Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/8db79ded-1ecb-3f2b-a10f-4ce417cd6cac.roa
File:                     8db79ded-1ecb-3f2b-a10f-4ce417cd6cac.roa (raw, json)
Hash identifier:          ApLQOFK2QwZe0w+8wXTlZhv9QcMaYcWFyj8rXSpEYtw=
Subject key identifier:   65:48:08:97:8A:21:87:8C:8E:F1:64:35:5B:88:AB:6F:DF:3A:C4:5E
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E3306AE7CDCE844B6FF6C9200
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/8db79ded-1ecb-3f2b-a10f-4ce417cd6cac.roa
Signing time:             Thu 09 Jun 2022 12:00:00 +0000
ROA not before:           Thu 09 Jun 2022 12:00:00 +0000
ROA not after:            Sun 12 Jun 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:33:06:ae:7c:dc:e8:44:b6:ff:6c:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jun  9 12:00:00 2022 GMT
            Not After : Jun 12 04:00:00 2022 GMT
        Subject: CN=1e6e47a8-0e23-40c1-b1f1-48f92067f5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b7:3b:b8:86:bb:6f:d7:96:0a:91:41:de:f3:
                    92:37:e3:7f:ff:b4:f9:bb:2c:ea:68:44:ef:82:ac:
                    2d:6c:77:01:61:bc:7d:57:58:f4:47:2f:89:f6:c1:
                    95:6f:1c:88:86:82:a9:98:65:88:f7:ad:3a:6e:50:
                    56:06:10:96:69:89:73:2d:f1:19:a4:e1:fe:f0:0f:
                    a9:ef:f2:39:99:3c:d8:c0:e2:a3:de:b4:28:71:10:
                    59:85:c3:65:dd:e0:b2:35:a2:27:b7:a9:03:fa:44:
                    45:05:60:77:99:40:c2:09:31:ce:64:45:0f:d7:cc:
                    d2:7f:d1:93:7e:23:cc:d6:43:71:50:bc:2e:dd:5e:
                    71:40:c4:d5:b7:e2:4e:b1:01:d0:79:f3:51:9b:90:
                    e1:ac:93:ab:1c:b0:88:6c:4e:93:c3:07:3d:59:e1:
                    bd:4f:3d:0c:e1:27:b4:86:fd:23:a7:8a:49:b5:5e:
                    d4:f0:57:3a:8e:1c:80:86:64:94:53:ce:1d:fd:07:
                    73:dc:71:38:12:93:3b:e6:10:2b:c9:b1:c0:89:fe:
                    24:51:2f:2c:98:b8:25:94:6b:a2:f0:13:ba:b1:4b:
                    62:d9:f2:e8:f8:62:85:df:14:1c:16:80:a2:ab:47:
                    10:a8:8d:3c:de:4d:d0:9b:c6:d5:74:19:38:fa:a5:
                    01:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:48:08:97:8A:21:87:8C:8E:F1:64:35:5B:88:AB:6F:DF:3A:C4:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/8db79ded-1ecb-3f2b-a10f-4ce417cd6cac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:05:01:df:95:05:46:91:a1:dc:26:a4:ba:25:38:bb:28:46:
         d4:78:e6:c5:ed:e7:4b:2b:fe:8e:e4:d9:ec:93:ae:07:02:6a:
         96:f4:d8:48:46:c2:f5:61:4a:a0:57:b9:8a:8a:70:94:5c:ea:
         56:09:bf:cd:b3:5a:23:04:e6:91:b4:f5:4a:f6:b5:9c:22:62:
         0e:dc:4c:32:a6:9b:73:8b:71:32:9e:fa:d9:65:a9:0a:81:9d:
         6b:bf:4a:a0:73:cc:e5:38:68:7d:9a:c1:15:78:5d:fb:7a:a1:
         f3:83:22:8c:b0:c7:7c:9e:cf:c3:02:4b:06:c5:6f:61:88:f7:
         a6:ef:91:c3:3e:7b:0d:47:54:92:5d:49:10:68:97:e9:02:94:
         ac:2e:fa:54:cf:2d:95:c1:50:e2:bc:0f:48:3f:b3:fd:84:ed:
         32:49:58:83:8a:2c:c4:40:da:b6:89:af:a5:c2:5d:fd:4e:9c:
         aa:2c:f5:43:98:27:a5:c4:1b:ef:83:a9:d9:03:30:fb:80:7a:
         a1:fe:db:78:8e:c9:53:f3:e3:b9:4e:ab:a2:da:0b:6f:f7:fc:
         43:0d:c0:9e:14:cb:64:91:0b:61:12:43:37:7e:c7:3b:9f:e9:
         10:23:ba:87:34:12:c7:ca:48:f3:e0:96:92:75:8b:58:a2:d2:
         2b:d7:ec:57
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD4zBq583OhEtv9skgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDYwOTEyMDAwMFoXDTIyMDYxMjA0MDAwMFowLzEtMCsGA1UEAxMk
MWU2ZTQ3YTgtMGUyMy00MGMxLWIxZjEtNDhmOTIwNjdmNWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbc7uIa7b9eWCpFB3vOSN+N//7T5uyzqaETv
gqwtbHcBYbx9V1j0Ry+J9sGVbxyIhoKpmGWI9606blBWBhCWaYlzLfEZpOH+8A+p
7/I5mTzYwOKj3rQocRBZhcNl3eCyNaInt6kD+kRFBWB3mUDCCTHOZEUP18zSf9GT
fiPM1kNxULwu3V5xQMTVt+JOsQHQefNRm5DhrJOrHLCIbE6Twwc9WeG9Tz0M4Se0
hv0jp4pJtV7U8Fc6jhyAhmSUU84d/Qdz3HE4EpM75hArybHAif4kUS8smLgllGui
8BO6sUti2fLo+GKF3xQcFoCiq0cQqI083k3Qm8bVdBk4+qUBVQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGVICJeKIYeMjvFkNVuIq2/fOsReMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvOGRiNzlkZWQtMWVjYi0z
ZjJiLWExMGYtNGNlNDE3Y2Q2Y2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA8FAd+VBUaRodwmpLolOLsoRtR45sXt50sr/o7k2eyTrgcCapb0
2EhGwvVhSqBXuYqKcJRc6lYJv82zWiME5pG09Ur2tZwiYg7cTDKmm3OLcTKe+tll
qQqBnWu/SqBzzOU4aH2awRV4Xft6ofODIoywx3yez8MCSwbFb2GI96bvkcM+ew1H
VJJdSRBol+kClKwu+lTPLZXBUOK8D0g/s/2E7TJJWIOKLMRA2raJr6XCXf1OnKos
9UOYJ6XEG++DqdkDMPuAeqH+23iOyVPz47lOq6LaC2/3/EMNwJ4Uy2SRC2ESQzd+
xzuf6RAjuoc0EsfKSPPglpJ1i1ii0ivX7Fc=
-----END CERTIFICATE-----