Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c7213c77-ee60-32e8-968c-2992999dd5d5.roa
File:                     c7213c77-ee60-32e8-968c-2992999dd5d5.roa (raw, json)
Hash identifier:          MhAbNyWIGf72yIR177N/q0eV2Mvnzo6WVO3Y4NkTNfo=
Subject key identifier:   E4:EF:AF:88:40:02:4D:53:08:79:62:2D:60:AE:A6:6B:8D:B7:2A:AD
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FEDBF7D3E6CAC7EBCCEC1C100
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c7213c77-ee60-32e8-968c-2992999dd5d5.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Thu 17 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:391::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ed:bf:7d:3e:6c:ac:7e:bc:ce:c1:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Nov 17 05:00:00 2022 GMT
        Subject: CN=958e2f1b-5618-4fd7-a9b4-ad4e2e3d659d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fe:d5:67:d6:57:00:8d:c5:a8:2b:dd:fc:00:
                    de:7f:f8:41:9c:a9:ae:87:59:ce:88:c7:11:52:88:
                    d5:de:e4:7d:d2:1c:38:d3:85:e4:0e:ce:32:87:a2:
                    84:75:79:ab:5d:4d:14:7b:f4:13:d5:80:4f:ae:0f:
                    7f:64:24:05:01:6e:49:32:f3:d4:37:ab:72:1c:d3:
                    af:f6:a2:59:90:42:18:0b:de:b8:d3:8f:fc:05:7b:
                    2a:cf:88:cf:8b:0d:42:a8:e6:60:43:7f:fa:04:d9:
                    ff:26:e1:5b:56:b7:49:37:ea:e5:77:5e:e1:df:87:
                    14:da:1a:c2:e2:1c:16:fe:90:36:b8:bd:d1:59:ed:
                    a9:56:9c:11:bc:e8:2c:86:a9:17:3d:61:cf:a3:b7:
                    5f:ad:17:1f:c8:c1:83:55:36:ed:c4:69:cf:61:8f:
                    09:33:6d:fb:d9:fd:55:69:a5:e5:bb:78:60:fc:47:
                    cb:96:9a:9c:73:9c:a0:fa:76:63:75:31:25:fa:9d:
                    1b:84:ca:05:11:65:33:a2:21:5f:af:25:4a:81:90:
                    0f:9f:65:5b:06:ab:bc:c0:a0:d7:e0:42:3f:49:56:
                    a7:95:9b:e9:c7:dd:b9:48:13:58:b8:3f:96:fb:cb:
                    b0:b5:b1:96:6d:08:b2:58:d0:0a:ec:3d:15:bb:73:
                    0e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EF:AF:88:40:02:4D:53:08:79:62:2D:60:AE:A6:6B:8D:B7:2A:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c7213c77-ee60-32e8-968c-2992999dd5d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:7f:8d:23:9e:a6:0c:0f:1a:24:dd:23:88:32:b5:a2:e5:a0:
         fb:85:bd:3b:1e:a3:54:0c:8a:cc:6d:b4:5e:a2:25:e4:df:0b:
         1e:01:f0:c1:15:05:3f:76:52:59:b3:c9:ce:fe:99:c8:d4:35:
         d9:ad:fe:c9:49:26:1f:34:27:98:b7:86:80:f4:2d:aa:83:57:
         7a:77:7e:ba:1d:7b:64:6c:55:88:61:4c:47:1c:67:35:51:4f:
         45:45:1b:a4:14:28:47:98:91:d0:d8:f8:cc:dc:64:b0:3f:45:
         7b:a5:39:33:5c:d9:6c:e2:3c:84:15:26:3f:1a:9d:c9:c2:6f:
         03:0e:2d:5d:09:97:35:27:6f:6b:33:e5:07:69:33:43:7e:3e:
         28:98:2f:a2:ba:3b:a2:9d:17:7e:13:aa:45:2d:cf:3c:25:46:
         1f:1c:f9:44:33:35:24:01:6d:e5:98:37:64:ae:ec:23:f3:d7:
         36:6f:23:7f:0c:e3:be:bf:9a:8d:26:23:c5:5a:07:fa:39:5b:
         0c:e6:b7:83:8d:3b:00:51:0b:a8:60:64:29:99:4d:3d:04:d7:
         76:9d:dc:2f:99:ea:40:3c:f0:35:13:0e:96:ce:e7:f3:36:aa:
         ee:70:0e:17:6b:b0:c0:ca:af:c6:1d:ce:99:c3:b0:1b:d6:f1:
         d9:59:71:e9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD/tv30+bKx+vM7BwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMTExNDEyMDAwMFoXDTIyMTExNzA1MDAwMFowLzEtMCsGA1UEAxMk
OTU4ZTJmMWItNTYxOC00ZmQ3LWE5YjQtYWQ0ZTJlM2Q2NTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP7VZ9ZXAI3FqCvd/ADef/hBnKmuh1nOiMcR
UojV3uR90hw404XkDs4yh6KEdXmrXU0Ue/QT1YBPrg9/ZCQFAW5JMvPUN6tyHNOv
9qJZkEIYC96404/8BXsqz4jPiw1CqOZgQ3/6BNn/JuFbVrdJN+rld17h34cU2hrC
4hwW/pA2uL3RWe2pVpwRvOgshqkXPWHPo7dfrRcfyMGDVTbtxGnPYY8JM2372f1V
aaXlu3hg/EfLlpqcc5yg+nZjdTEl+p0bhMoFEWUzoiFfryVKgZAPn2VbBqu8wKDX
4EI/SVanlZvpx925SBNYuD+W+8uwtbGWbQiyWNAK7D0Vu3MOIQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOTvr4hAAk1TCHliLWCupmuNtyqtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvYzcyMTNjNzctZWU2MC0z
MmU4LTk2OGMtMjk5Mjk5OWRkNWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKB/jSOepgwPGiTdI4gytaLloPuFvTseo1QMisxttF6iJeTfCx4B
8MEVBT92Ulmzyc7+mcjUNdmt/slJJh80J5i3hoD0LaqDV3p3frode2RsVYhhTEcc
ZzVRT0VFG6QUKEeYkdDY+MzcZLA/RXulOTNc2WziPIQVJj8ancnCbwMOLV0JlzUn
b2sz5QdpM0N+PiiYL6K6O6KdF34TqkUtzzwlRh8c+UQzNSQBbeWYN2Su7CPz1zZv
I38M476/mo0mI8VaB/o5Wwzmt4ONOwBRC6hgZCmZTT0E13ad3C+Z6kA88DUTDpbO
5/M2qu5wDhdrsMDKr8YdzpnDsBvW8dlZcek=
-----END CERTIFICATE-----