Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7138dd54-b8c8-3659-96cd-e10259162d26.roa
File:                     7138dd54-b8c8-3659-96cd-e10259162d26.roa (raw, json)
Hash identifier:          3a0tB2+J/HArUPfAJCoCry+s80yl7kvrwIBzlJYzsH4=
Subject key identifier:   ED:86:A3:2D:93:78:2E:72:EE:BE:2C:D7:94:37:06:10:1E:20:0D:23
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E9A40A19CE85F695781E09520
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7138dd54-b8c8-3659-96cd-e10259162d26.roa
Signing time:             Sat 16 Jul 2022 12:00:00 +0000
ROA not before:           Sat 16 Jul 2022 12:00:00 +0000
ROA not after:            Tue 19 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:9a:40:a1:9c:e8:5f:69:57:81:e0:95:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul 16 12:00:00 2022 GMT
            Not After : Jul 19 04:00:00 2022 GMT
        Subject: CN=d224dfe8-fd1a-438e-b438-fb878b8683a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8f:b2:64:bb:86:87:bc:a9:c6:24:e2:af:56:
                    2f:86:2a:82:0f:4e:b0:c6:20:7f:18:62:b9:75:a4:
                    28:3d:18:95:d8:be:d2:1c:35:41:5e:19:35:fa:db:
                    55:68:bf:d1:d7:84:81:ab:7a:2b:b7:28:d6:04:a7:
                    65:40:44:39:9c:9a:8a:a0:47:21:6f:b2:66:61:7d:
                    b1:e9:3d:2e:be:2e:06:5d:ce:7f:e9:c8:e2:dc:de:
                    c9:7b:9f:58:c7:45:b7:08:f3:34:4d:53:03:eb:da:
                    c2:3a:ea:e7:8d:dc:52:42:a3:dd:65:95:34:1b:cb:
                    87:b5:81:3b:20:5a:0c:fa:4c:bb:03:83:73:e6:07:
                    36:bf:88:99:c0:ba:72:4c:66:d7:91:0e:72:37:b5:
                    91:df:fe:95:77:10:86:65:4b:ee:b6:48:6a:fb:61:
                    82:b1:e1:3d:f1:98:f3:6c:f2:b6:de:df:25:29:2a:
                    0e:d3:6f:c8:03:ce:cc:82:f5:2a:e0:34:7c:53:8e:
                    3a:7a:fe:c3:d5:38:03:c3:26:11:85:81:54:9c:3a:
                    18:82:02:da:ee:54:40:df:f5:9c:e0:75:b7:e7:8d:
                    4f:4f:0b:16:8c:bc:93:ef:cf:66:64:fb:2f:c8:de:
                    80:77:87:05:c0:c9:3d:30:1d:91:32:b2:93:01:8f:
                    4f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:86:A3:2D:93:78:2E:72:EE:BE:2C:D7:94:37:06:10:1E:20:0D:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7138dd54-b8c8-3659-96cd-e10259162d26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:d9:68:f8:3f:0b:c4:ae:b0:30:58:1c:b4:0d:37:2e:c5:0f:
         aa:bc:b0:56:c8:a7:a6:8b:4c:b2:8b:45:e5:c7:b6:49:0f:36:
         3e:37:8b:fa:ab:84:c4:8f:d9:4b:70:3b:2c:2e:18:cf:34:d7:
         4a:3a:f3:8c:47:a3:51:f8:bd:40:d8:83:96:d3:bb:9e:bd:3a:
         b6:e9:c2:c3:82:de:36:0e:de:17:41:32:2f:5f:2d:5e:66:cf:
         ff:60:e6:d3:7b:a5:2a:68:ec:f1:6a:d5:d5:35:50:71:a9:c4:
         ea:38:dc:84:6e:cd:df:31:50:b0:e9:0a:84:57:8f:71:4e:ce:
         ad:eb:6c:4b:d1:76:be:02:05:4b:36:e3:11:9f:25:dc:c3:41:
         c1:24:7e:1a:c4:f6:5e:cc:9d:df:94:df:77:f7:ff:24:e0:96:
         05:a5:2e:cc:0d:fe:0b:38:23:dc:2e:f4:55:7b:43:70:dc:d1:
         ba:b8:36:89:59:45:b4:85:0a:d1:5b:6a:8a:1a:e9:81:b4:f6:
         b1:3b:94:b7:c0:51:2e:ad:37:3d:93:ee:bd:de:0f:dd:1a:4e:
         37:2c:bb:89:cb:ee:cc:3d:cd:df:88:38:b7:fb:a3:d5:e9:85:
         b0:30:0f:5c:7c:61:f2:26:e0:d5:3e:e9:53:78:c1:16:b5:83:
         d0:72:60:4b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD6aQKGc6F9pV4HglSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDcxNjEyMDAwMFoXDTIyMDcxOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDIyNGRmZTgtZmQxYS00MzhlLWI0MzgtZmI4NzhiODY4M2E1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY+yZLuGh7ypxiTir1YvhiqCD06wxiB/GGK5
daQoPRiV2L7SHDVBXhk1+ttVaL/R14SBq3ortyjWBKdlQEQ5nJqKoEchb7JmYX2x
6T0uvi4GXc5/6cji3N7Je59Yx0W3CPM0TVMD69rCOurnjdxSQqPdZZU0G8uHtYE7
IFoM+ky7A4Nz5gc2v4iZwLpyTGbXkQ5yN7WR3/6VdxCGZUvutkhq+2GCseE98Zjz
bPK23t8lKSoO02/IA87MgvUq4DR8U446ev7D1TgDwyYRhYFUnDoYggLa7lRA3/Wc
4HW3541PTwsWjLyT789mZPsvyN6Ad4cFwMk9MB2RMrKTAY9PmwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO2Goy2TeC5y7r4s15Q3BhAeIA0jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvNzEzOGRkNTQtYjhjOC0z
NjU5LTk2Y2QtZTEwMjU5MTYyZDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKvZaPg/C8SusDBYHLQNNy7FD6q8sFbIp6aLTLKLReXHtkkPNj43
i/qrhMSP2UtwOywuGM8010o684xHo1H4vUDYg5bTu569OrbpwsOC3jYO3hdBMi9f
LV5mz/9g5tN7pSpo7PFq1dU1UHGpxOo43IRuzd8xULDpCoRXj3FOzq3rbEvRdr4C
BUs24xGfJdzDQcEkfhrE9l7Mnd+U33f3/yTglgWlLswN/gs4I9wu9FV7Q3Dc0bq4
NolZRbSFCtFbaooa6YG09rE7lLfAUS6tNz2T7r3eD90aTjcsu4nL7sw9zd+IOLf7
o9XphbAwD1x8YfIm4NU+6VN4wRa1g9ByYEs=
-----END CERTIFICATE-----