Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1ec57704-5ab9-3dcd-bf0f-6183d5bec1f7.roa
File:                     1ec57704-5ab9-3dcd-bf0f-6183d5bec1f7.roa (raw, json)
Hash identifier:          W2G7CPjBwGrVQjhAhWS0Vmkmy4KhhxO4zkIeTBmHUSU=
Subject key identifier:   F2:85:9C:3B:CD:67:6E:83:48:4E:10:CF:2D:FB:07:32:8B:77:07:74
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EB12A6072666B57A7DB5BE760
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1ec57704-5ab9-3dcd-bf0f-6183d5bec1f7.roa
Signing time:             Sun 24 Jul 2022 12:00:00 +0000
ROA not before:           Sun 24 Jul 2022 12:00:00 +0000
ROA not after:            Wed 27 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b1:2a:60:72:66:6b:57:a7:db:5b:e7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul 24 12:00:00 2022 GMT
            Not After : Jul 27 04:00:00 2022 GMT
        Subject: CN=5330687d-7e1a-4b96-b272-20da953930da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4c:b6:f9:3f:64:4f:38:a4:4f:1e:14:37:c0:
                    db:c9:a8:41:8b:e6:97:3c:ea:16:12:19:e6:2b:45:
                    75:5f:13:e1:76:1c:ce:0a:38:dd:9f:44:9c:bc:9c:
                    d5:7c:75:14:27:2a:98:ff:da:9c:cb:67:aa:9f:8d:
                    82:07:95:21:2e:f7:3e:d7:ee:04:58:d8:4b:50:f6:
                    d7:45:91:61:cc:90:e9:df:8a:69:5a:5a:8f:9e:de:
                    a4:bc:df:9d:a2:52:e1:b1:b3:f9:b0:c7:0a:7e:32:
                    1e:fd:13:43:bf:f0:02:83:3f:5d:7d:23:8d:67:6c:
                    83:b7:ee:a0:db:b9:98:55:88:28:f8:e0:45:84:b5:
                    e0:49:95:27:17:f0:34:01:9c:74:cb:21:25:df:e9:
                    df:62:a9:8b:2d:5b:17:9b:f3:96:1c:fd:82:6c:e2:
                    81:c8:d1:8a:88:be:03:b2:f1:33:92:3d:be:79:2c:
                    2d:5f:ee:cd:d5:f4:5e:e4:42:2b:59:cf:af:9e:12:
                    5d:00:9f:7c:e8:6b:1e:d3:74:e9:a4:dd:98:88:16:
                    9a:4b:5d:da:49:74:16:66:b7:95:95:35:0b:be:45:
                    97:51:1a:e8:1d:87:96:2a:7f:53:e9:f0:6f:a8:33:
                    eb:51:d0:eb:59:ea:69:aa:05:82:2a:79:ee:48:4a:
                    86:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:85:9C:3B:CD:67:6E:83:48:4E:10:CF:2D:FB:07:32:8B:77:07:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1ec57704-5ab9-3dcd-bf0f-6183d5bec1f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:06:a3:74:03:0b:d5:f0:14:0d:00:a2:bd:85:83:7e:fb:6c:
         cf:79:8d:aa:f3:cc:e1:9d:96:85:60:74:76:4a:bb:56:7c:c4:
         8d:40:ba:d2:9f:c8:cc:e7:84:2b:ac:cb:4a:cf:fb:60:ed:c5:
         02:a4:a8:45:2a:8a:82:f1:be:c7:f3:e9:d6:80:54:c9:5e:a7:
         e6:cc:c5:61:33:c1:4f:4c:6e:84:4a:b4:bc:58:7e:05:ee:b0:
         b8:b8:43:c4:24:9b:be:70:b1:5e:46:2c:6b:c7:6c:74:e5:8f:
         9d:64:32:06:f3:fe:74:eb:0c:61:79:c5:d5:55:5d:39:36:30:
         0d:6f:29:46:d5:a9:c9:09:05:e8:d3:4b:24:d7:62:83:f3:f1:
         43:60:f4:51:1c:e9:2a:26:bd:18:b5:fd:49:44:50:d9:27:da:
         d4:96:1f:95:23:a6:5a:7e:da:f5:c6:0b:09:0a:60:4a:be:28:
         13:b0:0b:08:30:1b:7b:f4:b3:ce:ad:0e:61:12:cc:c4:b2:fa:
         53:c6:0f:83:ea:6f:17:ec:7b:5c:7d:90:66:79:ca:0f:20:9b:
         44:f2:73:42:3d:2e:16:70:34:78:f9:58:af:ca:f3:e7:32:6e:
         50:19:45:b9:79:83:30:82:4f:20:d7:ee:e7:78:cf:c5:54:b1:
         93:c2:8b:6c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD6xKmByZmtXp9tb52AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDcyNDEyMDAwMFoXDTIyMDcyNzA0MDAwMFowLzEtMCsGA1UEAxMk
NTMzMDY4N2QtN2UxYS00Yjk2LWIyNzItMjBkYTk1MzkzMGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUy2+T9kTzikTx4UN8DbyahBi+aXPOoWEhnm
K0V1XxPhdhzOCjjdn0ScvJzVfHUUJyqY/9qcy2eqn42CB5UhLvc+1+4EWNhLUPbX
RZFhzJDp34ppWlqPnt6kvN+dolLhsbP5sMcKfjIe/RNDv/ACgz9dfSONZ2yDt+6g
27mYVYgo+OBFhLXgSZUnF/A0AZx0yyEl3+nfYqmLLVsXm/OWHP2CbOKByNGKiL4D
svEzkj2+eSwtX+7N1fRe5EIrWc+vnhJdAJ986Gse03TppN2YiBaaS13aSXQWZreV
lTULvkWXURroHYeWKn9T6fBvqDPrUdDrWeppqgWCKnnuSEqGhwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPKFnDvNZ26DSE4Qzy37BzKLdwd0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvMWVjNTc3MDQtNWFiOS0z
ZGNkLWJmMGYtNjE4M2Q1YmVjMWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGIGo3QDC9XwFA0Aor2Fg377bM95jarzzOGdloVgdHZKu1Z8xI1A
utKfyMznhCusy0rP+2DtxQKkqEUqioLxvsfz6daAVMlep+bMxWEzwU9MboRKtLxY
fgXusLi4Q8Qkm75wsV5GLGvHbHTlj51kMgbz/nTrDGF5xdVVXTk2MA1vKUbVqckJ
BejTSyTXYoPz8UNg9FEc6SomvRi1/UlEUNkn2tSWH5Ujplp+2vXGCwkKYEq+KBOw
CwgwG3v0s86tDmESzMSy+lPGD4Pqbxfse1x9kGZ5yg8gm0Tyc0I9LhZwNHj5WK/K
8+cyblAZRbl5gzCCTyDX7ud4z8VUsZPCi2w=
-----END CERTIFICATE-----