Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3b550b0e-3034-3ed6-b6f7-341f98238f90.roa
File:                     3b550b0e-3034-3ed6-b6f7-341f98238f90.roa (raw, json)
Hash identifier:          Zh8tbUTURgYH+Fm+LV5rl7EBBJkLdwyB6QwOARjnfN0=
Subject key identifier:   8B:47:D3:6A:AF:8C:44:59:A4:5A:52:78:53:C1:D4:A9:25:F8:3B:8A
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E5E8983F3695A4214F67F8CC0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3b550b0e-3034-3ed6-b6f7-341f98238f90.roa
Signing time:             Fri 24 Jun 2022 12:00:00 +0000
ROA not before:           Fri 24 Jun 2022 12:00:00 +0000
ROA not after:            Mon 27 Jun 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:5e:89:83:f3:69:5a:42:14:f6:7f:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jun 24 12:00:00 2022 GMT
            Not After : Jun 27 04:00:00 2022 GMT
        Subject: CN=247e6654-df1b-47e4-ac59-c2a4d7286d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:49:0c:a2:53:90:21:ca:ea:8c:8d:c0:50:b5:
                    40:ca:c0:9f:0e:94:62:96:34:ad:e5:4e:1c:83:73:
                    14:45:20:2d:70:7c:2a:53:24:21:a8:3e:e8:e2:ed:
                    65:70:09:0e:cd:4a:b2:92:db:e3:93:6d:a3:a2:ee:
                    85:60:48:a4:6f:e2:e0:2e:c8:24:e9:29:02:63:ac:
                    90:69:83:44:e3:d7:af:1c:d8:1c:d1:c8:1a:eb:da:
                    2e:fe:7e:16:b1:b8:c9:f8:db:79:31:cb:c3:aa:4b:
                    d1:4e:bd:9f:ff:55:4d:e2:80:78:84:e5:a8:a9:e5:
                    26:92:91:8f:19:49:f4:9e:c4:4c:14:e5:81:96:c1:
                    78:4f:9a:3d:f8:ce:af:11:83:c9:92:b1:41:97:91:
                    8b:70:e7:7c:fa:d1:06:65:c3:f0:28:25:38:d4:48:
                    ff:15:f8:3a:a6:13:7e:be:78:0d:12:7f:d4:59:cf:
                    71:53:c9:80:25:35:fe:92:bf:35:9e:a1:18:31:d1:
                    b4:cb:d6:92:d0:3a:b7:87:61:a2:00:71:75:47:87:
                    98:67:8f:03:4f:e7:e3:74:2d:61:b5:54:a8:1d:1d:
                    bf:91:c4:3b:59:40:7b:91:6c:5e:f7:11:7d:f2:f3:
                    79:53:cb:bf:31:7a:91:24:a0:a9:cf:81:9d:85:28:
                    20:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:47:D3:6A:AF:8C:44:59:A4:5A:52:78:53:C1:D4:A9:25:F8:3B:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3b550b0e-3034-3ed6-b6f7-341f98238f90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:aa:98:1b:58:3f:79:27:e2:04:a0:2d:3c:97:0c:03:e3:d4:
         60:be:3d:11:f9:15:84:f5:a5:cb:c6:37:0c:53:5e:b8:67:11:
         fd:9c:e5:66:9f:5b:9c:7c:e8:7a:2a:bf:e7:56:73:ed:1c:0e:
         e7:fd:cd:03:6e:32:1b:8a:80:d3:55:95:82:ff:4d:ba:48:2b:
         46:d1:07:49:7e:40:5d:b9:3f:3b:0d:fc:db:3b:91:4d:ff:7b:
         c5:ac:72:e2:22:83:fc:a1:3b:16:93:d5:1d:78:89:b8:34:4e:
         58:a0:21:e8:1d:22:ab:88:d8:eb:8c:34:34:33:6b:b9:99:3d:
         7d:73:d2:da:4d:01:7a:48:3f:93:b6:5c:8c:1c:55:cf:88:bc:
         b9:60:95:bd:a1:88:0a:f4:f5:7b:88:83:36:58:4f:3a:42:c8:
         16:c9:a3:0d:a1:92:12:06:4e:71:de:b1:d7:63:ef:e3:c7:d5:
         58:3b:6f:5c:60:90:b9:46:fe:9a:45:74:80:7f:04:e6:8f:6c:
         e1:39:40:da:19:c2:62:31:36:5e:a7:2d:09:b9:1f:e1:82:2f:
         93:9c:a8:9a:4b:85:4b:0a:30:d8:78:c7:16:1d:3d:18:a0:85:
         6c:2f:bf:9b:f6:8d:2f:f7:7d:56:92:22:32:c8:64:e6:f3:50:
         d4:49:9b:a6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD5eiYPzaVpCFPZ/jMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDYyNDEyMDAwMFoXDTIyMDYyNzA0MDAwMFowLzEtMCsGA1UEAxMk
MjQ3ZTY2NTQtZGYxYi00N2U0LWFjNTktYzJhNGQ3Mjg2ZDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0kMolOQIcrqjI3AULVAysCfDpRiljSt5U4c
g3MURSAtcHwqUyQhqD7o4u1lcAkOzUqyktvjk22jou6FYEikb+LgLsgk6SkCY6yQ
aYNE49evHNgc0cga69ou/n4WsbjJ+Nt5McvDqkvRTr2f/1VN4oB4hOWoqeUmkpGP
GUn0nsRMFOWBlsF4T5o9+M6vEYPJkrFBl5GLcOd8+tEGZcPwKCU41Ej/Ffg6phN+
vngNEn/UWc9xU8mAJTX+kr81nqEYMdG0y9aS0Dq3h2GiAHF1R4eYZ48DT+fjdC1h
tVSoHR2/kcQ7WUB7kWxe9xF98vN5U8u/MXqRJKCpz4GdhSggXwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFItH02qvjERZpFpSeFPB1Kkl+DuKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvM2I1NTBiMGUtMzAzNC0z
ZWQ2LWI2ZjctMzQxZjk4MjM4ZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEiqmBtYP3kn4gSgLTyXDAPj1GC+PRH5FYT1pcvGNwxTXrhnEf2c
5WafW5x86Hoqv+dWc+0cDuf9zQNuMhuKgNNVlYL/TbpIK0bRB0l+QF25PzsN/Ns7
kU3/e8WscuIig/yhOxaT1R14ibg0TligIegdIquI2OuMNDQza7mZPX1z0tpNAXpI
P5O2XIwcVc+IvLlglb2hiAr09XuIgzZYTzpCyBbJow2hkhIGTnHesddj7+PH1Vg7
b1xgkLlG/ppFdIB/BOaPbOE5QNoZwmIxNl6nLQm5H+GCL5OcqJpLhUsKMNh4xxYd
PRighWwvv5v2jS/3fVaSIjLIZObzUNRJm6Y=
-----END CERTIFICATE-----