Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/96b28784-d211-30fa-83af-d0314904d7be.roa
File:                     96b28784-d211-30fa-83af-d0314904d7be.roa (raw, json)
Hash identifier:          7fdqyaSYHn6ln4BxTGe19BY+uxjrpO7bOBRNn7EQS80=
Subject key identifier:   FB:E3:F1:E8:55:23:96:4E:34:CA:8C:00:5A:7E:BC:0F:1E:CC:2F:1C
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D0C8118A3B6E691DBFC3FDF80
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/96b28784-d211-30fa-83af-d0314904d7be.roa
Signing time:             Thu 24 Feb 2022 05:00:00 +0000
ROA not before:           Thu 24 Feb 2022 05:00:00 +0000
ROA not after:            Sat 26 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0c:81:18:a3:b6:e6:91:db:fc:3f:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb 24 05:00:00 2022 GMT
            Not After : Feb 26 05:00:00 2022 GMT
        Subject: CN=32e5427f-ce2b-470c-bb96-2cffd938cf5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:f3:53:e0:92:92:96:a9:86:ef:40:f8:c0:
                    15:cf:ec:33:32:5e:a8:52:0e:c2:af:35:89:c4:87:
                    6f:f4:a7:66:cb:13:99:ee:72:7b:97:55:ee:0f:16:
                    eb:a0:ff:27:c4:8b:00:b3:72:92:d0:45:8b:0a:59:
                    b2:35:00:89:5a:d5:49:55:80:db:93:ab:a7:4a:07:
                    a2:55:e1:6b:77:17:2a:49:eb:55:5e:ab:be:ed:3a:
                    66:af:70:7d:eb:36:a5:58:85:be:4f:a8:17:3d:4e:
                    28:e4:a1:18:3d:5a:50:d6:23:f6:02:42:be:1f:19:
                    c3:b2:c1:46:d7:e4:d7:21:66:2a:6b:84:52:7b:c3:
                    d6:cf:ac:87:4a:4a:fb:fb:af:25:cb:b0:24:51:e0:
                    e1:c9:97:04:30:34:9f:b9:25:8f:73:ec:60:7b:9d:
                    6d:8b:1d:3b:bb:6b:d4:73:40:c0:7f:64:48:1c:0d:
                    e9:80:4b:9f:1e:59:0c:bb:08:86:7a:4b:46:6e:f2:
                    51:5a:9e:fc:5f:66:59:08:1f:e5:97:aa:c5:68:87:
                    36:55:26:72:7e:8c:3e:e0:1c:78:50:3f:f3:67:71:
                    1b:2a:b9:3b:65:d6:34:35:96:9a:2f:06:19:9f:dc:
                    b4:4d:10:4b:79:30:84:73:1c:e8:a0:e0:66:c3:d6:
                    47:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E3:F1:E8:55:23:96:4E:34:CA:8C:00:5A:7E:BC:0F:1E:CC:2F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/96b28784-d211-30fa-83af-d0314904d7be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:84:d2:51:a2:23:e9:7b:c0:c6:b5:f0:dd:28:54:d3:d8:18:
         07:24:4b:65:b0:47:70:45:d1:c8:64:f0:32:25:02:fc:97:4f:
         9a:03:10:e5:11:17:d1:6b:7e:bb:df:95:4f:a8:3f:de:f7:e8:
         d3:88:0f:53:b0:78:52:89:13:6e:7b:e3:6e:3c:7b:58:83:71:
         ee:4f:f1:09:59:41:fd:42:04:55:5c:ba:e4:0e:f8:0c:a1:29:
         15:1b:36:31:0b:76:9a:4b:a5:a4:22:82:13:bf:9e:62:62:55:
         f8:44:30:e9:07:f0:69:7b:af:4f:ae:f3:e2:e0:45:bf:4b:d5:
         a2:1f:06:b6:35:c2:33:7e:ec:1c:3a:87:31:2d:78:98:4c:e4:
         60:61:f0:cf:2c:e4:e2:60:53:1d:fb:cb:95:40:ca:e8:d9:ea:
         1a:78:2d:24:76:75:5b:32:40:f1:c3:66:1b:12:6b:95:cd:5d:
         19:2b:1c:a6:04:3f:7a:38:7c:cd:db:a4:6f:7b:5c:a9:4b:d1:
         9c:d2:ee:8c:a0:ce:9d:d0:4d:36:cc:32:33:70:ee:a7:ee:79:
         7d:92:1d:13:3d:2e:75:e3:b9:01:11:56:55:ac:13:08:58:c4:
         04:2d:be:2d:23:73:31:94:36:56:ba:4e:9b:d5:6a:5f:9b:f2:
         30:e7:56:8a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD0MgRijtuaR2/w/34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDIyNDA1MDAwMFoXDTIyMDIyNjA1MDAwMFowLzEtMCsGA1UEAxMk
MzJlNTQyN2YtY2UyYi00NzBjLWJiOTYtMmNmZmQ5MzhjZjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA7zU+CSkpaphu9A+MAVz+wzMl6oUg7CrzWJ
xIdv9KdmyxOZ7nJ7l1XuDxbroP8nxIsAs3KS0EWLClmyNQCJWtVJVYDbk6unSgei
VeFrdxcqSetVXqu+7Tpmr3B96zalWIW+T6gXPU4o5KEYPVpQ1iP2AkK+HxnDssFG
1+TXIWYqa4RSe8PWz6yHSkr7+68ly7AkUeDhyZcEMDSfuSWPc+xge51tix07u2vU
c0DAf2RIHA3pgEufHlkMuwiGektGbvJRWp78X2ZZCB/ll6rFaIc2VSZyfow+4Bx4
UD/zZ3EbKrk7ZdY0NZaaLwYZn9y0TRBLeTCEcxzooOBmw9ZHawIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPvj8ehVI5ZONMqMAFp+vA8ezC8cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvOTZiMjg3ODQtZDIxMS0z
MGZhLTgzYWYtZDAzMTQ5MDRkN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJKE0lGiI+l7wMa18N0oVNPYGAckS2WwR3BF0chk8DIlAvyXT5oD
EOURF9FrfrvflU+oP9736NOID1OweFKJE2574248e1iDce5P8QlZQf1CBFVcuuQO
+AyhKRUbNjELdppLpaQighO/nmJiVfhEMOkH8Gl7r0+u8+LgRb9L1aIfBrY1wjN+
7Bw6hzEteJhM5GBh8M8s5OJgUx37y5VAyujZ6hp4LSR2dVsyQPHDZhsSa5XNXRkr
HKYEP3o4fM3bpG97XKlL0ZzS7oygzp3QTTbMMjNw7qfueX2SHRM9LnXjuQERVlWs
EwhYxAQtvi0jczGUNla6TpvVal+b8jDnVoo=
-----END CERTIFICATE-----