Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4325cea7-1530-3376-8287-bce91376f659.roa
File:                     4325cea7-1530-3376-8287-bce91376f659.roa (raw, json)
Hash identifier:          r5YC5IgYQBkjqGNw1YsrVo9Ocu52qG+64QYdpDemRc0=
Subject key identifier:   2C:C0:6C:D3:DF:24:78:52:7F:75:44:81:C1:06:48:A3:AD:76:7B:F0
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F4DD01C23F1ABD8F5684AA150
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4325cea7-1530-3376-8287-bce91376f659.roa
Signing time:             Sun 18 Sep 2022 12:00:00 +0000
ROA not before:           Sun 18 Sep 2022 12:00:00 +0000
ROA not after:            Wed 21 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:4d:d0:1c:23:f1:ab:d8:f5:68:4a:a1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep 18 12:00:00 2022 GMT
            Not After : Sep 21 04:00:00 2022 GMT
        Subject: CN=8bbca3d9-dd2f-47ac-8186-0aa8b0ad83aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:05:2c:6a:65:cb:50:d4:b9:35:87:c8:b9:9f:
                    d2:83:01:01:6c:df:47:6e:9b:c6:bb:05:0b:2a:19:
                    8c:61:a8:73:f9:e6:94:33:01:d9:d3:35:88:66:6e:
                    44:6f:0e:e8:72:a0:5a:b1:41:87:f8:6e:14:fa:cd:
                    55:c4:71:a9:d4:9f:4e:06:9b:e5:5b:46:eb:34:ec:
                    fb:d1:f8:5a:ed:01:50:61:59:26:83:e8:9b:98:a4:
                    53:aa:12:8d:a1:df:24:c4:cc:48:ab:b3:fd:ae:f1:
                    49:b0:55:84:46:31:d9:2b:90:7f:72:43:94:c0:13:
                    41:ee:8a:1d:76:ad:7a:38:0e:cf:12:f3:dc:c5:94:
                    0e:ed:af:7a:70:9e:38:dd:a0:5b:10:56:ae:c0:94:
                    a7:9e:7f:b8:f2:1c:b5:87:1e:d5:4b:c9:07:be:5a:
                    a8:75:88:05:ab:76:5d:a6:6a:01:6c:64:66:f0:c0:
                    13:33:33:d9:bc:38:4a:14:ab:43:1d:dd:9e:78:3c:
                    c6:00:54:b2:89:b6:fe:d0:bc:80:e3:7b:85:49:73:
                    f7:ba:6b:84:b6:fb:c2:48:d1:7e:74:b2:18:f5:39:
                    d3:89:f4:10:4e:46:0a:35:fb:67:1a:de:52:98:2e:
                    eb:89:30:33:0d:8c:d9:77:cc:fa:b5:90:3a:e0:bb:
                    c6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C0:6C:D3:DF:24:78:52:7F:75:44:81:C1:06:48:A3:AD:76:7B:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4325cea7-1530-3376-8287-bce91376f659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:72:d6:f5:ff:b7:2e:a8:e5:bb:1a:d8:a1:a7:b2:cc:29:fe:
         44:3f:61:da:54:9f:6f:77:be:0d:cd:f7:c4:61:e2:8a:04:d4:
         e0:b8:1f:75:dd:16:d0:74:5b:75:42:b7:2c:03:86:7f:c1:d2:
         83:8e:04:73:6f:c4:da:8a:da:68:c9:24:4d:7d:78:bd:9b:23:
         3f:bf:e3:16:61:71:09:16:02:76:2c:e5:71:de:95:79:2b:c5:
         c8:75:f8:c4:ff:27:b2:85:34:5e:5a:4a:68:ee:89:d9:11:ff:
         bb:8a:7c:c3:61:e2:0e:64:98:97:f0:98:5f:25:9b:9b:55:9a:
         7a:f0:e7:a2:38:77:65:ff:3d:03:02:25:81:ea:00:5c:a6:31:
         f0:4f:68:05:a4:b1:66:e4:73:bd:fe:4d:e5:9a:a1:59:4a:ae:
         ac:98:cb:37:42:21:7c:9b:c4:b0:3c:b3:c1:7e:76:73:8b:52:
         da:b2:64:ae:81:b4:8a:05:10:f4:94:1e:a5:7d:71:12:c8:85:
         c3:e2:50:78:c5:d0:0f:35:67:77:1c:bc:50:35:75:b7:09:8c:
         b3:bb:d7:f9:af:10:25:ef:a1:d3:55:83:82:bb:15:8e:5d:72:
         a5:43:54:5c:6f:04:5d:f1:50:f3:71:d1:39:72:f2:a4:15:07:
         5d:03:1d:aa
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD9N0Bwj8avY9WhKoVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDkxODEyMDAwMFoXDTIyMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
OGJiY2EzZDktZGQyZi00N2FjLTgxODYtMGFhOGIwYWQ4M2FhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwUsamXLUNS5NYfIuZ/SgwEBbN9HbpvGuwUL
KhmMYahz+eaUMwHZ0zWIZm5Ebw7ocqBasUGH+G4U+s1VxHGp1J9OBpvlW0brNOz7
0fha7QFQYVkmg+ibmKRTqhKNod8kxMxIq7P9rvFJsFWERjHZK5B/ckOUwBNB7ood
dq16OA7PEvPcxZQO7a96cJ443aBbEFauwJSnnn+48hy1hx7VS8kHvlqodYgFq3Zd
pmoBbGRm8MATMzPZvDhKFKtDHd2eeDzGAFSyibb+0LyA43uFSXP3umuEtvvCSNF+
dLIY9TnTifQQTkYKNftnGt5SmC7riTAzDYzZd8z6tZA64LvGDQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCzAbNPfJHhSf3VEgcEGSKOtdnvwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvNDMyNWNlYTctMTUzMC0z
Mzc2LTgyODctYmNlOTEzNzZmNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBANxy1vX/ty6o5bsa2KGnsswp/kQ/YdpUn293vg3N98Rh4ooE1OC4
H3XdFtB0W3VCtywDhn/B0oOOBHNvxNqK2mjJJE19eL2bIz+/4xZhcQkWAnYs5XHe
lXkrxch1+MT/J7KFNF5aSmjuidkR/7uKfMNh4g5kmJfwmF8lm5tVmnrw56I4d2X/
PQMCJYHqAFymMfBPaAWksWbkc73+TeWaoVlKrqyYyzdCIXybxLA8s8F+dnOLUtqy
ZK6BtIoFEPSUHqV9cRLIhcPiUHjF0A81Z3ccvFA1dbcJjLO71/mvECXvodNVg4K7
FY5dcqVDVFxvBF3xUPNx0Tly8qQVB10DHao=
-----END CERTIFICATE-----