Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/8e961f6b-9f85-3cd4-8f31-eb4282ff67ec.roa
File:                     8e961f6b-9f85-3cd4-8f31-eb4282ff67ec.roa (raw, json)
Hash identifier:          fxrPqGCD2F8b46P3sa2RR5nwV1n01OyA9eXYENWXXiM=
Subject key identifier:   CB:86:1D:5F:07:13:4B:A4:FB:1A:EC:DE:E7:3F:A7:09:8A:93:B8:15
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583DAEAAC7C2E7FACC9B7E00F220
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/8e961f6b-9f85-3cd4-8f31-eb4282ff67ec.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Mon 25 Apr 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ae:aa:c7:c2:e7:fa:cc:9b:7e:00:f2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : Apr 25 04:00:00 2022 GMT
        Subject: CN=041b809f-71e7-4e4d-904a-d89ae9428a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f7:f7:68:9c:c3:74:75:a4:72:a0:68:5c:8e:
                    37:08:a0:1a:62:95:d3:32:c8:0a:92:b7:70:94:45:
                    f1:f3:ed:99:9f:20:d9:df:cf:a6:39:3c:29:2e:fb:
                    0b:95:0d:9f:b6:c9:5e:b9:87:ad:6a:54:5f:6a:e2:
                    bf:df:d5:60:7c:a6:ef:a1:31:43:6a:51:93:a7:13:
                    89:ab:1c:61:f4:ff:6d:a9:5e:1b:e6:b5:9f:c6:2f:
                    fa:5b:19:01:59:e9:b7:df:d1:6f:cf:04:cf:a7:23:
                    39:82:23:8e:b9:79:22:5e:3c:34:8f:f6:d0:24:77:
                    7a:48:1e:67:a4:78:e2:8a:5d:04:bf:1f:57:4f:21:
                    e8:fe:03:a0:de:12:00:ca:69:f0:f1:ce:27:d3:04:
                    9b:f7:fb:ca:b5:ac:e0:d4:f5:82:e3:40:8b:d3:5a:
                    42:e4:3a:c9:8b:9c:7f:ab:7c:26:bd:f1:e0:39:8c:
                    92:b3:e7:d5:84:70:41:bd:6e:8b:54:15:8a:c9:de:
                    fb:7e:7b:20:3f:c9:ed:ab:c3:02:95:64:48:17:b1:
                    f5:13:de:8a:bd:be:27:eb:ad:32:7e:11:a1:ea:82:
                    28:a8:b6:10:87:4a:e2:71:ab:f0:73:88:4e:1f:dc:
                    69:46:fa:ff:59:94:f0:fb:7c:c0:fa:97:b2:29:5c:
                    2e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:86:1D:5F:07:13:4B:A4:FB:1A:EC:DE:E7:3F:A7:09:8A:93:B8:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/8e961f6b-9f85-3cd4-8f31-eb4282ff67ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:54:43:f3:19:24:f8:de:da:c8:dc:73:0f:3e:c3:40:42:c3:
         09:fc:88:be:a8:4b:1f:10:e2:31:98:c8:35:91:49:05:b3:5a:
         4f:5a:d2:b5:ff:ec:54:95:d7:91:c4:1c:b7:a1:e0:75:20:95:
         a9:fa:76:b4:8d:a7:98:a1:1c:26:c3:a9:3e:e0:5a:2e:dc:a8:
         ac:8e:5d:3e:d9:00:91:41:4e:ac:78:0e:95:9f:40:1b:0f:68:
         a0:ca:9d:81:51:11:92:cf:f7:a9:84:f6:28:c3:a3:bd:bb:87:
         cb:6d:83:7b:ae:03:f1:4e:5f:f2:b3:a3:2f:49:26:83:89:b1:
         dc:1b:aa:f2:67:8b:eb:b8:9e:8a:48:85:1a:5b:24:94:37:a0:
         91:90:18:98:ad:6d:7e:ac:76:fe:c0:2b:85:42:34:d9:44:2f:
         23:2d:86:6a:58:83:d2:41:ae:87:7b:89:65:ea:27:d5:fd:0a:
         b4:90:9c:42:d9:af:7b:6c:bc:6c:ed:8e:81:b2:b9:aa:82:db:
         12:11:c5:6b:fa:a6:32:e7:11:72:c9:d7:db:f9:e2:a6:5c:ca:
         49:b7:b9:eb:9a:7a:aa:23:45:51:5e:0f:59:e3:5f:4e:1f:7c:
         97:47:70:ed:14:62:e5:6d:f3:74:21:72:e0:d1:41:cd:b2:a2:
         5f:db:0f:7a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD2uqsfC5/rMm34A8iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDQyMjEyMDAwMFoXDTIyMDQyNTA0MDAwMFowLzEtMCsGA1UEAxMk
MDQxYjgwOWYtNzFlNy00ZTRkLTkwNGEtZDg5YWU5NDI4YTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvf3aJzDdHWkcqBoXI43CKAaYpXTMsgKkrdw
lEXx8+2ZnyDZ38+mOTwpLvsLlQ2ftsleuYetalRfauK/39VgfKbvoTFDalGTpxOJ
qxxh9P9tqV4b5rWfxi/6WxkBWem339FvzwTPpyM5giOOuXkiXjw0j/bQJHd6SB5n
pHjiil0Evx9XTyHo/gOg3hIAymnw8c4n0wSb9/vKtazg1PWC40CL01pC5DrJi5x/
q3wmvfHgOYySs+fVhHBBvW6LVBWKyd77fnsgP8ntq8MClWRIF7H1E96Kvb4n660y
fhGh6oIoqLYQh0ricavwc4hOH9xpRvr/WZTw+3zA+peyKVwumQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMuGHV8HE0uk+xrs3uc/pwmKk7gVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvOGU5NjFmNmItOWY4NS0z
Y2Q0LThmMzEtZWI0MjgyZmY2N2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF1UQ/MZJPje2sjccw8+w0BCwwn8iL6oSx8Q4jGYyDWRSQWzWk9a
0rX/7FSV15HEHLeh4HUglan6drSNp5ihHCbDqT7gWi7cqKyOXT7ZAJFBTqx4DpWf
QBsPaKDKnYFREZLP96mE9ijDo727h8ttg3uuA/FOX/Kzoy9JJoOJsdwbqvJni+u4
nopIhRpbJJQ3oJGQGJitbX6sdv7AK4VCNNlELyMthmpYg9JBrod7iWXqJ9X9CrSQ
nELZr3tsvGztjoGyuaqC2xIRxWv6pjLnEXLJ19v54qZcykm3ueuaeqojRVFeD1nj
X04ffJdHcO0UYuVt83QhcuDRQc2yol/bD3o=
-----END CERTIFICATE-----