Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b2e868ca-cf85-3713-ba6a-86860e3b8e40.roa
File:                     b2e868ca-cf85-3713-ba6a-86860e3b8e40.roa (raw, json)
Hash identifier:          yxQcKZ/5xTkQXvQi4mXzsRw9J4XCzRnlMEDeoVggwKM=
Subject key identifier:   2A:A4:52:40:46:82:D6:3C:96:B2:70:A8:5E:1E:09:CD:AF:85:4E:C4
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F8BD78DC0C5FD6736D3417A60
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b2e868ca-cf85-3713-ba6a-86860e3b8e40.roa
Signing time:             Mon 10 Oct 2022 12:00:00 +0000
ROA not before:           Mon 10 Oct 2022 12:00:00 +0000
ROA not after:            Thu 13 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8b:d7:8d:c0:c5:fd:67:36:d3:41:7a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 10 12:00:00 2022 GMT
            Not After : Oct 13 04:00:00 2022 GMT
        Subject: CN=55ddeb73-4801-450f-9b5c-9a219807de87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8c:d0:c7:9f:94:7f:3b:76:ee:cb:72:8e:75:
                    56:ac:1a:7d:6f:b9:bb:ca:28:8b:a9:01:94:ba:c5:
                    00:3d:ed:0d:a3:d9:66:9b:ac:48:ee:9b:ce:55:9c:
                    2c:a1:47:2c:bc:c9:03:bd:3c:f0:b7:89:45:44:75:
                    d0:8b:a4:8c:33:d1:f6:fb:23:ff:08:1b:6f:45:c1:
                    35:00:d3:4f:3f:e1:e5:ea:6f:ba:77:60:7e:aa:93:
                    fc:59:16:75:d9:bc:2f:03:20:48:60:ee:24:f5:f3:
                    05:b9:bf:3f:08:bf:2e:69:b2:62:5f:42:ee:e3:3f:
                    f3:aa:2c:95:47:0c:54:67:07:ba:ec:b4:d0:01:8f:
                    3f:7b:e4:30:e4:37:02:31:d1:4c:db:d2:9c:50:b7:
                    3f:c4:db:b6:ca:b4:2d:4d:0e:a7:22:53:64:2b:fa:
                    e5:a0:6e:11:48:ea:87:82:11:a5:d1:71:ff:c3:da:
                    0e:3c:46:e6:d9:63:9b:c9:db:6b:15:8d:96:d2:ad:
                    f1:8b:e2:27:09:21:09:b9:46:e5:19:f9:2a:0d:53:
                    4e:71:4d:e2:30:70:0a:22:3e:16:b5:92:39:7d:23:
                    6f:5b:d0:92:a2:38:d8:5b:c1:4f:5b:e5:dc:c4:2f:
                    1a:6a:94:53:05:23:0c:b7:0e:23:37:09:37:6c:8c:
                    bf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A4:52:40:46:82:D6:3C:96:B2:70:A8:5E:1E:09:CD:AF:85:4E:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b2e868ca-cf85-3713-ba6a-86860e3b8e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:96:5d:3e:e1:72:19:a4:3f:a3:54:c2:bc:4b:26:57:ba:a6:
         a7:b5:7c:a3:86:d2:4a:f2:8d:12:b3:1f:b2:9c:2f:53:db:dc:
         ec:e2:26:4e:75:d3:77:bb:b5:bb:ad:0e:7c:6f:a5:14:21:e6:
         e1:c7:77:bd:9e:fb:ad:09:3d:46:48:13:ab:05:3d:ac:5f:6b:
         01:34:a6:bd:a2:9f:f5:06:49:fc:62:14:9c:91:df:f1:9a:36:
         b9:3c:c8:de:6e:b0:b8:16:25:4a:ff:3c:7b:42:0e:38:60:d4:
         e9:19:0b:30:0d:f2:c3:b2:39:47:ad:2c:e5:b2:0e:3f:b4:9c:
         b7:bd:b6:db:94:22:87:01:a9:9a:f4:09:f9:a6:99:45:ef:1d:
         ed:c8:ee:e4:67:b1:ab:f5:91:da:71:d9:e2:e7:95:cf:9a:27:
         aa:ea:a8:c9:3a:cf:4d:1d:f2:5d:3f:35:3a:5f:37:29:af:54:
         96:a1:e2:98:d4:ec:43:b3:d1:43:8c:4f:7b:03:05:0b:9c:71:
         d1:cc:df:85:52:3c:38:b5:90:e1:be:f3:ff:b6:77:31:65:7c:
         ef:3b:88:7d:5a:71:af:f0:b8:cc:23:8a:42:85:ae:da:ba:ee:
         0a:f3:a6:e6:5d:25:3f:df:7b:3f:62:4e:cf:92:c0:11:02:de:
         4c:5a:ea:58
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD+L143Axf1nNtNBemAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMTAxMDEyMDAwMFoXDTIyMTAxMzA0MDAwMFowLzEtMCsGA1UEAxMk
NTVkZGViNzMtNDgwMS00NTBmLTliNWMtOWEyMTk4MDdkZTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIzQx5+Ufzt27styjnVWrBp9b7m7yiiLqQGU
usUAPe0No9lmm6xI7pvOVZwsoUcsvMkDvTzwt4lFRHXQi6SMM9H2+yP/CBtvRcE1
ANNPP+Hl6m+6d2B+qpP8WRZ12bwvAyBIYO4k9fMFub8/CL8uabJiX0Lu4z/zqiyV
RwxUZwe67LTQAY8/e+Qw5DcCMdFM29KcULc/xNu2yrQtTQ6nIlNkK/rloG4RSOqH
ghGl0XH/w9oOPEbm2WObydtrFY2W0q3xi+InCSEJuUblGfkqDVNOcU3iMHAKIj4W
tZI5fSNvW9CSojjYW8FPW+XcxC8aapRTBSMMtw4jNwk3bIy/NQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCqkUkBGgtY8lrJwqF4eCc2vhU7EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvYjJlODY4Y2EtY2Y4NS0z
NzEzLWJhNmEtODY4NjBlM2I4ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMuWXT7hchmkP6NUwrxLJle6pqe1fKOG0kryjRKzH7KcL1Pb3Ozi
Jk5103e7tbutDnxvpRQh5uHHd72e+60JPUZIE6sFPaxfawE0pr2in/UGSfxiFJyR
3/GaNrk8yN5usLgWJUr/PHtCDjhg1OkZCzAN8sOyOUetLOWyDj+0nLe9ttuUIocB
qZr0CfmmmUXvHe3I7uRnsav1kdpx2eLnlc+aJ6rqqMk6z00d8l0/NTpfNymvVJah
4pjU7EOz0UOMT3sDBQuccdHM34VSPDi1kOG+8/+2dzFlfO87iH1aca/wuMwjikKF
rtq67grzpuZdJT/fez9iTs+SwBEC3kxa6lg=
-----END CERTIFICATE-----