Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3b6d6311-50d0-3cfd-8043-5ba872f11b27.roa
File:                     3b6d6311-50d0-3cfd-8043-5ba872f11b27.roa (raw, json)
Hash identifier:          3LT5lMXCpCCod2bU+spez/mRKtRDG2sV9ZdXe6Os+Lk=
Subject key identifier:   89:AD:E7:54:89:28:6D:B7:2E:8D:19:08:A9:BD:8F:C8:20:37:D0:6C
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F43285840239044351BF7BDB86B7BED00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3b6d6311-50d0-3cfd-8043-5ba872f11b27.roa
Signing time:             Sat 03 Dec 2022 12:00:00 +0000
ROA not before:           Sat 03 Dec 2022 12:00:00 +0000
ROA not after:            Tue 06 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:23:90:44:35:1b:f7:bd:b8:6b:7b:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Dec  3 12:00:00 2022 GMT
            Not After : Dec  6 05:00:00 2022 GMT
        Subject: CN=b35baabb-6dcd-44b4-9b42-ec964af7cfc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:98:73:d8:2e:b6:b7:dd:0e:bf:fe:df:fe:
                    46:4b:9e:61:a2:ae:8d:c8:be:46:0d:67:a1:68:c4:
                    27:0e:72:98:12:4f:d9:e5:b7:d7:1c:13:54:52:77:
                    96:44:08:69:2f:e7:61:a5:ca:fa:e6:83:56:c2:18:
                    2a:29:95:bb:2e:71:91:35:88:9d:49:92:6b:f9:62:
                    ea:f7:74:89:9b:be:95:d8:2b:35:38:c2:f6:22:4a:
                    02:24:7e:9c:4e:81:c1:7b:4d:e7:76:3d:53:b8:ce:
                    17:0f:19:1a:72:a0:4c:51:ff:67:e8:37:49:82:75:
                    48:df:e3:55:fb:1a:7d:d8:a4:19:4b:32:44:48:48:
                    2c:47:c9:80:a9:bd:81:92:f5:90:2b:3a:70:75:40:
                    db:3b:0c:2f:9c:dd:a4:c6:96:d8:b4:56:90:4d:87:
                    45:c0:54:fb:52:72:fe:09:0a:8a:98:f5:ee:08:66:
                    17:a6:ad:87:e3:56:85:c3:16:e0:73:ca:7a:2a:67:
                    f5:a6:4e:df:4b:74:a6:ee:b0:e5:a3:bd:6c:ba:8c:
                    0e:05:7b:5d:da:9b:d0:d2:0e:9a:db:0b:64:bf:e4:
                    e6:37:9d:ba:c2:da:a1:a3:d6:d0:40:32:10:fd:9b:
                    71:dd:1b:b5:b6:81:bf:f4:7e:7b:a1:58:41:e5:65:
                    b9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AD:E7:54:89:28:6D:B7:2E:8D:19:08:A9:BD:8F:C8:20:37:D0:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3b6d6311-50d0-3cfd-8043-5ba872f11b27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:10:7e:dd:ed:e7:6c:dd:86:e8:21:20:c5:40:73:a3:27:fc:
         0c:57:1f:24:3b:69:c5:bb:5a:61:d5:db:96:6b:23:59:b6:aa:
         a2:d9:d8:a3:11:ef:24:76:4d:42:0e:de:c1:16:5c:db:b2:5c:
         f7:e2:75:1e:99:83:2f:76:fe:83:68:f4:a0:19:15:21:9f:11:
         79:bd:ed:77:4b:00:32:df:21:0d:92:a4:ec:b0:59:14:95:12:
         cb:f1:4f:63:c6:88:a0:5b:53:f5:26:60:42:c0:33:3f:6d:43:
         63:d5:da:ca:d0:3b:1c:ef:84:8b:14:67:19:27:3b:83:c9:6a:
         f5:e0:2b:50:c7:14:16:b2:61:3a:dc:1c:8a:28:65:72:00:b4:
         61:57:bd:9b:c0:3d:56:04:c6:80:dd:b0:ec:cc:bf:d9:6e:3e:
         b0:76:a9:5f:70:63:38:a6:61:61:21:ab:c9:8d:05:97:c4:1f:
         dc:38:0f:33:12:b0:f1:88:3c:f0:42:cc:25:12:a3:31:2c:24:
         e0:82:f2:f8:b3:da:27:35:77:43:eb:2e:2b:07:d1:50:3d:bf:
         67:04:6d:ec:2c:eb:69:68:95:6a:45:d1:0b:17:63:f5:b5:49:
         d7:b1:39:fa:3a:b6:82:07:59:e9:e4:ab:04:44:f9:01:08:83:
         27:d1:da:6b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEAjkEQ1G/e9uGt77QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMTIwMzEyMDAwMFoXDTIyMTIwNjA1MDAwMFowLzEtMCsGA1UEAxMk
YjM1YmFhYmItNmRjZC00NGI0LTliNDItZWM5NjRhZjdjZmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8SYc9gutrfdDr/+3/5GS55hoq6NyL5GDWeh
aMQnDnKYEk/Z5bfXHBNUUneWRAhpL+dhpcr65oNWwhgqKZW7LnGRNYidSZJr+WLq
93SJm76V2Cs1OML2IkoCJH6cToHBe03ndj1TuM4XDxkacqBMUf9n6DdJgnVI3+NV
+xp92KQZSzJESEgsR8mAqb2BkvWQKzpwdUDbOwwvnN2kxpbYtFaQTYdFwFT7UnL+
CQqKmPXuCGYXpq2H41aFwxbgc8p6Kmf1pk7fS3Sm7rDlo71suowOBXtd2pvQ0g6a
2wtkv+TmN526wtqho9bQQDIQ/Ztx3Ru1toG/9H57oVhB5WW55wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFImt51SJKG23Lo0ZCKm9j8ggN9BsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvM2I2ZDYzMTEtNTBkMC0z
Y2ZkLTgwNDMtNWJhODcyZjExYjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADcQft3t52zdhughIMVAc6Mn/AxXHyQ7acW7WmHV25ZrI1m2qqLZ
2KMR7yR2TUIO3sEWXNuyXPfidR6Zgy92/oNo9KAZFSGfEXm97XdLADLfIQ2SpOyw
WRSVEsvxT2PGiKBbU/UmYELAMz9tQ2PV2srQOxzvhIsUZxknO4PJavXgK1DHFBay
YTrcHIooZXIAtGFXvZvAPVYExoDdsOzMv9luPrB2qV9wYzimYWEhq8mNBZfEH9w4
DzMSsPGIPPBCzCUSozEsJOCC8viz2ic1d0PrLisH0VA9v2cEbews62lolWpF0QsX
Y/W1SdexOfo6toIHWenkqwRE+QEIgyfR2ms=
-----END CERTIFICATE-----