Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/258c10e2-8a5e-340a-aec8-31ed135aa388.roa
File:                     258c10e2-8a5e-340a-aec8-31ed135aa388.roa (raw, json)
Hash identifier:          ZK0EAziamccHX8g/YsIbIk/8kFKttDTVEj/aAnL+mCQ=
Subject key identifier:   FE:DD:59:D6:9A:0B:BF:2C:BF:BB:7E:21:6C:D2:9F:9C:26:98:0E:A0
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F604C157A0BA49B340D888940
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/258c10e2-8a5e-340a-aec8-31ed135aa388.roa
Signing time:             Sun 25 Sep 2022 12:00:00 +0000
ROA not before:           Sun 25 Sep 2022 12:00:00 +0000
ROA not after:            Wed 28 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:60:4c:15:7a:0b:a4:9b:34:0d:88:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep 25 12:00:00 2022 GMT
            Not After : Sep 28 04:00:00 2022 GMT
        Subject: CN=32725418-284b-4e08-9995-509e10d69267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c9:86:4d:ed:9a:cb:d0:e4:86:67:0f:52:45:
                    ce:67:2e:80:69:77:71:1c:01:46:33:75:21:81:38:
                    94:23:6b:8d:68:91:d5:60:4f:17:ea:ad:df:74:1d:
                    2c:d1:34:b3:2c:a3:06:42:d6:78:df:9f:c6:72:bf:
                    4f:0f:04:47:e8:6f:53:70:26:eb:ab:b1:76:eb:41:
                    4a:27:1c:e5:85:d6:6d:ec:9c:f8:29:43:23:cc:cb:
                    f9:85:16:7d:ac:5f:43:e1:c7:ca:1d:c3:3e:e1:09:
                    db:30:27:26:c3:91:2d:6f:7f:50:0a:96:cc:10:ce:
                    f6:85:ff:0e:b9:03:a1:8f:a0:f4:eb:49:eb:98:2d:
                    5f:d6:31:7f:78:4a:39:d1:83:4d:39:de:fd:c8:97:
                    9e:0b:a8:cf:5f:9c:18:dc:67:5b:ab:46:5f:cb:c9:
                    68:75:44:c0:2c:43:9a:17:f6:7b:f3:20:10:db:1c:
                    05:71:8e:32:fd:cf:36:01:ed:30:26:a7:6d:bc:03:
                    9c:5e:13:83:90:25:4c:a9:94:4b:f9:f4:93:ce:c2:
                    5c:ff:97:59:d1:ad:e5:09:15:00:fc:2d:68:d5:ee:
                    9d:04:62:a6:95:a0:ec:3a:2e:6f:a0:8e:e5:6a:51:
                    f0:25:2e:22:d4:dc:f4:c1:0d:9d:cb:e6:85:a5:f5:
                    74:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DD:59:D6:9A:0B:BF:2C:BF:BB:7E:21:6C:D2:9F:9C:26:98:0E:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/258c10e2-8a5e-340a-aec8-31ed135aa388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:75:07:86:f4:55:4c:03:12:b3:68:7f:9b:73:24:f6:4e:38:
         e8:5d:12:7f:ca:20:ce:f2:35:31:9d:51:e6:c3:f4:53:6f:44:
         38:0c:47:24:05:6a:64:81:01:77:48:bd:4e:71:89:4d:1f:13:
         04:17:ba:0b:e1:8e:6a:59:9b:70:16:b4:cd:36:07:df:a4:6a:
         c2:a9:31:c4:0a:90:d1:07:6a:a9:1e:c1:f9:bc:7f:78:72:0f:
         a7:2c:43:a3:c9:d4:1f:04:b1:52:69:6a:87:b9:18:f8:1a:a8:
         20:c6:e3:87:79:ac:5a:14:4f:da:79:e4:08:0d:4c:87:2c:39:
         79:f1:d6:dd:88:eb:b9:6b:8f:0b:d8:e1:5e:90:1a:7b:e7:0d:
         11:72:e1:2b:eb:a8:28:73:0a:08:36:dc:e9:1a:c9:6c:87:33:
         67:41:49:bd:25:bf:d7:c8:90:e7:d3:78:70:f4:30:00:e2:a8:
         ef:c3:97:73:0a:7e:e9:b9:51:ee:83:30:c1:e2:9e:e9:85:a1:
         57:3b:86:ff:15:04:dc:43:ba:ab:75:0d:7b:ad:95:9a:ca:88:
         44:39:61:ff:88:5c:b2:f3:e1:0c:dd:82:46:2a:bd:37:9d:27:
         1c:a8:eb:ed:27:66:5b:2d:95:98:e0:3a:a5:cb:a3:0a:b8:15:
         ab:56:ed:9d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD9gTBV6C6SbNA2IiUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDkyNTEyMDAwMFoXDTIyMDkyODA0MDAwMFowLzEtMCsGA1UEAxMk
MzI3MjU0MTgtMjg0Yi00ZTA4LTk5OTUtNTA5ZTEwZDY5MjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8mGTe2ay9DkhmcPUkXOZy6AaXdxHAFGM3Uh
gTiUI2uNaJHVYE8X6q3fdB0s0TSzLKMGQtZ435/Gcr9PDwRH6G9TcCbrq7F260FK
JxzlhdZt7Jz4KUMjzMv5hRZ9rF9D4cfKHcM+4QnbMCcmw5Etb39QCpbMEM72hf8O
uQOhj6D060nrmC1f1jF/eEo50YNNOd79yJeeC6jPX5wY3Gdbq0Zfy8lodUTALEOa
F/Z78yAQ2xwFcY4y/c82Ae0wJqdtvAOcXhODkCVMqZRL+fSTzsJc/5dZ0a3lCRUA
/C1o1e6dBGKmlaDsOi5voI7lalHwJS4i1Nz0wQ2dy+aFpfV0uwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP7dWdaaC78sv7t+IWzSn5wmmA6gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvMjU4YzEwZTItOGE1ZS0z
NDBhLWFlYzgtMzFlZDEzNWFhMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHx1B4b0VUwDErNof5tzJPZOOOhdEn/KIM7yNTGdUebD9FNvRDgM
RyQFamSBAXdIvU5xiU0fEwQXugvhjmpZm3AWtM02B9+kasKpMcQKkNEHaqkewfm8
f3hyD6csQ6PJ1B8EsVJpaoe5GPgaqCDG44d5rFoUT9p55AgNTIcsOXnx1t2I67lr
jwvY4V6QGnvnDRFy4SvrqChzCgg23OkayWyHM2dBSb0lv9fIkOfTeHD0MADiqO/D
l3MKfum5Ue6DMMHinumFoVc7hv8VBNxDuqt1DXutlZrKiEQ5Yf+IXLLz4QzdgkYq
vTedJxyo6+0nZlstlZjgOqXLowq4FatW7Z0=
-----END CERTIFICATE-----