Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a0f9657c-0c96-32b2-a10e-8e2c7d217eca.roa
File:                     a0f9657c-0c96-32b2-a10e-8e2c7d217eca.roa (raw, json)
Hash identifier:          QbcI0rrdxpdqkrEm4lDJh7r+KdQGtJV54U/BnxUZ/O4=
Subject key identifier:   AB:C4:60:E2:70:96:F2:1B:EB:52:4A:B1:DF:5E:3B:29:69:05:99:DC
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CEB0855388F62CA68593D8500
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a0f9657c-0c96-32b2-a10e-8e2c7d217eca.roa
Signing time:             Sat 12 Feb 2022 05:00:00 +0000
ROA not before:           Sat 12 Feb 2022 05:00:00 +0000
ROA not after:            Mon 14 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:eb:08:55:38:8f:62:ca:68:59:3d:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb 12 05:00:00 2022 GMT
            Not After : Feb 14 05:00:00 2022 GMT
        Subject: CN=9a8336a5-44f7-4ec5-ab0c-291ee75d0151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3d:99:e1:20:7a:ad:a0:2b:4f:f6:4e:d9:ae:
                    4a:0d:a5:cc:3e:df:16:39:26:d2:0e:6d:d4:85:80:
                    76:5f:59:fc:25:43:90:d5:b0:97:79:b3:28:d1:41:
                    f2:1f:88:39:3b:e8:c4:67:6d:42:fa:b6:af:18:91:
                    48:ca:fd:bb:a5:09:57:ec:b8:2b:82:b6:19:92:ee:
                    0f:97:80:c6:c1:14:fe:5f:d4:16:01:71:5f:50:dc:
                    4a:7f:2f:12:b4:3c:7f:62:c9:8a:91:46:c1:13:09:
                    d1:df:bc:98:87:ab:4f:67:78:be:10:98:af:c5:44:
                    50:7c:8f:64:53:47:4c:e6:7f:95:3e:9e:4c:69:af:
                    8e:bb:4f:f4:68:dc:16:84:a9:68:0c:10:25:be:26:
                    3b:01:cb:b9:8a:0a:f9:cd:d0:57:d7:d0:28:56:60:
                    9d:a6:a9:51:a8:48:e8:df:91:7c:87:e2:64:fc:5f:
                    52:bc:6a:fd:c3:78:85:e0:4d:89:a8:89:3f:6f:9c:
                    77:c8:9d:98:90:42:44:e0:d3:c9:db:ab:b1:ef:79:
                    7b:7f:f5:8f:eb:7c:09:89:42:4d:b2:c5:58:4e:79:
                    08:c0:3c:a4:6b:f5:94:38:7c:d4:60:45:87:1f:6a:
                    a9:75:24:4a:95:6d:f9:01:88:49:b1:98:79:44:1d:
                    2a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C4:60:E2:70:96:F2:1B:EB:52:4A:B1:DF:5E:3B:29:69:05:99:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a0f9657c-0c96-32b2-a10e-8e2c7d217eca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:4a:bb:a6:f4:21:0c:f9:3f:6f:74:7e:48:c5:e4:bf:dd:d4:
         60:dd:83:d6:30:1e:17:27:0b:b0:4b:c7:ce:02:0a:f6:64:d3:
         71:d6:9e:52:a6:19:2c:a2:5d:f4:bd:ad:f6:62:a9:25:5d:99:
         7b:cd:37:a6:fb:ae:b1:c4:45:39:a0:da:27:c5:bc:62:98:0b:
         e7:b5:7b:08:61:14:41:67:7d:c0:99:ed:c7:63:e4:13:11:d9:
         43:f4:b1:72:21:79:39:d7:75:4c:d6:cb:bb:2f:b2:7f:1c:89:
         f2:f2:c7:9d:1e:33:c0:cf:97:f6:f8:8b:f2:1e:3c:47:00:46:
         35:8b:97:d2:4d:0f:7a:81:7d:ac:54:4d:5d:9e:01:0b:b7:d0:
         3b:e9:e8:d0:a5:37:49:88:ac:f5:0d:ba:a8:d8:78:b4:d6:c2:
         8a:64:e5:fd:57:56:c2:f5:98:c1:57:78:c1:7d:0b:b0:f8:76:
         74:e0:09:48:11:f1:5d:3d:0f:21:bc:73:6a:0f:82:b1:30:e3:
         1d:74:40:5e:f8:62:58:fc:da:94:2d:d9:9a:61:06:d3:ca:3e:
         88:eb:25:10:82:0e:55:ef:fc:49:db:b0:9a:5d:0a:73:c0:40:
         ce:25:3f:e6:dc:96:a5:1f:2c:d0:b7:3b:ab:f2:e5:c0:f9:83:
         b1:2a:84:9d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDzrCFU4j2LKaFk9hQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDIxMjA1MDAwMFoXDTIyMDIxNDA1MDAwMFowLzEtMCsGA1UEAxMk
OWE4MzM2YTUtNDRmNy00ZWM1LWFiMGMtMjkxZWU3NWQwMTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD2Z4SB6raArT/ZO2a5KDaXMPt8WOSbSDm3U
hYB2X1n8JUOQ1bCXebMo0UHyH4g5O+jEZ21C+ravGJFIyv27pQlX7LgrgrYZku4P
l4DGwRT+X9QWAXFfUNxKfy8StDx/YsmKkUbBEwnR37yYh6tPZ3i+EJivxURQfI9k
U0dM5n+VPp5Maa+Ou0/0aNwWhKloDBAlviY7Acu5igr5zdBX19AoVmCdpqlRqEjo
35F8h+Jk/F9SvGr9w3iF4E2JqIk/b5x3yJ2YkEJE4NPJ26ux73l7f/WP63wJiUJN
ssVYTnkIwDyka/WUOHzUYEWHH2qpdSRKlW35AYhJsZh5RB0qRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKvEYOJwlvIb61JKsd9eOylpBZncMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvYTBmOTY1N2MtMGM5Ni0z
MmIyLWExMGUtOGUyYzdkMjE3ZWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF9Ku6b0IQz5P290fkjF5L/d1GDdg9YwHhcnC7BLx84CCvZk03HW
nlKmGSyiXfS9rfZiqSVdmXvNN6b7rrHERTmg2ifFvGKYC+e1ewhhFEFnfcCZ7cdj
5BMR2UP0sXIheTnXdUzWy7svsn8cifLyx50eM8DPl/b4i/IePEcARjWLl9JND3qB
faxUTV2eAQu30Dvp6NClN0mIrPUNuqjYeLTWwopk5f1XVsL1mMFXeMF9C7D4dnTg
CUgR8V09DyG8c2oPgrEw4x10QF74Ylj82pQt2ZphBtPKPojrJRCCDlXv/EnbsJpd
CnPAQM4lP+bclqUfLNC3O6vy5cD5g7EqhJ0=
-----END CERTIFICATE-----