Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d0aa157e-fbce-3ba5-9782-b360e313b4e9.roa
File:                     d0aa157e-fbce-3ba5-9782-b360e313b4e9.roa (raw, json)
Hash identifier:          Es06XPtXcX+ncNgQncBp8ucGqV/OByTdVqMAeBlTa+g=
Subject key identifier:   57:85:93:85:F2:06:7A:45:11:08:6B:17:A8:BD:50:76:70:2F:B1:25
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E28C710C33D1A998ACB2AB200
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d0aa157e-fbce-3ba5-9782-b360e313b4e9.roa
Signing time:             Sun 05 Jun 2022 12:00:00 +0000
ROA not before:           Sun 05 Jun 2022 12:00:00 +0000
ROA not after:            Wed 08 Jun 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:28:c7:10:c3:3d:1a:99:8a:cb:2a:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jun  5 12:00:00 2022 GMT
            Not After : Jun  8 04:00:00 2022 GMT
        Subject: CN=a6e8b913-763b-4730-82f0-d4afb4af4b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:72:84:20:0f:12:c8:cd:67:1e:6e:af:b3:78:
                    bc:c8:71:2e:8f:37:a7:05:19:77:61:19:32:06:1c:
                    5f:3a:7a:6b:c7:9c:33:ad:dc:55:fc:86:78:2c:68:
                    06:b8:31:15:43:f2:b2:97:e5:9e:e1:30:e2:79:af:
                    0c:07:c0:32:20:24:8c:fb:18:1f:f9:0e:20:0a:78:
                    06:71:df:e5:0f:c9:25:51:f5:8c:8f:f6:1b:bd:94:
                    78:1a:fe:36:fd:19:06:aa:48:84:03:ae:22:19:56:
                    c7:f3:6c:b9:84:b6:c7:1a:23:5f:d0:27:ff:f9:0c:
                    90:40:72:70:88:2d:b1:02:f8:17:e3:61:5f:50:21:
                    19:ea:f3:8d:ed:07:2c:cc:10:0c:83:60:5f:d4:b0:
                    2a:8e:bb:86:c0:13:5b:9c:9e:d5:e3:3c:ff:d0:60:
                    57:13:e3:2f:ef:6a:87:c5:a2:89:56:3e:4f:c4:e1:
                    d6:a5:d6:3d:ad:b8:9c:80:fd:1f:a7:3b:59:18:03:
                    0b:d7:49:28:21:51:38:b5:e8:60:4f:44:9e:ef:dd:
                    8e:59:e2:89:68:3f:a0:fd:e3:1f:74:a4:e9:13:02:
                    7a:4d:e9:10:96:08:eb:1b:a3:7c:2e:ca:b8:88:bf:
                    ec:c6:40:44:8a:b7:ea:21:07:a8:b2:5f:f5:c0:26:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:85:93:85:F2:06:7A:45:11:08:6B:17:A8:BD:50:76:70:2F:B1:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d0aa157e-fbce-3ba5-9782-b360e313b4e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:5a:4e:fe:79:ae:b2:11:1b:0a:72:f4:8e:82:c7:f3:e0:ab:
         79:a1:e7:5b:2c:82:7f:a5:2b:b9:e6:8e:d5:76:a7:27:11:22:
         d6:d9:cb:86:96:d1:8b:93:5b:61:99:8c:37:33:4b:45:19:76:
         8a:1b:75:e2:68:ec:ca:b0:81:a0:78:a5:6f:5e:9f:60:d2:b9:
         99:a6:b8:13:0d:65:f6:3e:b7:e3:3b:fb:fe:f9:ce:5a:c7:e7:
         20:ea:8b:e4:03:3f:88:f3:a7:e0:82:b9:1e:e4:d9:af:2b:0b:
         ab:43:28:65:cd:e1:8f:90:f0:06:eb:68:6c:6f:9f:87:8d:47:
         45:b0:f7:34:9a:14:a1:3d:fd:71:bf:71:a7:a5:08:79:ea:7f:
         44:2b:86:a7:e5:01:45:8f:0f:49:4f:87:f9:20:84:af:d9:92:
         10:0c:f1:81:f2:d7:00:0c:5f:c3:c9:ae:ad:75:57:c8:a8:e1:
         8a:f7:5c:7b:6d:aa:9e:b1:c0:ee:86:91:55:60:41:7d:b6:39:
         9b:51:67:78:00:f7:d7:35:9d:91:ac:0e:15:eb:86:e0:37:54:
         3f:e7:77:8a:9d:9a:f0:e8:3a:a5:a3:a3:48:74:d4:11:e0:17:
         73:3c:0f:cd:0f:cc:cc:1e:74:6a:3c:f4:84:02:14:16:23:b5:
         92:ab:c4:0e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD4oxxDDPRqZissqsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDYwNTEyMDAwMFoXDTIyMDYwODA0MDAwMFowLzEtMCsGA1UEAxMk
YTZlOGI5MTMtNzYzYi00NzMwLTgyZjAtZDRhZmI0YWY0YjU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXKEIA8SyM1nHm6vs3i8yHEujzenBRl3YRky
BhxfOnprx5wzrdxV/IZ4LGgGuDEVQ/Kyl+We4TDiea8MB8AyICSM+xgf+Q4gCngG
cd/lD8klUfWMj/YbvZR4Gv42/RkGqkiEA64iGVbH82y5hLbHGiNf0Cf/+QyQQHJw
iC2xAvgX42FfUCEZ6vON7QcszBAMg2Bf1LAqjruGwBNbnJ7V4zz/0GBXE+Mv72qH
xaKJVj5PxOHWpdY9rbicgP0fpztZGAML10koIVE4tehgT0Se792OWeKJaD+g/eMf
dKTpEwJ6TekQlgjrG6N8Lsq4iL/sxkBEirfqIQeosl/1wCbitQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFeFk4XyBnpFEQhrF6i9UHZwL7ElMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvZDBhYTE1N2UtZmJjZS0z
YmE1LTk3ODItYjM2MGUzMTNiNGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIlaTv55rrIRGwpy9I6Cx/Pgq3mh51ssgn+lK7nmjtV2pycRItbZ
y4aW0YuTW2GZjDczS0UZdoobdeJo7MqwgaB4pW9en2DSuZmmuBMNZfY+t+M7+/75
zlrH5yDqi+QDP4jzp+CCuR7k2a8rC6tDKGXN4Y+Q8AbraGxvn4eNR0Ww9zSaFKE9
/XG/caelCHnqf0QrhqflAUWPD0lPh/kghK/ZkhAM8YHy1wAMX8PJrq11V8io4Yr3
XHttqp6xwO6GkVVgQX22OZtRZ3gA99c1nZGsDhXrhuA3VD/nd4qdmvDoOqWjo0h0
1BHgF3M8D80PzMwedGo89IQCFBYjtZKrxA4=
-----END CERTIFICATE-----