Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/40aab24a-211b-3c3c-ba2f-28c4c297cba7.roa
File:                     40aab24a-211b-3c3c-ba2f-28c4c297cba7.roa (raw, json)
Hash identifier:          eZ51hZkB0yyuyPq2rmHQMW71w/ft7haIU1x7+ZDe9bc=
Subject key identifier:   CC:26:E1:C7:66:46:CD:22:C6:82:D5:02:C1:41:F1:EC:0D:A9:BF:E6
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F0B807A2B187BE8274758F080
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/40aab24a-211b-3c3c-ba2f-28c4c297cba7.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Sun 28 Aug 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:0b:80:7a:2b:18:7b:e8:27:47:58:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Aug 28 04:00:00 2022 GMT
        Subject: CN=c534f878-1d24-41b1-b8ac-1df98876698a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:17:fc:56:bd:4b:53:b4:49:d2:40:3c:31:44:
                    5b:af:59:4f:38:82:e1:3a:7f:40:aa:c5:aa:8e:6e:
                    f3:9f:bd:af:83:cd:bd:16:0e:f1:79:64:71:04:04:
                    00:0a:6b:2b:89:d3:df:2c:d8:ea:08:96:77:ad:f6:
                    bd:0f:9e:2d:f1:8d:78:e9:22:1e:90:ce:3e:ad:0f:
                    48:8c:fd:19:6a:6a:68:26:da:de:05:12:7a:cf:64:
                    30:64:ec:10:56:15:6f:27:18:67:94:2d:6c:95:96:
                    bb:bc:cb:b1:d4:14:a1:e6:13:49:64:a6:2a:39:ff:
                    c5:67:f8:8f:43:11:54:57:a5:5a:a7:e5:7d:3e:f7:
                    5f:0f:03:ac:e4:ba:96:e2:d7:53:49:42:31:be:40:
                    7e:71:d2:49:9e:d8:fd:3c:15:32:54:f2:48:a0:16:
                    72:9f:54:94:54:2c:3d:53:40:2c:75:e6:a4:d4:22:
                    b6:b7:90:04:e0:07:33:ea:84:5a:1f:db:5b:35:5e:
                    68:81:74:95:b9:e6:d0:bb:b5:b1:eb:6e:2c:e9:99:
                    8a:7f:db:62:75:ec:0d:4c:74:55:bb:b7:1b:94:be:
                    f0:c2:db:c2:9a:d5:fc:c0:ac:9d:a7:df:1f:c9:49:
                    c6:98:c0:6a:be:7d:eb:04:10:26:4c:a4:57:6b:9d:
                    51:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:26:E1:C7:66:46:CD:22:C6:82:D5:02:C1:41:F1:EC:0D:A9:BF:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/40aab24a-211b-3c3c-ba2f-28c4c297cba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:a4:cf:33:e4:1b:5c:37:58:e5:04:42:e8:a2:b7:8e:4b:93:
         6c:86:69:8f:f4:d8:c2:cf:17:34:c8:e5:21:8c:fc:08:ab:2f:
         c3:92:0a:c5:71:fb:04:a4:da:3e:bf:7a:6f:d3:94:af:97:1b:
         ec:b4:4b:32:99:f4:80:dd:55:b8:83:46:4f:e2:17:37:08:da:
         d6:b2:d5:fb:ec:25:56:c2:59:1d:1a:46:d1:fa:09:09:6a:5e:
         1a:3d:41:00:bd:fa:e7:78:00:d8:c2:f2:9c:42:41:84:61:0c:
         d3:4e:b6:fa:ec:7a:91:97:2f:2c:77:f4:d5:02:fb:45:4d:d8:
         08:1c:99:30:2a:80:44:57:1d:ec:fe:2e:a8:2e:a2:c5:40:f7:
         b0:1f:3a:3b:68:ab:d4:a2:91:50:4b:6b:c4:b6:78:46:f1:50:
         8e:9a:ca:2b:14:4f:76:8d:ed:3f:85:78:72:2c:07:f7:a3:89:
         13:b4:31:3c:8a:07:eb:a3:57:0b:bf:3d:61:39:f4:6b:97:8f:
         a4:21:a0:97:4a:a2:05:61:93:5d:64:31:59:89:1a:bd:eb:1d:
         d6:f3:fe:9d:55:89:cf:9a:03:d0:ff:1e:a4:c6:10:fa:dd:0c:
         48:37:13:8b:f8:0a:80:bf:57:67:63:1d:8f:d6:b8:22:17:e8:
         e4:db:56:4e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD8LgHorGHvoJ0dY8IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDgyNTEyMDAwMFoXDTIyMDgyODA0MDAwMFowLzEtMCsGA1UEAxMk
YzUzNGY4NzgtMWQyNC00MWIxLWI4YWMtMWRmOTg4NzY2OThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRf8Vr1LU7RJ0kA8MURbr1lPOILhOn9AqsWq
jm7zn72vg829Fg7xeWRxBAQACmsridPfLNjqCJZ3rfa9D54t8Y146SIekM4+rQ9I
jP0ZampoJtreBRJ6z2QwZOwQVhVvJxhnlC1slZa7vMux1BSh5hNJZKYqOf/FZ/iP
QxFUV6Vap+V9PvdfDwOs5LqW4tdTSUIxvkB+cdJJntj9PBUyVPJIoBZyn1SUVCw9
U0Asdeak1CK2t5AE4Acz6oRaH9tbNV5ogXSVuebQu7Wx624s6ZmKf9tidewNTHRV
u7cblL7wwtvCmtX8wKydp98fyUnGmMBqvn3rBBAmTKRXa51RsQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMwm4cdmRs0ixoLVAsFB8ewNqb/mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvNDBhYWIyNGEtMjExYi0z
YzNjLWJhMmYtMjhjNGMyOTdjYmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJykzzPkG1w3WOUEQuiit45Lk2yGaY/02MLPFzTI5SGM/AirL8OS
CsVx+wSk2j6/em/TlK+XG+y0SzKZ9IDdVbiDRk/iFzcI2tay1fvsJVbCWR0aRtH6
CQlqXho9QQC9+ud4ANjC8pxCQYRhDNNOtvrsepGXLyx39NUC+0VN2AgcmTAqgERX
Hez+LqguosVA97AfOjtoq9SikVBLa8S2eEbxUI6ayisUT3aN7T+FeHIsB/ejiRO0
MTyKB+ujVwu/PWE59GuXj6QhoJdKogVhk11kMVmJGr3rHdbz/p1Vic+aA9D/HqTG
EPrdDEg3E4v4CoC/V2djHY/WuCIX6OTbVk4=
-----END CERTIFICATE-----