Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/71aa7efb-9316-3b23-a65a-3623b0a1eaf8.roa
File:                     71aa7efb-9316-3b23-a65a-3623b0a1eaf8.roa (raw, json)
Hash identifier:          r3L9mrYrSwW8sbOJzPvvCPHhkkh1mOBMGAPPB7akUI8=
Subject key identifier:   DA:CA:35:A1:2E:28:F1:35:91:67:CA:69:E8:C4:EB:40:A3:10:C6:34
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583848E878A2E12D515667E67290
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/71aa7efb-9316-3b23-a65a-3623b0a1eaf8.roa
Signing time:             Tue 05 Nov 2019 05:00:00 +0000
ROA not before:           Tue 05 Nov 2019 05:00:00 +0000
ROA not after:            Mon 20 Mar 2023 04:00:00 +0000
asID:                     16509
IP address blocks:        2605:9cc0:38b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:48:e8:78:a2:e1:2d:51:56:67:e6:72:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  5 05:00:00 2019 GMT
            Not After : Mar 20 04:00:00 2023 GMT
        Subject: CN=e8505697-4e02-489f-83c6-bff543e6f3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a8:4c:85:39:2a:6c:f4:bd:11:a0:16:68:5c:
                    62:25:3d:76:c1:2b:70:9e:7e:fd:22:c0:d3:36:be:
                    22:39:28:ac:13:ad:ee:9a:d2:26:fd:be:03:35:42:
                    7c:cb:51:08:c9:bd:04:45:2a:67:44:50:f2:e8:e6:
                    9e:19:12:ff:9c:f5:03:b2:9f:8e:17:86:1d:99:f5:
                    e0:a9:c5:3b:94:03:b4:e4:f6:87:f0:13:d2:92:7c:
                    65:35:c3:46:f6:9c:0e:a7:73:bf:ee:8b:b0:44:69:
                    3e:84:a0:a9:13:86:cc:94:ee:2f:b4:a3:7c:ad:f9:
                    f4:18:81:86:9f:ad:16:71:b7:86:a8:99:04:ae:ec:
                    1e:9f:8c:b2:11:f9:b6:e2:90:4f:33:fe:00:0a:87:
                    53:e7:b6:bd:1e:76:41:f9:83:ef:9a:f7:3e:e9:94:
                    c8:65:87:ad:1b:e4:32:1b:9c:60:00:02:51:b0:a6:
                    e8:75:8d:d3:c9:ed:0f:02:b5:d7:b6:71:36:07:55:
                    a1:7c:68:eb:c5:43:73:d0:12:72:0b:0a:ec:9d:a2:
                    b4:f2:fb:ae:39:10:46:4a:f9:68:de:2f:1e:6c:e9:
                    e9:cb:a4:f9:78:99:df:58:d8:b6:91:d9:61:79:d1:
                    8a:f4:8a:bd:3f:96:95:11:e4:73:70:81:f2:19:69:
                    57:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CA:35:A1:2E:28:F1:35:91:67:CA:69:E8:C4:EB:40:A3:10:C6:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/71aa7efb-9316-3b23-a65a-3623b0a1eaf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:38b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c6:a9:71:b8:ed:02:44:ab:15:ca:36:b8:95:d4:9e:bb:3e:
         cc:ae:63:19:e2:e0:57:75:60:2f:a8:ac:a3:cb:88:3e:2d:42:
         05:d0:be:de:32:bc:08:d3:a5:05:d2:87:61:d3:a1:60:13:d0:
         a9:41:bc:78:62:54:39:02:ba:e2:52:c6:f0:26:93:de:f0:db:
         8a:38:01:f9:52:24:23:5d:6c:77:e9:9e:06:6d:0b:b3:e6:7f:
         02:6a:04:eb:fb:ff:c5:3d:0d:f4:56:5b:94:cd:10:db:74:4a:
         aa:be:64:ff:71:19:b2:10:97:bf:c7:1d:06:28:42:81:09:6c:
         a3:65:1e:2c:dc:70:b2:59:af:45:11:9b:38:87:63:d4:3c:79:
         d8:d1:66:cf:5f:6a:ac:e2:4a:d4:63:0a:da:1d:52:d7:9f:dc:
         32:16:b3:fa:9c:02:4b:a0:45:50:66:b2:80:6a:da:5a:ec:03:
         f9:3b:82:ac:00:ad:81:35:35:a1:7e:83:55:b8:c5:13:b8:5e:
         65:a6:63:02:67:57:23:e2:0b:99:62:1b:07:25:51:04:54:75:
         2a:46:63:d8:e1:0d:9b:e5:44:7c:f8:37:ca:0d:52:02:82:70:
         b1:99:64:41:d3:1f:cd:24:a4:aa:78:eb:c6:69:0e:14:d1:2e:
         5c:9c:f2:f0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDhI6Hii4S1RVmfmcpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTE5MTEwNTA1MDAwMFoXDTIzMDMyMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZTg1MDU2OTctNGUwMi00ODlmLTgzYzYtYmZmNTQzZTZmM2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKhMhTkqbPS9EaAWaFxiJT12wStwnn79IsDT
Nr4iOSisE63umtIm/b4DNUJ8y1EIyb0ERSpnRFDy6OaeGRL/nPUDsp+OF4YdmfXg
qcU7lAO05PaH8BPSknxlNcNG9pwOp3O/7ouwRGk+hKCpE4bMlO4vtKN8rfn0GIGG
n60WcbeGqJkEruwen4yyEfm24pBPM/4ACodT57a9HnZB+YPvmvc+6ZTIZYetG+Qy
G5xgAAJRsKbodY3Tye0PArXXtnE2B1WhfGjrxUNz0BJyCwrsnaK08vuuORBGSvlo
3i8ebOnpy6T5eJnfWNi2kdlhedGK9Iq9P5aVEeRzcIHyGWlXuwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNrKNaEuKPE1kWfKaejE60CjEMY0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvNzFhYTdlZmItOTMxNi0z
YjIzLWE2NWEtMzYyM2IwYTFlYWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOL
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB3GqXG47QJEqxXKNriV1J67PsyuYxni4Fd1YC+orKPLiD4tQgXQ
vt4yvAjTpQXSh2HToWAT0KlBvHhiVDkCuuJSxvAmk97w24o4AflSJCNdbHfpngZt
C7PmfwJqBOv7/8U9DfRWW5TNENt0Sqq+ZP9xGbIQl7/HHQYoQoEJbKNlHizccLJZ
r0URmziHY9Q8edjRZs9faqziStRjCtodUtef3DIWs/qcAkugRVBmsoBq2lrsA/k7
gqwArYE1NaF+g1W4xRO4XmWmYwJnVyPiC5liGwclUQRUdSpGY9jhDZvlRHz4N8oN
UgKCcLGZZEHTH80kpKp468ZpDhTRLlyc8vA=
-----END CERTIFICATE-----