Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/50360969-77bd-3ee0-bf71-2cd50cc13c44.roa
File:                     50360969-77bd-3ee0-bf71-2cd50cc13c44.roa (raw, json)
Hash identifier:          88wGYvDN5u5v+dvMwj5Tvyyo8cRaCL9h4md8jnO6zbM=
Subject key identifier:   40:05:BE:F1:C6:8A:B2:8B:92:4C:4A:D5:C9:C2:5C:3D:39:E5:29:8A
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F432858401CAEBAEAF72DFC0282EDC940
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/50360969-77bd-3ee0-bf71-2cd50cc13c44.roa
Signing time:             Thu 01 Dec 2022 12:00:00 +0000
ROA not before:           Thu 01 Dec 2022 12:00:00 +0000
ROA not after:            Sun 04 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1c:ae:ba:ea:f7:2d:fc:02:82:ed:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Dec  1 12:00:00 2022 GMT
            Not After : Dec  4 05:00:00 2022 GMT
        Subject: CN=e0d660c1-27ce-4383-b869-d34354b1644f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a9:49:d1:de:5e:60:62:f8:33:e8:1a:42:f4:
                    37:5b:f4:41:3c:2c:44:ad:b6:2d:e5:9f:8c:a0:25:
                    08:32:73:7c:5e:36:38:2b:8a:13:16:46:b9:63:0a:
                    aa:84:01:87:8c:8b:31:87:29:c2:75:75:ce:6b:87:
                    99:46:42:25:50:c8:c4:84:68:df:96:af:dc:d9:da:
                    ed:0b:fe:77:42:c7:58:1e:5e:32:e5:46:ec:5c:e4:
                    3b:5b:0f:f3:95:a5:3e:fe:54:c7:cb:77:08:3f:80:
                    f9:6b:a7:0f:be:39:42:52:12:51:60:23:84:2e:b7:
                    e0:6d:b1:f9:0f:8c:04:ca:12:6e:d4:c8:02:b7:fd:
                    a1:d6:25:f6:08:19:37:94:d1:ee:6d:af:b3:a5:94:
                    10:fa:b4:b8:ec:9b:bf:92:56:36:6a:af:d0:c5:a9:
                    7a:1d:ce:50:b7:ba:c0:53:f1:34:72:7c:e6:ea:09:
                    a5:47:da:32:5d:b7:9b:3a:20:f8:ca:58:25:66:7a:
                    99:28:e3:62:ce:f4:79:59:79:c3:f1:9b:ef:8b:dd:
                    a2:62:81:38:96:bd:9b:b4:58:95:d0:38:a8:88:3b:
                    c2:dc:23:31:0a:2f:c0:5c:0e:db:46:a1:b9:4b:31:
                    4b:e4:c7:f9:b2:f1:af:20:7b:74:f5:b4:83:70:6e:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:05:BE:F1:C6:8A:B2:8B:92:4C:4A:D5:C9:C2:5C:3D:39:E5:29:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/50360969-77bd-3ee0-bf71-2cd50cc13c44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:0d:72:e0:f0:77:9e:c0:07:4f:bb:94:a0:6f:4b:67:5b:a8:
         66:4a:56:d0:40:49:83:cd:bd:9b:ef:3c:26:f4:1d:fc:08:a2:
         94:58:95:35:0b:0c:2d:a6:e1:e5:60:08:92:aa:78:3e:f9:37:
         70:b6:95:e0:fd:1b:1d:e5:76:98:2c:b6:ab:cf:2d:65:e2:be:
         50:b1:1b:93:f0:69:fd:ac:27:6d:22:b9:a4:b2:e8:d5:bb:f5:
         bd:57:0a:20:7f:b7:41:90:38:bd:3b:d4:c2:a9:20:6e:36:c2:
         93:a1:98:81:57:c5:1e:02:2f:97:8b:7a:d9:9b:29:f6:3b:76:
         11:42:bc:b5:d6:0e:d2:cf:8e:4a:ef:63:73:14:95:7e:b3:c4:
         14:c2:e8:d7:9e:82:9e:db:3a:44:38:08:c0:d4:df:f5:eb:02:
         9d:f9:05:00:1c:f3:81:21:8d:42:5e:2c:b5:81:d9:8b:ea:e4:
         d3:65:3b:05:f0:00:6f:d3:0c:5e:39:da:8a:74:e2:bc:70:f1:
         39:e2:79:ae:66:76:59:eb:b9:99:05:d3:29:33:d1:e3:2a:b5:
         05:04:47:74:ea:1b:79:cf:fe:ff:7b:85:e1:72:73:58:74:8c:
         70:46:f1:b8:87:a1:10:c9:39:81:58:c3:cf:dd:cc:3e:94:59:
         e5:72:bc:9c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEAcrrrq9y38AoLtyUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMTIwMTEyMDAwMFoXDTIyMTIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
ZTBkNjYwYzEtMjdjZS00MzgzLWI4NjktZDM0MzU0YjE2NDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6lJ0d5eYGL4M+gaQvQ3W/RBPCxErbYt5Z+M
oCUIMnN8XjY4K4oTFka5YwqqhAGHjIsxhynCdXXOa4eZRkIlUMjEhGjflq/c2drt
C/53QsdYHl4y5UbsXOQ7Ww/zlaU+/lTHy3cIP4D5a6cPvjlCUhJRYCOELrfgbbH5
D4wEyhJu1MgCt/2h1iX2CBk3lNHuba+zpZQQ+rS47Ju/klY2aq/Qxal6Hc5Qt7rA
U/E0cnzm6gmlR9oyXbebOiD4ylglZnqZKONizvR5WXnD8Zvvi92iYoE4lr2btFiV
0DioiDvC3CMxCi/AXA7bRqG5SzFL5Mf5svGvIHt09bSDcG4sWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEAFvvHGirKLkkxK1cnCXD055SmKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvNTAzNjA5NjktNzdiZC0z
ZWUwLWJmNzEtMmNkNTBjYzEzYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKINcuDwd57AB0+7lKBvS2dbqGZKVtBASYPNvZvvPCb0HfwIopRY
lTULDC2m4eVgCJKqeD75N3C2leD9Gx3ldpgstqvPLWXivlCxG5Pwaf2sJ20iuaSy
6NW79b1XCiB/t0GQOL071MKpIG42wpOhmIFXxR4CL5eLetmbKfY7dhFCvLXWDtLP
jkrvY3MUlX6zxBTC6Neegp7bOkQ4CMDU3/XrAp35BQAc84EhjUJeLLWB2Yvq5NNl
OwXwAG/TDF452op04rxw8Tniea5mdlnruZkF0ykz0eMqtQUER3TqG3nP/v97heFy
c1h0jHBG8biHoRDJOYFYw8/dzD6UWeVyvJw=
-----END CERTIFICATE-----