Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/80ca4202-3688-363b-9f56-c5b8c8182ba7.roa
File:                     80ca4202-3688-363b-9f56-c5b8c8182ba7.roa (raw, json)
Hash identifier:          3tGJqiX83b1usQ4veT/n1NB816s9NsXcfT5SuZgJHvU=
Subject key identifier:   74:56:57:32:F2:FA:DE:71:4B:B7:8F:CE:E2:BB:75:62:C9:F8:24:3D
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EBF8CF42A69D3B6867D35FCC0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/80ca4202-3688-363b-9f56-c5b8c8182ba7.roa
Signing time:             Fri 29 Jul 2022 12:00:00 +0000
ROA not before:           Fri 29 Jul 2022 12:00:00 +0000
ROA not after:            Mon 01 Aug 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:358::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bf:8c:f4:2a:69:d3:b6:86:7d:35:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul 29 12:00:00 2022 GMT
            Not After : Aug  1 04:00:00 2022 GMT
        Subject: CN=dd632ac1-4ec9-4ced-98c1-fab1c79a12d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0e:be:a1:c8:9b:da:0b:47:38:81:db:be:0c:
                    3f:c3:f3:95:ad:5d:b9:cd:20:a1:5f:28:d0:50:86:
                    b8:9e:84:82:63:82:9b:0f:88:3d:65:51:53:32:4d:
                    1e:72:00:e4:e8:d9:bc:dc:74:07:74:2c:d9:c0:d8:
                    dc:b8:86:b0:79:bb:33:30:b8:4d:0a:a5:64:82:8f:
                    ca:a2:56:05:05:e6:53:58:ad:96:de:00:6b:c6:19:
                    35:38:41:a6:1a:b0:57:5d:91:62:bc:43:88:61:4b:
                    0f:c1:e4:69:30:94:e8:3c:40:6c:d4:3d:54:23:de:
                    96:56:c0:9c:78:9f:19:2f:3b:58:3c:b7:8d:0e:82:
                    2c:c8:64:44:56:61:dd:2f:20:5c:f3:cf:48:c8:3f:
                    e1:25:ed:c2:be:91:f7:78:8b:10:ee:d1:07:11:fd:
                    fc:8c:68:8d:31:56:1e:ad:40:21:63:cd:08:a4:9c:
                    4c:04:36:f6:54:de:b0:87:90:26:72:d6:63:eb:26:
                    16:46:51:cb:41:31:87:7b:61:44:81:8e:d1:06:96:
                    21:40:2c:4e:e5:f9:16:09:ca:55:22:ee:95:9d:d5:
                    e2:68:c1:53:a6:c9:d9:bb:98:1c:d1:62:85:f5:70:
                    18:eb:c4:f4:c8:85:db:52:aa:e0:63:a4:60:3f:fd:
                    46:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:56:57:32:F2:FA:DE:71:4B:B7:8F:CE:E2:BB:75:62:C9:F8:24:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/80ca4202-3688-363b-9f56-c5b8c8182ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:358::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:48:a7:3b:60:18:3c:78:80:fa:a0:b9:a0:e8:54:0a:a3:ee:
         d9:2f:a3:de:52:0a:8e:f3:4a:09:ff:7d:87:69:12:cf:af:07:
         4a:6c:ef:28:6b:46:72:32:b0:d6:d3:5e:c3:b9:2f:17:23:a3:
         7d:86:c8:b1:8e:65:f3:d1:4b:00:fa:cb:e0:e0:fc:49:f2:fb:
         87:3e:aa:15:2b:33:0d:1c:9d:20:8c:05:4e:2f:e9:c2:c0:88:
         73:4c:87:06:2d:ed:95:20:11:de:df:94:8d:cf:23:44:05:6b:
         29:3f:5e:3b:47:ff:fa:1a:e2:43:80:46:9e:74:d3:46:aa:bc:
         23:44:97:9c:96:9c:bf:98:b8:94:7e:cf:03:73:ff:6e:20:a5:
         2e:5d:ad:1a:f0:88:2a:3d:a8:dd:c3:f2:7a:25:f4:5e:92:34:
         37:c6:d2:e8:fb:dd:04:db:30:da:5c:01:62:c1:5d:63:27:82:
         3f:87:a3:55:44:c2:ff:db:54:3b:5a:e3:fc:fd:e5:9d:5f:22:
         1b:84:a7:b2:fe:11:9c:3e:fc:c0:f9:35:54:6a:a5:8b:f5:83:
         3a:18:48:09:31:4f:e8:17:cd:9c:d5:4f:27:47:54:e8:0d:4f:
         7a:e1:79:38:a7:c8:77:b0:69:f2:03:ee:a4:cc:53:38:1a:ad:
         d0:5c:c0:cc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD6/jPQqadO2hn01/MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDcyOTEyMDAwMFoXDTIyMDgwMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGQ2MzJhYzEtNGVjOS00Y2VkLTk4YzEtZmFiMWM3OWExMmQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ6+ocib2gtHOIHbvgw/w/OVrV25zSChXyjQ
UIa4noSCY4KbD4g9ZVFTMk0ecgDk6Nm83HQHdCzZwNjcuIawebszMLhNCqVkgo/K
olYFBeZTWK2W3gBrxhk1OEGmGrBXXZFivEOIYUsPweRpMJToPEBs1D1UI96WVsCc
eJ8ZLztYPLeNDoIsyGREVmHdLyBc889IyD/hJe3CvpH3eIsQ7tEHEf38jGiNMVYe
rUAhY80IpJxMBDb2VN6wh5AmctZj6yYWRlHLQTGHe2FEgY7RBpYhQCxO5fkWCcpV
Iu6VndXiaMFTpsnZu5gc0WKF9XAY68T0yIXbUqrgY6RgP/1G0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHRWVzLy+t5xS7ePzuK7dWLJ+CQ9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvODBjYTQyMDItMzY4OC0z
NjNiLTlmNTYtYzViOGM4MTgyYmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALVIpztgGDx4gPqguaDoVAqj7tkvo95SCo7zSgn/fYdpEs+vB0ps
7yhrRnIysNbTXsO5Lxcjo32GyLGOZfPRSwD6y+Dg/Eny+4c+qhUrMw0cnSCMBU4v
6cLAiHNMhwYt7ZUgEd7flI3PI0QFayk/XjtH//oa4kOARp5000aqvCNEl5yWnL+Y
uJR+zwNz/24gpS5drRrwiCo9qN3D8nol9F6SNDfG0uj73QTbMNpcAWLBXWMngj+H
o1VEwv/bVDta4/z95Z1fIhuEp7L+EZw+/MD5NVRqpYv1gzoYSAkxT+gXzZzVTydH
VOgNT3rheTinyHewafID7qTMUzgardBcwMw=
-----END CERTIFICATE-----