Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4c033ed2-c683-3cae-9fe6-62d73300f8ce.roa
File:                     4c033ed2-c683-3cae-9fe6-62d73300f8ce.roa (raw, json)
Hash identifier:          PqV1kxlREyGGYHN8nRtTQ9BwSQDT4w5Zreefi4FOmmc=
Subject key identifier:   26:1B:5F:AB:89:3D:79:E2:5F:AC:99:7D:D2:12:A0:D6:DB:09:BC:C9
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FCBECFD0945592D618092AC00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4c033ed2-c683-3cae-9fe6-62d73300f8ce.roa
Signing time:             Wed 02 Nov 2022 12:00:00 +0000
ROA not before:           Wed 02 Nov 2022 12:00:00 +0000
ROA not after:            Sat 05 Nov 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cb:ec:fd:09:45:59:2d:61:80:92:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  2 12:00:00 2022 GMT
            Not After : Nov  5 04:00:00 2022 GMT
        Subject: CN=c1c98ec7-92e1-4caf-a096-a284e9d66380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:46:b7:09:16:de:bf:26:8e:2d:81:8b:8f:72:
                    e7:b8:49:c6:52:ee:b9:f8:83:7d:aa:87:17:24:50:
                    ae:b1:d4:bf:e2:7f:54:e2:8d:03:d1:08:f2:b4:3d:
                    b8:2d:8c:0c:da:2a:c7:e7:af:c0:b2:4b:4e:0f:75:
                    7d:e0:14:85:e5:e3:ad:73:dc:01:18:bb:2d:03:a8:
                    d1:52:ef:22:d2:d7:60:ba:b2:4f:35:9a:e1:58:a7:
                    0d:15:ac:c3:12:ed:3d:3c:41:8e:ab:cd:cd:30:9c:
                    1a:0c:99:71:1d:5d:a5:a1:5e:c9:d8:c0:cf:79:4d:
                    94:bc:88:00:92:ae:cf:8b:b1:59:92:e8:0f:3d:aa:
                    75:81:03:db:7c:69:ab:62:87:9a:23:58:36:4b:c3:
                    29:f5:75:21:56:9e:4f:44:24:71:a1:4a:5d:76:bc:
                    eb:02:61:90:f8:0f:71:8b:2d:78:75:a0:3a:46:c3:
                    57:0d:b3:b5:20:89:aa:7a:2d:50:b3:7e:a8:0c:1b:
                    1e:f1:d8:b6:ea:16:e0:6b:42:9e:6e:42:be:37:a8:
                    a0:64:8a:32:1c:44:5e:a6:51:b2:38:a8:18:b3:6f:
                    e0:26:d5:0a:c1:ec:2b:d4:54:9f:2e:1e:06:f8:fc:
                    e9:9e:ab:29:ef:60:ed:b4:68:04:51:38:c3:10:ae:
                    fd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1B:5F:AB:89:3D:79:E2:5F:AC:99:7D:D2:12:A0:D6:DB:09:BC:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4c033ed2-c683-3cae-9fe6-62d73300f8ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:0a:2c:d0:8a:ba:e2:1c:61:a3:17:d9:a0:6d:67:9e:a2:19:
         22:bc:e8:79:a6:bb:46:38:2b:ca:86:90:76:26:a0:49:1e:fc:
         25:ff:e0:b7:5f:9c:cc:fa:24:bd:36:80:e3:ab:b6:c5:f3:be:
         19:44:72:0b:62:5f:71:d8:7c:1f:04:7d:81:ec:f7:e4:b0:e0:
         10:56:7c:33:a5:09:df:06:43:fb:9c:9e:26:c1:1f:94:a4:23:
         36:6d:11:fa:a1:4a:ee:af:fd:54:19:5d:84:bd:c8:ec:d7:ba:
         bb:2b:49:3d:64:de:4d:05:02:9a:22:b8:a0:86:eb:23:be:f2:
         e1:e4:b5:3c:96:53:8b:19:9d:e8:79:d2:95:99:07:4a:71:c8:
         c2:af:b0:66:76:9c:c7:75:11:ea:43:f9:19:b9:5d:1f:58:a5:
         a3:2f:d7:c4:d3:83:3a:02:8d:de:0e:be:47:ac:df:df:6b:2a:
         43:2d:c7:b1:49:f2:2a:68:82:f5:2b:cb:9b:98:44:68:ca:54:
         b2:1f:f7:0f:c6:87:08:e9:bc:b7:e5:21:4d:ad:58:56:2a:34:
         dd:b5:0a:64:a6:04:66:3a:83:e5:8a:0f:31:ad:73:5d:95:e3:
         5b:4a:c7:11:b0:ae:38:8c:2f:df:f3:6b:0f:af:11:73:1c:fd:
         93:6f:0d:20
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD/L7P0JRVktYYCSrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMTEwMjEyMDAwMFoXDTIyMTEwNTA0MDAwMFowLzEtMCsGA1UEAxMk
YzFjOThlYzctOTJlMS00Y2FmLWEwOTYtYTI4NGU5ZDY2MzgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEa3CRbevyaOLYGLj3LnuEnGUu65+IN9qocX
JFCusdS/4n9U4o0D0QjytD24LYwM2irH56/AsktOD3V94BSF5eOtc9wBGLstA6jR
Uu8i0tdgurJPNZrhWKcNFazDEu09PEGOq83NMJwaDJlxHV2loV7J2MDPeU2UvIgA
kq7Pi7FZkugPPap1gQPbfGmrYoeaI1g2S8Mp9XUhVp5PRCRxoUpddrzrAmGQ+A9x
iy14daA6RsNXDbO1IImqei1Qs36oDBse8di26hbga0KebkK+N6igZIoyHEReplGy
OKgYs2/gJtUKwewr1FSfLh4G+Pzpnqsp72DttGgEUTjDEK792wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCYbX6uJPXniX6yZfdISoNbbCbzJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvNGMwMzNlZDItYzY4My0z
Y2FlLTlmZTYtNjJkNzMzMDBmOGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALIKLNCKuuIcYaMX2aBtZ56iGSK86Hmmu0Y4K8qGkHYmoEke/CX/
4LdfnMz6JL02gOOrtsXzvhlEcgtiX3HYfB8EfYHs9+Sw4BBWfDOlCd8GQ/ucnibB
H5SkIzZtEfqhSu6v/VQZXYS9yOzXursrST1k3k0FApoiuKCG6yO+8uHktTyWU4sZ
neh50pWZB0pxyMKvsGZ2nMd1EepD+Rm5XR9YpaMv18TTgzoCjd4Ovkes399rKkMt
x7FJ8ipogvUry5uYRGjKVLIf9w/GhwjpvLflIU2tWFYqNN21CmSmBGY6g+WKDzGt
c12V41tKxxGwrjiML9/zaw+vEXMc/ZNvDSA=
-----END CERTIFICATE-----