Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/96bc106c-00ea-31a7-8521-d67778ab214e.roa
File:                     96bc106c-00ea-31a7-8521-d67778ab214e.roa (raw, json)
Hash identifier:          iMBZjGDVI23ESO9Nffy9u50z0Vasx8G4FBaJgcLHYyo=
Subject key identifier:   B8:99:3B:8C:A6:EC:7F:C3:72:1F:E3:73:0F:09:70:30:51:49:B4:51
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E5498425CFD7983CC86009200
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/96bc106c-00ea-31a7-8521-d67778ab214e.roa
Signing time:             Tue 21 Jun 2022 12:00:00 +0000
ROA not before:           Tue 21 Jun 2022 12:00:00 +0000
ROA not after:            Fri 24 Jun 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:54:98:42:5c:fd:79:83:cc:86:00:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jun 21 12:00:00 2022 GMT
            Not After : Jun 24 04:00:00 2022 GMT
        Subject: CN=2b774b06-beb3-489c-b724-f4bc81b4ca0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:77:2c:c6:30:16:74:8f:e2:ab:18:f9:e0:fa:
                    7e:e7:b9:6b:cd:cd:23:15:04:d7:69:9a:e4:b4:00:
                    cd:fd:75:c0:9a:4b:29:97:83:94:05:00:bb:4b:88:
                    00:2d:18:59:2e:8a:5b:4e:c0:a7:b5:55:f7:67:dd:
                    d1:13:a3:84:6b:fe:68:48:cb:84:ac:4d:ab:eb:6d:
                    f2:a8:32:a8:17:15:d1:11:88:32:64:57:e6:7a:51:
                    d4:38:63:a2:7e:83:65:85:1c:29:0f:16:e9:41:52:
                    55:07:51:1b:68:7c:62:b9:a8:eb:b9:7d:9b:e1:9a:
                    8f:f5:6d:13:5e:f9:be:44:5b:8a:d0:f7:62:a5:90:
                    6b:97:90:6b:c4:9a:d1:e6:f2:5e:6c:ae:22:a0:f9:
                    66:86:8b:33:03:e9:66:9d:49:f5:5b:9e:cf:4f:52:
                    e1:25:ac:c1:53:47:f8:ba:69:e7:7c:cd:af:df:aa:
                    3c:aa:7a:f5:83:58:fe:60:db:ed:bc:60:93:fd:0f:
                    7c:c2:70:e3:00:12:94:ab:96:88:f5:d6:a1:45:67:
                    b4:97:34:3f:1e:73:ab:7a:29:72:b7:d1:85:af:06:
                    fd:36:a8:5b:7b:ba:f0:67:ea:54:8f:7b:04:93:13:
                    a4:32:11:2f:bb:9b:fe:5e:82:dc:e7:a0:07:49:5a:
                    a9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:99:3B:8C:A6:EC:7F:C3:72:1F:E3:73:0F:09:70:30:51:49:B4:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/96bc106c-00ea-31a7-8521-d67778ab214e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:28:ec:6e:38:0a:3f:4a:8a:5d:27:da:95:bb:00:bc:30:f4:
         70:ca:3d:ca:fa:fa:e6:13:80:74:5b:06:09:53:52:eb:2f:6d:
         e2:69:b0:7e:cf:f6:3c:3f:c0:2f:58:f7:08:16:90:12:2d:21:
         bc:d2:d5:e0:2a:28:fc:ad:7e:23:89:49:d7:56:b3:16:87:3f:
         e4:3c:47:a9:84:5d:45:86:1d:0a:2b:bc:2a:75:34:79:2c:b9:
         47:c7:dd:1b:f9:ed:33:8c:25:40:d8:20:a3:f8:c2:1b:67:c9:
         6b:95:0a:45:0a:14:56:12:93:24:5b:aa:e4:ea:cf:98:96:75:
         de:c7:67:1f:ff:39:94:a6:28:34:8b:1a:96:e4:b3:0c:a3:c4:
         15:0b:86:ed:a9:fc:95:09:5c:09:48:75:fc:7c:a0:65:0c:ab:
         af:d0:ea:42:6f:4f:69:b0:62:70:20:68:55:3b:58:d8:fc:59:
         c2:95:dc:c2:d4:46:7b:10:3f:7b:59:0f:03:85:c5:3b:a0:34:
         99:18:e8:84:fe:fe:c4:97:27:5d:a0:d1:79:89:75:44:02:73:
         86:b8:60:53:1a:c3:53:b4:59:05:fb:05:4d:57:c6:02:cc:11:
         06:26:95:e1:64:90:49:0d:ef:60:a5:79:7a:a2:61:5e:7f:ca:
         db:32:f0:c0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD5UmEJc/XmDzIYAkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDYyMTEyMDAwMFoXDTIyMDYyNDA0MDAwMFowLzEtMCsGA1UEAxMk
MmI3NzRiMDYtYmViMy00ODljLWI3MjQtZjRiYzgxYjRjYTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXcsxjAWdI/iqxj54Pp+57lrzc0jFQTXaZrk
tADN/XXAmkspl4OUBQC7S4gALRhZLopbTsCntVX3Z93RE6OEa/5oSMuErE2r623y
qDKoFxXREYgyZFfmelHUOGOifoNlhRwpDxbpQVJVB1EbaHxiuajruX2b4ZqP9W0T
Xvm+RFuK0PdipZBrl5BrxJrR5vJebK4ioPlmhoszA+lmnUn1W57PT1LhJazBU0f4
umnnfM2v36o8qnr1g1j+YNvtvGCT/Q98wnDjABKUq5aI9dahRWe0lzQ/HnOreily
t9GFrwb9Nqhbe7rwZ+pUj3sEkxOkMhEvu5v+XoLc56AHSVqpXQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLiZO4ym7H/Dch/jcw8JcDBRSbRRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvOTZiYzEwNmMtMDBlYS0z
MWE3LTg1MjEtZDY3Nzc4YWIyMTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAoo7G44Cj9Kil0n2pW7ALww9HDKPcr6+uYTgHRbBglTUusvbeJp
sH7P9jw/wC9Y9wgWkBItIbzS1eAqKPytfiOJSddWsxaHP+Q8R6mEXUWGHQorvCp1
NHksuUfH3Rv57TOMJUDYIKP4whtnyWuVCkUKFFYSkyRbquTqz5iWdd7HZx//OZSm
KDSLGpbkswyjxBULhu2p/JUJXAlIdfx8oGUMq6/Q6kJvT2mwYnAgaFU7WNj8WcKV
3MLURnsQP3tZDwOFxTugNJkY6IT+/sSXJ12g0XmJdUQCc4a4YFMaw1O0WQX7BU1X
xgLMEQYmleFkkEkN72CleXqiYV5/ytsy8MA=
-----END CERTIFICATE-----