Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/45e3a3ad-e326-3ae8-bd11-c4975682ea77.roa
File:                     45e3a3ad-e326-3ae8-bd11-c4975682ea77.roa (raw, json)
Hash identifier:          oZATM64B002uS5KoumejbPNFDwab2AOrPcAJU8S+fW4=
Subject key identifier:   19:6D:43:60:0C:47:8D:D5:A1:02:46:49:53:95:0C:E5:0F:FB:96:BD
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583BE772D7A4EAD421E96377AE70
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/45e3a3ad-e326-3ae8-bd11-c4975682ea77.roa
Signing time:             Tue 05 Nov 2019 05:00:00 +0000
ROA not before:           Tue 05 Nov 2019 05:00:00 +0000
ROA not after:            Thu 15 Feb 2024 05:00:00 +0000
asID:                     8987
IP address blocks:        2605:9cc0:418::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:e7:72:d7:a4:ea:d4:21:e9:63:77:ae:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  5 05:00:00 2019 GMT
            Not After : Feb 15 05:00:00 2024 GMT
        Subject: CN=988de411-e1a3-49d3-8bdc-e15b589a89a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:70:d5:75:ef:26:ed:d2:d4:36:da:89:fb:
                    b9:eb:af:af:6a:7e:70:c8:13:89:7f:50:ca:a6:34:
                    b3:f1:bb:bd:e7:e9:e8:8e:9e:8e:db:37:71:a0:d7:
                    ea:d6:93:0c:ec:af:63:36:57:7d:76:78:0b:83:03:
                    8e:dc:47:c4:1a:17:d0:22:e8:d9:08:23:2f:65:10:
                    39:65:92:18:b1:95:2c:eb:c3:85:1c:45:5f:86:4b:
                    1d:3e:89:c0:40:0a:b8:dd:0e:63:15:f9:68:2b:66:
                    b0:07:da:9f:c0:25:08:42:40:ee:aa:51:c4:66:bf:
                    73:9e:d0:40:97:ea:c9:f9:02:c8:2d:7d:44:1d:f8:
                    19:a3:51:d9:5f:1a:a6:53:70:14:a8:a4:72:46:89:
                    42:ee:09:22:4c:98:6f:ad:6c:e1:c6:c8:cc:28:23:
                    2a:a9:4f:77:0b:1f:cd:34:dc:dd:07:9e:e0:ee:11:
                    66:13:b2:30:07:b4:88:71:2b:52:81:6f:48:28:60:
                    17:80:c4:54:87:a5:96:b7:34:3d:de:ce:14:e2:21:
                    1f:f5:13:e7:7d:3c:86:1b:46:74:98:7e:97:70:1c:
                    71:21:62:3e:38:4b:ae:27:e9:db:85:3d:76:37:62:
                    56:23:75:ca:f5:43:6e:43:8f:3f:88:7f:0f:47:bb:
                    cc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6D:43:60:0C:47:8D:D5:A1:02:46:49:53:95:0C:E5:0F:FB:96:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/45e3a3ad-e326-3ae8-bd11-c4975682ea77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:418::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:a0:1c:c0:e0:3c:94:1c:27:c3:c1:c2:79:32:3a:58:f8:22:
         df:ae:5d:10:71:f6:6a:4c:81:d8:cb:1d:2e:3f:13:01:4a:bc:
         35:21:1b:6d:d1:56:3a:58:29:82:af:57:9d:69:90:47:a1:24:
         99:f4:98:43:9f:bc:ee:d9:21:b7:86:a3:13:e9:fb:d9:cc:5d:
         6a:3e:48:e3:16:2e:75:4f:8c:e4:b9:38:ee:a6:8e:5d:c9:57:
         8d:73:75:04:1d:29:8e:10:60:26:36:ae:c0:a0:e6:1f:b6:3e:
         8f:43:3d:a7:c5:9a:a7:83:e9:00:1a:2f:74:3b:a4:29:54:e9:
         d1:00:a5:f3:83:7f:62:31:d4:6a:1e:15:b4:cf:d7:5c:f8:e9:
         0c:68:85:8f:da:67:a9:b3:e1:e0:2f:1c:61:7f:34:60:61:59:
         59:b6:9b:de:fe:0e:c8:fc:80:0e:b6:6f:24:02:88:c1:00:de:
         ef:86:02:3e:ac:fd:2c:41:09:ce:37:11:d2:55:40:79:eb:a3:
         15:89:06:32:b4:52:a3:85:50:d5:50:d7:7c:5d:11:d4:0f:8f:
         87:4e:05:93:04:51:5f:5d:15:20:7b:1e:7c:1e:f2:88:b4:c2:
         55:a1:75:71:7b:1a:b7:5e:3b:86:06:60:9d:a9:ca:c8:5d:42:
         df:a6:5f:be
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDvnctek6tQh6WN3rnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTE5MTEwNTA1MDAwMFoXDTI0MDIxNTA1MDAwMFowLzEtMCsGA1UEAxMk
OTg4ZGU0MTEtZTFhMy00OWQzLThiZGMtZTE1YjU4OWE4OWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0dw1XXvJu3S1Dbaifu566+van5wyBOJf1DK
pjSz8bu95+nojp6O2zdxoNfq1pMM7K9jNld9dngLgwOO3EfEGhfQIujZCCMvZRA5
ZZIYsZUs68OFHEVfhksdPonAQAq43Q5jFfloK2awB9qfwCUIQkDuqlHEZr9zntBA
l+rJ+QLILX1EHfgZo1HZXxqmU3AUqKRyRolC7gkiTJhvrWzhxsjMKCMqqU93Cx/N
NNzdB57g7hFmE7IwB7SIcStSgW9IKGAXgMRUh6WWtzQ93s4U4iEf9RPnfTyGG0Z0
mH6XcBxxIWI+OEuuJ+nbhT12N2JWI3XK9UNuQ48/iH8PR7vMrQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBltQ2AMR43VoQJGSVOVDOUP+5a9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvNDVlM2EzYWQtZTMyNi0z
YWU4LWJkMTEtYzQ5NzU2ODJlYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAQY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADKgHMDgPJQcJ8PBwnkyOlj4It+uXRBx9mpMgdjLHS4/EwFKvDUh
G23RVjpYKYKvV51pkEehJJn0mEOfvO7ZIbeGoxPp+9nMXWo+SOMWLnVPjOS5OO6m
jl3JV41zdQQdKY4QYCY2rsCg5h+2Po9DPafFmqeD6QAaL3Q7pClU6dEApfODf2Ix
1GoeFbTP11z46QxohY/aZ6mz4eAvHGF/NGBhWVm2m97+Dsj8gA62byQCiMEA3u+G
Aj6s/SxBCc43EdJVQHnroxWJBjK0UqOFUNVQ13xdEdQPj4dOBZMEUV9dFSB7Hnwe
8oi0wlWhdXF7GrdeO4YGYJ2pyshdQt+mX74=
-----END CERTIFICATE-----