Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c6eaade6-b103-389c-9619-0b156fb18c56.roa
File:                     c6eaade6-b103-389c-9619-0b156fb18c56.roa (raw, json)
Hash identifier:          trJPTbEL952pga2xdAFzqTDhYXGAxeS/OxBTlm7Nt5Y=
Subject key identifier:   F3:57:40:AD:C5:97:48:54:FD:E2:32:EB:E5:2A:BA:5D:1F:9F:0A:63
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E5576F582A001BF6B321A8380
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c6eaade6-b103-389c-9619-0b156fb18c56.roa
Signing time:             Tue 21 Jun 2022 12:00:00 +0000
ROA not before:           Tue 21 Jun 2022 12:00:00 +0000
ROA not after:            Fri 24 Jun 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:358::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:55:76:f5:82:a0:01:bf:6b:32:1a:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jun 21 12:00:00 2022 GMT
            Not After : Jun 24 04:00:00 2022 GMT
        Subject: CN=a8139d3d-3d2f-41cd-99b7-bddc5f3c915c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:da:c7:e4:99:e2:31:f1:36:b8:81:2d:9e:31:
                    1c:b9:e0:71:0b:06:7d:9f:10:0f:ec:39:59:31:60:
                    5b:4c:1e:b6:53:3f:c0:67:38:64:e5:4b:1f:ee:bd:
                    b0:0c:57:54:cf:8d:bc:24:98:59:4d:fa:1e:26:f9:
                    07:db:ea:60:33:02:93:f6:83:96:78:57:06:a2:a0:
                    f9:fd:e5:2f:13:8b:52:a6:82:09:f6:76:20:0e:15:
                    dd:09:45:2e:8f:f5:17:d7:42:59:dd:9a:d2:e3:b5:
                    ae:a2:b6:28:af:e2:85:00:1c:80:7a:11:fd:aa:76:
                    15:91:78:bb:5e:0a:89:87:1e:ae:dc:88:f7:8b:9f:
                    64:c8:df:38:bc:33:2c:ae:b4:c7:30:59:02:e6:96:
                    e4:21:22:20:3b:f1:32:d6:c4:ef:26:0b:c1:e6:7f:
                    50:20:70:5a:6b:b2:c7:8e:a3:f2:75:46:d8:13:fa:
                    b2:fe:f0:16:07:e0:54:cb:cf:4d:37:95:41:30:7e:
                    8a:39:0e:7f:b7:d9:e1:b2:ed:75:6d:c1:99:0f:b4:
                    d7:15:de:81:65:e0:1b:de:36:23:7f:80:92:25:ff:
                    5a:07:38:b1:ca:29:4b:15:e7:ff:f9:62:93:4c:fd:
                    ae:7e:c1:66:74:58:8c:e0:f8:04:f3:80:f8:e1:ef:
                    2c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:57:40:AD:C5:97:48:54:FD:E2:32:EB:E5:2A:BA:5D:1F:9F:0A:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c6eaade6-b103-389c-9619-0b156fb18c56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:358::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:6e:33:7e:8e:e0:5b:45:80:99:8d:47:6c:d5:a8:82:ee:05:
         5f:27:03:de:f1:cb:85:08:69:77:9d:7d:67:a7:7c:54:53:25:
         48:9a:78:02:1f:22:d7:ae:08:e4:ad:71:61:eb:82:5d:9d:dd:
         7e:20:d4:31:c4:c2:98:b5:65:c4:8c:16:47:ce:7d:63:17:96:
         3f:de:89:2d:ec:70:0f:57:a2:5b:b0:30:36:71:bf:86:e4:9f:
         16:15:8e:2d:2b:9b:f9:ed:f4:33:dd:fb:15:06:26:f3:d7:d3:
         70:00:1a:54:ba:36:03:e9:ab:84:dc:7e:b6:b1:5f:41:b3:5d:
         a3:d7:62:82:90:71:11:18:06:9c:c7:9c:61:78:3f:c0:d8:f9:
         34:cf:a0:b7:59:73:d3:ba:71:4a:5b:d0:65:6e:ac:ba:14:92:
         7a:ab:47:57:67:73:00:15:52:ed:d1:71:7b:ff:b8:72:c7:b4:
         74:02:ff:77:90:9d:86:07:a9:cd:be:33:5b:90:7a:54:b1:45:
         69:cf:e5:4a:d5:5f:0b:57:1a:db:51:21:6e:6f:53:24:76:c2:
         b6:1e:8a:70:c0:2a:4f:1d:96:9a:81:86:1b:d7:12:07:16:b7:
         f0:f2:65:0d:14:61:47:e3:1a:92:37:b3:e1:27:be:b7:f7:2d:
         9b:72:02:26
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD5VdvWCoAG/azIag4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDYyMTEyMDAwMFoXDTIyMDYyNDA0MDAwMFowLzEtMCsGA1UEAxMk
YTgxMzlkM2QtM2QyZi00MWNkLTk5YjctYmRkYzVmM2M5MTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNrH5JniMfE2uIEtnjEcueBxCwZ9nxAP7DlZ
MWBbTB62Uz/AZzhk5Usf7r2wDFdUz428JJhZTfoeJvkH2+pgMwKT9oOWeFcGoqD5
/eUvE4tSpoIJ9nYgDhXdCUUuj/UX10JZ3ZrS47WuorYor+KFAByAehH9qnYVkXi7
XgqJhx6u3Ij3i59kyN84vDMsrrTHMFkC5pbkISIgO/Ey1sTvJgvB5n9QIHBaa7LH
jqPydUbYE/qy/vAWB+BUy89NN5VBMH6KOQ5/t9nhsu11bcGZD7TXFd6BZeAb3jYj
f4CSJf9aBzixyilLFef/+WKTTP2ufsFmdFiM4PgE84D44e8s/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPNXQK3Fl0hU/eIy6+Uqul0fnwpjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvYzZlYWFkZTYtYjEwMy0z
ODljLTk2MTktMGIxNTZmYjE4YzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBANhuM36O4FtFgJmNR2zVqILuBV8nA97xy4UIaXedfWenfFRTJUia
eAIfIteuCOStcWHrgl2d3X4g1DHEwpi1ZcSMFkfOfWMXlj/eiS3scA9XoluwMDZx
v4bknxYVji0rm/nt9DPd+xUGJvPX03AAGlS6NgPpq4TcfraxX0GzXaPXYoKQcREY
BpzHnGF4P8DY+TTPoLdZc9O6cUpb0GVurLoUknqrR1dncwAVUu3RcXv/uHLHtHQC
/3eQnYYHqc2+M1uQelSxRWnP5UrVXwtXGttRIW5vUyR2wrYeinDAKk8dlpqBhhvX
EgcWt/DyZQ0UYUfjGpI3s+Envrf3LZtyAiY=
-----END CERTIFICATE-----