Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/521c022c-5165-33d1-a285-6c0e63bfd88a.roa
File:                     521c022c-5165-33d1-a285-6c0e63bfd88a.roa (raw, json)
Hash identifier:          V7Weo97bIdgUiNdAlRrWC8Q5zP5b1xBySYddm2SEStk=
Subject key identifier:   B4:5B:18:75:68:FB:32:1A:2C:2D:9E:99:AB:D8:97:AB:A6:45:6E:F7
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328584004C7A3C28F54A95C318A6C40
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/521c022c-5165-33d1-a285-6c0e63bfd88a.roa
Signing time:             Tue 22 Nov 2022 12:00:00 +0000
ROA not before:           Tue 22 Nov 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:391::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:04:c7:a3:c2:8f:54:a9:5c:31:8a:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 22 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=263a8ed9-e7a3-4e6b-9be1-7880880ffa30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:52:90:2e:7f:3d:e7:b0:99:d6:c0:92:40:7a:
                    e0:67:c0:9b:d9:bc:17:01:9d:71:7b:38:02:9f:72:
                    48:f2:32:69:f7:ff:90:4d:eb:fd:7c:97:d4:3c:84:
                    91:55:2b:1f:13:e2:c4:68:e6:b1:fa:13:c1:13:95:
                    09:09:9f:87:b5:88:d5:34:9f:ac:8b:51:e7:51:a3:
                    03:c5:25:08:ce:69:14:63:5e:a2:b9:90:29:a4:bd:
                    7a:56:99:9b:ed:7e:46:df:78:af:2a:47:ca:79:8b:
                    a8:3f:12:7d:0e:a5:6f:d5:80:67:f8:3f:fb:40:e6:
                    5f:3b:0f:67:9e:6f:49:c0:ca:89:c6:ad:47:f6:41:
                    ba:75:fa:5e:93:85:f4:3d:3f:45:2d:cb:d0:0a:1b:
                    ec:14:18:87:d7:16:73:c0:67:cd:3f:7a:37:42:63:
                    25:1b:1c:ae:57:8b:e3:6d:74:f6:4b:6c:f3:b5:4f:
                    e2:50:5a:92:2b:bb:1e:5a:7c:e8:de:15:97:1a:89:
                    6a:36:a7:63:9f:b4:c7:bf:e0:ff:a7:ff:6c:02:43:
                    13:4e:b0:c8:64:1f:b8:64:6f:1e:40:88:f3:dc:39:
                    8d:2c:01:07:cf:db:01:a6:2b:28:35:ac:fd:ec:37:
                    2b:57:05:3a:2c:54:53:4b:99:3c:57:91:70:85:57:
                    fc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5B:18:75:68:FB:32:1A:2C:2D:9E:99:AB:D8:97:AB:A6:45:6E:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/521c022c-5165-33d1-a285-6c0e63bfd88a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:0e:a4:24:b9:07:e5:76:3d:62:c5:a6:ab:63:b7:ad:b4:4e:
         12:b6:af:bf:de:9b:8a:2f:92:41:69:dd:30:ca:4a:39:e8:3a:
         4d:81:09:07:8d:6b:2d:d7:7b:0e:d5:65:57:2d:9f:13:62:34:
         c7:1a:df:83:98:71:02:84:64:13:6a:e3:46:5c:78:79:3b:49:
         2d:0f:ba:e8:69:2e:c5:26:db:31:be:c7:34:39:e7:d0:0a:b0:
         0d:cd:22:77:d0:7b:37:77:4c:af:37:a7:32:9f:22:ec:e4:25:
         18:a3:a3:28:1d:c9:1e:dd:96:77:f3:5e:a2:e3:5c:3e:61:15:
         d0:d8:7a:9e:8d:6d:81:81:35:96:1e:c3:8c:0e:05:78:f7:e3:
         a2:9d:15:4e:ff:0c:e5:1d:46:3e:9d:67:9f:d1:45:3a:06:14:
         cf:e7:e5:53:6f:75:8f:f2:d4:d5:e2:77:9a:aa:19:51:64:a2:
         c2:96:00:07:54:fd:79:28:eb:ab:62:54:8e:7c:2b:3c:d0:a2:
         f7:33:2c:8d:63:4b:55:b8:26:22:d3:5e:f6:bc:50:9f:b0:a2:
         e8:91:bd:88:b5:06:f9:0f:d9:2f:d4:fc:b7:2e:c2:0b:a0:4b:
         70:c9:99:60:48:84:69:bf:18:be:8b:5c:3b:a0:bd:2e:17:be:
         3c:13:ff:9e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEAEx6PCj1SpXDGKbEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMTEyMjEyMDAwMFoXDTIyMTEyNTA1MDAwMFowLzEtMCsGA1UEAxMk
MjYzYThlZDktZTdhMy00ZTZiLTliZTEtNzg4MDg4MGZmYTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FKQLn8957CZ1sCSQHrgZ8Cb2bwXAZ1xezgC
n3JI8jJp9/+QTev9fJfUPISRVSsfE+LEaOax+hPBE5UJCZ+HtYjVNJ+si1HnUaMD
xSUIzmkUY16iuZAppL16Vpmb7X5G33ivKkfKeYuoPxJ9DqVv1YBn+D/7QOZfOw9n
nm9JwMqJxq1H9kG6dfpek4X0PT9FLcvQChvsFBiH1xZzwGfNP3o3QmMlGxyuV4vj
bXT2S2zztU/iUFqSK7seWnzo3hWXGolqNqdjn7THv+D/p/9sAkMTTrDIZB+4ZG8e
QIjz3DmNLAEHz9sBpisoNaz97DcrVwU6LFRTS5k8V5FwhVf84wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLRbGHVo+zIaLC2emavYl6umRW73MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvNTIxYzAyMmMtNTE2NS0z
M2QxLWEyODUtNmMwZTYzYmZkODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH8OpCS5B+V2PWLFpqtjt620ThK2r7/em4ovkkFp3TDKSjnoOk2B
CQeNay3Xew7VZVctnxNiNMca34OYcQKEZBNq40ZceHk7SS0PuuhpLsUm2zG+xzQ5
59AKsA3NInfQezd3TK83pzKfIuzkJRijoygdyR7dlnfzXqLjXD5hFdDYep6NbYGB
NZYew4wOBXj346KdFU7/DOUdRj6dZ5/RRToGFM/n5VNvdY/y1NXid5qqGVFkosKW
AAdU/Xko66tiVI58KzzQovczLI1jS1W4JiLTXva8UJ+wouiRvYi1BvkP2S/U/Lcu
wgugS3DJmWBIhGm/GL6LXDugvS4XvjwT/54=
-----END CERTIFICATE-----