Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3074694f-28f2-3dbf-b489-31687209b3d5.roa
File:                     3074694f-28f2-3dbf-b489-31687209b3d5.roa (raw, json)
Hash identifier:          auFNBIEKLJbmsl/P/rbjXq1vAuLEguSJK+GM95dcSdg=
Subject key identifier:   DD:64:6F:5F:BE:63:AB:4D:23:5F:E5:D1:9F:A6:06:42:9A:63:F0:B6
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FC6982886080EE40FA2337300
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3074694f-28f2-3dbf-b489-31687209b3d5.roa
Signing time:             Mon 31 Oct 2022 12:00:00 +0000
ROA not before:           Mon 31 Oct 2022 12:00:00 +0000
ROA not after:            Thu 03 Nov 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c6:98:28:86:08:0e:e4:0f:a2:33:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 31 12:00:00 2022 GMT
            Not After : Nov  3 04:00:00 2022 GMT
        Subject: CN=3f261c72-2b03-4bb2-aa42-4a8a766433b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a1:70:b1:85:eb:fd:56:9f:68:96:fd:f7:b2:
                    fb:c3:7b:d7:23:23:2d:1e:43:c4:bb:22:76:af:f3:
                    b0:3c:a9:fa:96:90:eb:fb:69:32:5f:ea:37:30:35:
                    61:14:bc:05:cd:90:1f:5f:c4:e2:31:df:0e:ae:29:
                    8a:f5:e9:1a:5e:7e:4d:ea:a9:f3:be:1b:03:43:b2:
                    91:97:8b:95:1f:d0:ab:18:61:38:fe:23:b8:1a:65:
                    e3:de:6e:47:c6:e1:1b:55:f9:c3:3d:e2:8a:64:f2:
                    72:1b:be:5a:27:d9:30:dc:b1:52:61:0c:bc:97:d4:
                    19:ac:8d:ac:18:76:e0:9e:0d:f6:18:1c:0f:d7:ef:
                    a4:da:fd:4e:68:ba:d6:e7:b3:2d:84:de:f7:a9:86:
                    30:bc:67:de:38:4b:0b:47:6c:ff:de:09:54:46:ca:
                    dc:dc:b6:67:d3:79:5b:e3:a2:0a:18:21:2e:d3:da:
                    b1:87:40:0b:11:8a:e7:e1:40:e8:82:1f:90:ee:8a:
                    4a:68:6e:84:42:de:1d:f8:0e:8f:41:d7:37:2b:2d:
                    cc:70:84:36:a8:c5:33:99:1c:dd:42:ef:26:9d:1b:
                    76:45:e2:2b:18:71:eb:c4:e8:99:0a:22:7b:42:bf:
                    42:fa:c9:62:8f:c4:c6:49:92:ca:d7:1a:49:ba:4a:
                    40:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:64:6F:5F:BE:63:AB:4D:23:5F:E5:D1:9F:A6:06:42:9A:63:F0:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3074694f-28f2-3dbf-b489-31687209b3d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:75:0a:da:7f:e6:b3:c4:94:44:85:86:f6:5b:76:30:a5:61:
         0c:97:ca:8d:59:3c:58:de:72:89:44:b8:56:58:4c:44:53:d9:
         19:3a:92:60:33:a7:87:e8:7e:62:58:90:f7:44:d7:98:97:89:
         bf:c0:40:fd:5e:46:aa:7c:f6:76:33:90:0d:6c:2a:f2:4b:ad:
         bd:bb:57:f4:60:6f:d2:25:74:bf:b3:cd:86:b5:7b:c2:db:74:
         e9:93:d2:7a:15:da:1e:0e:8f:ec:6e:e8:ca:33:36:3b:e5:be:
         a3:70:07:5c:d4:6c:58:44:49:02:78:12:f5:53:65:e9:c5:86:
         11:e4:d0:54:f0:cf:c5:78:8e:b9:15:98:33:4a:0a:e7:fd:f7:
         37:fe:86:61:16:9b:d1:9e:c7:36:ea:f8:60:98:91:b4:a5:dc:
         1b:7f:84:90:66:cc:e8:27:e3:74:ce:4a:bb:1e:84:b4:0c:36:
         e9:66:c7:2d:51:24:25:ac:4b:1c:9e:92:d3:5f:c6:fe:e1:22:
         c4:41:e3:ed:8b:b0:e5:44:46:9a:1f:38:9d:7b:b3:0a:f7:b8:
         9a:98:be:de:47:b9:04:9a:89:a1:c9:26:76:46:80:50:f2:ec:
         72:32:15:29:08:9d:80:a2:80:55:41:c9:7f:ec:c2:4e:8d:56:
         d8:49:f8:cc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD/GmCiGCA7kD6IzcwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMTAzMTEyMDAwMFoXDTIyMTEwMzA0MDAwMFowLzEtMCsGA1UEAxMk
M2YyNjFjNzItMmIwMy00YmIyLWFhNDItNGE4YTc2NjQzM2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6FwsYXr/VafaJb997L7w3vXIyMtHkPEuyJ2
r/OwPKn6lpDr+2kyX+o3MDVhFLwFzZAfX8TiMd8OrimK9ekaXn5N6qnzvhsDQ7KR
l4uVH9CrGGE4/iO4GmXj3m5HxuEbVfnDPeKKZPJyG75aJ9kw3LFSYQy8l9QZrI2s
GHbgng32GBwP1++k2v1OaLrW57MthN73qYYwvGfeOEsLR2z/3glURsrc3LZn03lb
46IKGCEu09qxh0ALEYrn4UDogh+Q7opKaG6EQt4d+A6PQdc3Ky3McIQ2qMUzmRzd
Qu8mnRt2ReIrGHHrxOiZCiJ7Qr9C+slij8TGSZLK1xpJukpAUQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN1kb1++Y6tNI1/l0Z+mBkKaY/C2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvMzA3NDY5NGYtMjhmMi0z
ZGJmLWI0ODktMzE2ODcyMDliM2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMB1Ctp/5rPElESFhvZbdjClYQyXyo1ZPFjecolEuFZYTERT2Rk6
kmAzp4fofmJYkPdE15iXib/AQP1eRqp89nYzkA1sKvJLrb27V/Rgb9IldL+zzYa1
e8LbdOmT0noV2h4Oj+xu6MozNjvlvqNwB1zUbFhESQJ4EvVTZenFhhHk0FTwz8V4
jrkVmDNKCuf99zf+hmEWm9Gexzbq+GCYkbSl3Bt/hJBmzOgn43TOSrsehLQMNulm
xy1RJCWsSxyektNfxv7hIsRB4+2LsOVERpofOJ17swr3uJqYvt5HuQSaiaHJJnZG
gFDy7HIyFSkInYCigFVByX/swk6NVthJ+Mw=
-----END CERTIFICATE-----