:83:94:87:69:8b:51:e8:fe:
         75:f7:21:6e:1d:19:ca:1b:6d:1a:70:a7:3b:91:6c:6a:c2:8a:
         b4:f2:0a:e6:e1:cc:cf:75:24:0e:a5:73:d9:e7:7d:41:a8:e9:
         6e:77:0f:15:af:da:d6:48:12:cc:e5:58:48:35:bf:06:ee:49:
         df:2a:12:6f:6c:bd:e7:3e:2c:60:c9:45:95:e5:28:90:84:19:
         0a:7c:a3:7e:c4:a0:93:95:4b:d9:78:9b:1f:08:ac:31:8d:ca:
         4d:b3:eb:a2:d0:8b:c7:b2:70:6c:e3:bc:00:20:4c:1f:3a:ff:
         c2:2a:40:6e:08:76:bc:32:06:bf:e8:02:37:61:4e:32:dd:87:
         e4:d9:08:a3:d1:6a:af:fd:41:e6:14:51:1c:8e:0f:29:c2:54:
         17:d9:ff:c6:96:44:82:8c:19:5d:4a:5f:df:c9:fe:54:f5:42:
         0d:db:b8:6c:c7:76:f7:65:06:45:67:41:39:a3:03:5c:c5:b9:
         83:8e:2b:34:d0:b0:cf:9b:a2:9b:35:af:9f:99:b8:80:d4:a0:
         b6:99:25:c8:b5:ab:c8:82:83:4d:f1:6c:35:f9:0f:f3:ce:85:
         52:38:8b:5b:89:82:e6:b8:65:6d:39:d5:a6:e0:6b:e5:31:02:
         c6:3c:0f:1b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD+52OeoXs9SOuweU8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMTAyNzEyMDAwMFoXDTIyMTAzMDA0MDAwMFowLzEtMCsGA1UEAxMk
ODE1MjA5NTEtODQ5Yy00MTQ1LTliM2UtZmQ5MmEwNGQ3ZGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskHPsahnVetYL3osA/qE3vCHsuXGIb1QfMc6
iR1pqDr6q9gAj3jiS6Zpop4uh2PWrbOLUF5q+dlh8dsGkpSB9vnj5nmKxSC8egeu
N1j5mgmwUOdssAQ2SeTyuZlFaRHTH2qVynD+7qb5LXz7dz6TxSNF+7qLgu24i3aS
rwrDnrOU5Pu59TW/oGf/deekWCBykyNBc1kAPV5cPvFqPly0PKkrKtT0xYT/pdMt
96LCKDC1i2tDXqDoQoee2/q2yP/U+CK7WA+AaeGq6T4KpaBRgqzA2f0+8drLqbd5
vOGHGXDA8UhXnGZ3ceCenUBQCGWOlx3pr2/WQKqw7w1opvDmCwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAnyey4bJHy6hB08WOm9A0y0XZuFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvMWFlYTcxMDUtYWJiMS0z
ZjMyLTk3MzMtM2Q1YWQwMWU0ZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADxu0JCXxO0ecDODlIdpi1Ho/nX3IW4dGcobbRpwpzuRbGrCirTy
CubhzM91JA6lc9nnfUGo6W53DxWv2tZIEszlWEg1vwbuSd8qEm9svec+LGDJRZXl
KJCEGQp8o37EoJOVS9l4mx8IrDGNyk2z66LQi8eycGzjvAAgTB86/8IqQG4Idrwy
Br/oAjdhTjLdh+TZCKPRaq/9QeYUURyODynCVBfZ/8aWRIKMGV1KX9/J/lT1Qg3b
uGzHdvdlBkVnQTmjA1zFuYOOKzTQsM+bops1r5+ZuIDUoLaZJci1q8iCg03xbDX5
D/POhVI4i1uJgua4ZW051abga+UxAsY8Dxs=
-----END CERTIFICATE-----