Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6d352626-92f4-3f83-b491-8bff6f213520.roa
File:                     6d352626-92f4-3f83-b491-8bff6f213520.roa (raw, json)
Hash identifier:          zZsYtuDykPuPEOtFdWZnLLKFcFDcNPF0ym2a8xaXfoY=
Subject key identifier:   8B:42:2D:E3:31:9B:19:D8:7C:E3:AD:75:FE:70:31:5B:22:98:4B:C1
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D42281359E8FE3AFB55D4FA70
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6d352626-92f4-3f83-b491-8bff6f213520.roa
Signing time:             Wed 16 Mar 2022 04:00:00 +0000
ROA not before:           Wed 16 Mar 2022 04:00:00 +0000
ROA not after:            Wed 20 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2605:9cc0:39c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:42:28:13:59:e8:fe:3a:fb:55:d4:fa:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar 16 04:00:00 2022 GMT
            Not After : Apr 20 04:00:00 2022 GMT
        Subject: CN=07ccfb47-f88d-4e44-88bb-ce505385dc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:82:c9:2a:08:e5:6a:30:c3:9e:2e:30:08:4e:
                    db:2b:42:72:28:a3:eb:cc:b2:8c:bd:c7:ad:6f:80:
                    e6:06:74:09:47:5f:c3:3f:23:16:05:d7:b9:c3:e0:
                    fb:34:9b:c9:61:c5:ec:f6:2f:5d:dd:c8:15:da:49:
                    c7:ba:8e:3a:91:96:0f:4b:90:62:29:89:af:55:a9:
                    3f:81:02:5b:20:e4:18:08:e9:60:fa:5c:bc:04:77:
                    90:4c:5b:27:dc:d1:af:6e:76:63:42:b7:f5:0b:8a:
                    dc:f6:09:f7:65:7b:62:db:9b:b8:bb:9a:5e:95:b5:
                    82:dc:13:e7:6f:d6:55:cb:ff:2a:28:31:e5:d1:d0:
                    e4:83:43:5f:d9:ad:a7:6b:c8:b3:5c:1c:a3:44:8c:
                    b5:b1:68:20:13:55:b4:2f:d7:bc:7d:9b:96:6b:a4:
                    10:8e:eb:7d:02:a1:6b:37:0f:91:d3:9f:89:6d:b6:
                    4b:b9:c6:a8:12:33:49:6d:f8:57:c3:fb:fa:27:4f:
                    8c:db:50:cb:53:41:ba:f3:1d:cb:27:28:40:2f:4e:
                    db:8d:1c:54:f0:4b:d4:28:0b:fc:5a:68:bc:e1:40:
                    6f:7d:2d:ec:90:f4:96:f3:f6:6c:35:e3:38:77:ed:
                    e4:47:33:14:cd:a8:0f:93:34:47:83:7a:d4:06:a0:
                    47:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:42:2D:E3:31:9B:19:D8:7C:E3:AD:75:FE:70:31:5B:22:98:4B:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6d352626-92f4-3f83-b491-8bff6f213520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:39c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:52:0b:df:ea:01:4c:43:ba:3f:a9:93:dc:62:40:cf:a2:b1:
         38:b7:52:c6:4c:8d:6d:e1:a0:70:f1:f8:b3:91:7c:f6:d5:6a:
         b9:53:df:9f:d2:20:36:47:01:d5:a0:f2:62:87:c6:6b:e6:40:
         ec:f1:a5:9d:b2:1f:9c:82:32:dc:a9:fe:40:75:64:73:4b:5b:
         a1:0d:be:ee:9e:90:d0:4e:da:67:65:ac:23:47:6e:90:0e:bc:
         4c:02:1b:e6:a7:37:d7:0f:07:e1:fc:24:e5:5d:28:02:4e:c3:
         43:f9:6f:72:fa:b5:01:de:9d:f3:f5:5d:8f:41:bb:16:7e:c5:
         dd:6b:82:99:b3:ee:eb:37:e8:b0:a6:ac:76:f7:2d:a0:fc:79:
         4f:0d:f2:1b:f7:23:81:2b:f6:57:de:61:e9:2c:9f:e4:a8:65:
         6b:81:a8:b5:ce:1a:ff:72:fb:b2:ec:00:3d:26:39:44:48:68:
         15:d8:89:c4:bd:c9:6e:2b:00:ab:82:bd:96:b4:75:c0:d3:70:
         5c:e6:0b:f3:33:91:40:5b:ac:35:55:05:f0:67:73:6a:c3:75:
         1b:c4:fb:3e:0a:7c:f3:9a:e0:5f:fd:0e:7f:b5:e1:aa:d1:67:
         a0:37:88:f8:63:c3:8e:7d:96:d6:e3:29:73:2c:5b:bb:49:24:
         ce:45:b4:09
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD1CKBNZ6P46+1XU+nAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDMxNjA0MDAwMFoXDTIyMDQyMDA0MDAwMFowLzEtMCsGA1UEAxMk
MDdjY2ZiNDctZjg4ZC00ZTQ0LTg4YmItY2U1MDUzODVkYzliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoLJKgjlajDDni4wCE7bK0JyKKPrzLKMvcet
b4DmBnQJR1/DPyMWBde5w+D7NJvJYcXs9i9d3cgV2knHuo46kZYPS5BiKYmvVak/
gQJbIOQYCOlg+ly8BHeQTFsn3NGvbnZjQrf1C4rc9gn3ZXti25u4u5pelbWC3BPn
b9ZVy/8qKDHl0dDkg0Nf2a2na8izXByjRIy1sWggE1W0L9e8fZuWa6QQjut9AqFr
Nw+R05+JbbZLucaoEjNJbfhXw/v6J0+M21DLU0G68x3LJyhAL07bjRxU8EvUKAv8
Wmi84UBvfS3skPSW8/ZsNeM4d+3kRzMUzagPkzRHg3rUBqBH7QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFItCLeMxmxnYfOOtdf5wMVsimEvBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvNmQzNTI2MjYtOTJmNC0z
ZjgzLWI0OTEtOGJmZjZmMjEzNTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOc
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGdSC9/qAUxDuj+pk9xiQM+isTi3UsZMjW3hoHDx+LORfPbVarlT
35/SIDZHAdWg8mKHxmvmQOzxpZ2yH5yCMtyp/kB1ZHNLW6ENvu6ekNBO2mdlrCNH
bpAOvEwCG+anN9cPB+H8JOVdKAJOw0P5b3L6tQHenfP1XY9BuxZ+xd1rgpmz7us3
6LCmrHb3LaD8eU8N8hv3I4Er9lfeYeksn+SoZWuBqLXOGv9y+7LsAD0mOURIaBXY
icS9yW4rAKuCvZa0dcDTcFzmC/MzkUBbrDVVBfBnc2rDdRvE+z4KfPOa4F/9Dn+1
4arRZ6A3iPhjw459ltbjKXMsW7tJJM5FtAk=
-----END CERTIFICATE-----