Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5a97c2b5-f47b-3f61-8da7-8fdfeebb8f0f.roa
File:                     5a97c2b5-f47b-3f61-8da7-8fdfeebb8f0f.roa (raw, json)
Hash identifier:          qLqt7GzX6FhyQ7pJvCxDl905ze1eBpiEuMiM3WuWG2s=
Subject key identifier:   93:5A:93:F2:4A:98:28:F2:05:43:FD:D4:88:C9:C9:87:8F:42:4A:AB
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D2C1E575CCE6CB9A7CD840BB0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5a97c2b5-f47b-3f61-8da7-8fdfeebb8f0f.roa
Signing time:             Mon 07 Mar 2022 05:00:00 +0000
ROA not before:           Mon 07 Mar 2022 05:00:00 +0000
ROA not after:            Wed 09 Mar 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2c:1e:57:5c:ce:6c:b9:a7:cd:84:0b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar  7 05:00:00 2022 GMT
            Not After : Mar  9 05:00:00 2022 GMT
        Subject: CN=b234e46e-67cd-40dd-bb60-c54364078d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:aa:c9:50:4a:17:90:8b:2a:97:e2:02:ed:f9:
                    a7:40:eb:c1:10:26:ef:e9:e3:cf:34:2e:50:11:b7:
                    87:31:9b:01:6d:36:b5:72:22:e9:18:e9:ea:7b:4c:
                    81:a0:5d:b9:a2:fb:bf:e1:bd:d6:84:e3:e2:f6:f2:
                    2f:a9:33:13:4e:7a:d3:2b:de:69:ef:36:15:62:33:
                    d4:05:59:3e:d9:16:2e:e4:a3:73:73:72:d8:da:2b:
                    a5:25:8a:2b:10:08:41:9f:1f:75:f8:d1:93:46:73:
                    65:52:e8:55:63:a8:af:54:64:b3:dc:49:e8:7d:f6:
                    fd:f7:31:f1:73:f2:e5:2d:f7:3a:7c:bc:47:b6:7a:
                    95:44:80:3a:19:23:90:d9:18:56:5b:53:b9:b6:e9:
                    e1:92:d4:e5:e6:3a:d2:57:5b:9b:7b:d0:1f:7e:15:
                    5b:0f:ab:0c:49:99:ca:d0:f1:c3:bc:dd:d5:d4:d9:
                    19:fe:de:cc:e2:fd:22:9b:61:8c:48:06:85:9d:50:
                    7d:49:88:98:36:99:0c:64:ce:26:ed:e6:89:af:e7:
                    e6:92:39:e9:e0:79:69:f5:58:73:e6:8b:96:c9:23:
                    cb:c0:f9:8a:08:52:39:08:a9:e5:1e:50:f6:1d:61:
                    fc:0d:ac:3e:8c:df:e0:03:28:49:02:55:2f:fb:48:
                    68:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5A:93:F2:4A:98:28:F2:05:43:FD:D4:88:C9:C9:87:8F:42:4A:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5a97c2b5-f47b-3f61-8da7-8fdfeebb8f0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:05:df:77:08:54:01:e2:17:dc:0d:68:ee:e8:75:d1:15:b0:
         e0:5d:c8:0b:3d:05:c8:e0:54:cd:7d:e5:0f:d3:c0:84:2e:d4:
         04:cd:12:b0:f8:d3:f7:b5:73:aa:54:65:4d:1a:ec:45:c0:63:
         c7:f6:b3:77:64:d3:c3:bb:eb:c5:70:48:66:f4:82:6e:dd:a7:
         d3:c4:73:c8:ff:d2:85:48:fd:60:68:99:b1:f2:c9:15:2c:2b:
         d6:92:f8:18:78:30:91:af:dd:b0:8d:93:54:82:18:05:8a:15:
         c0:22:86:c6:0b:f7:9a:44:8f:af:f5:fc:9e:66:62:26:86:82:
         78:03:8d:0d:91:5a:95:3f:cc:85:7e:7c:16:ef:a1:43:7f:10:
         ea:be:d6:50:80:95:4b:ef:18:0b:06:a9:d0:03:e9:0a:58:e3:
         cc:82:96:01:62:78:a0:61:f7:6d:18:51:be:ad:a5:50:31:b2:
         59:12:28:13:b3:fd:35:66:c9:99:6b:09:ce:64:23:ac:05:d9:
         6a:6e:07:cb:37:5c:30:e8:b9:81:af:c6:99:93:e3:66:47:fb:
         c7:8f:03:7b:7f:8c:01:69:6c:3d:f0:3e:55:98:1f:e2:7b:55:
         fd:c1:29:a2:af:07:e4:25:f7:7f:b1:71:3f:8d:ed:51:78:45:
         57:f6:9e:30
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD0sHldczmy5p82EC7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDMwNzA1MDAwMFoXDTIyMDMwOTA1MDAwMFowLzEtMCsGA1UEAxMk
YjIzNGU0NmUtNjdjZC00MGRkLWJiNjAtYzU0MzY0MDc4ZDM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKrJUEoXkIsql+IC7fmnQOvBECbv6ePPNC5Q
EbeHMZsBbTa1ciLpGOnqe0yBoF25ovu/4b3WhOPi9vIvqTMTTnrTK95p7zYVYjPU
BVk+2RYu5KNzc3LY2iulJYorEAhBnx91+NGTRnNlUuhVY6ivVGSz3Enoffb99zHx
c/LlLfc6fLxHtnqVRIA6GSOQ2RhWW1O5tunhktTl5jrSV1ube9AffhVbD6sMSZnK
0PHDvN3V1NkZ/t7M4v0im2GMSAaFnVB9SYiYNpkMZM4m7eaJr+fmkjnp4Hlp9Vhz
5ouWySPLwPmKCFI5CKnlHlD2HWH8Daw+jN/gAyhJAlUv+0horwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJNak/JKmCjyBUP91IjJyYePQkqrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvNWE5N2MyYjUtZjQ3Yi0z
ZjYxLThkYTctOGZkZmVlYmI4ZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABMF33cIVAHiF9wNaO7oddEVsOBdyAs9BcjgVM195Q/TwIQu1ATN
ErD40/e1c6pUZU0a7EXAY8f2s3dk08O768VwSGb0gm7dp9PEc8j/0oVI/WBombHy
yRUsK9aS+Bh4MJGv3bCNk1SCGAWKFcAihsYL95pEj6/1/J5mYiaGgngDjQ2RWpU/
zIV+fBbvoUN/EOq+1lCAlUvvGAsGqdAD6QpY48yClgFieKBh920YUb6tpVAxslkS
KBOz/TVmyZlrCc5kI6wF2WpuB8s3XDDouYGvxpmT42ZH+8ePA3t/jAFpbD3wPlWY
H+J7Vf3BKaKvB+Ql93+xcT+N7VF4RVf2njA=
-----END CERTIFICATE-----