Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d1399411-8c5e-30d8-8ec6-e87f87cb73cd.roa
File:                     d1399411-8c5e-30d8-8ec6-e87f87cb73cd.roa (raw, json)
Hash identifier:          QXwWQx1jBVb8Jz1laKheGv4GgzCOa7dERZKEOOG6PJ0=
Subject key identifier:   8C:E8:4B:9B:9C:17:02:3F:B5:5B:83:64:EB:7E:DD:31:45:7A:34:93
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FAAC840235464C7A42B58A200
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d1399411-8c5e-30d8-8ec6-e87f87cb73cd.roa
Signing time:             Fri 21 Oct 2022 12:00:00 +0000
ROA not before:           Fri 21 Oct 2022 12:00:00 +0000
ROA not after:            Mon 24 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:aa:c8:40:23:54:64:c7:a4:2b:58:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 21 12:00:00 2022 GMT
            Not After : Oct 24 04:00:00 2022 GMT
        Subject: CN=e8b1d87b-5bcd-4275-bdac-2ee202f9719b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cf:61:f5:e2:8b:b6:87:84:ae:fd:dc:33:17:
                    45:97:6b:4f:18:07:a5:49:f4:71:1b:55:7b:85:a6:
                    be:14:91:0a:a2:89:ad:96:a5:4f:22:f3:b6:46:b9:
                    42:03:a7:d8:6a:80:dd:48:e4:6a:3a:38:4d:08:c5:
                    d3:4f:13:a4:ce:3d:2d:5f:f7:c1:a9:77:2a:c1:c8:
                    8e:44:1f:f3:90:bc:78:ca:18:0e:2f:db:ed:47:3f:
                    19:e6:9c:81:87:a7:93:70:16:27:50:f6:b3:85:ff:
                    cd:ae:43:a2:91:8e:c6:5e:19:88:5d:9b:62:13:10:
                    76:2d:ef:25:00:94:d7:d1:39:24:c0:a1:c8:cf:79:
                    bc:35:6d:99:ad:f1:0f:8d:5f:99:cc:06:63:f6:e8:
                    a8:c9:2e:a2:48:aa:eb:48:df:ab:7b:a3:28:2a:54:
                    b7:a9:ff:f4:71:8e:78:7d:5f:31:08:28:6e:3c:1c:
                    a6:ab:5c:35:90:14:4d:6e:b3:7f:20:dd:48:d5:7a:
                    e3:4f:d0:87:5c:de:0a:57:9d:f6:21:f1:b3:55:1e:
                    93:85:81:49:74:83:6c:20:8e:44:28:58:b7:f6:13:
                    08:89:e7:99:84:e5:22:6f:e5:79:40:54:b7:dc:7b:
                    97:f1:b8:2f:55:db:38:5d:47:64:31:2a:db:1c:ee:
                    cd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E8:4B:9B:9C:17:02:3F:B5:5B:83:64:EB:7E:DD:31:45:7A:34:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d1399411-8c5e-30d8-8ec6-e87f87cb73cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:35:58:32:62:c1:e8:02:15:04:4f:bf:fb:25:96:e6:ba:a6:
         c3:31:d8:75:75:c7:2c:b3:e1:6a:96:d5:65:c6:92:90:1c:e8:
         8e:df:ab:6d:01:fd:7c:3e:e7:83:67:6e:ae:3d:6c:41:af:05:
         83:a3:7f:bd:ee:e1:48:52:10:86:ec:f3:6f:ae:91:f9:ee:04:
         bf:66:62:1c:e7:a5:c6:70:a6:32:03:cd:a6:39:8d:3c:7a:df:
         de:b4:ec:5c:05:f9:f3:2a:b2:ac:44:28:d0:c0:0b:20:a5:70:
         e8:ca:bf:25:17:c6:ce:01:25:84:46:d9:dc:bc:41:e8:11:fc:
         20:c1:51:b1:e7:bc:e9:d9:33:f9:94:ed:b3:f2:43:f2:d6:2c:
         11:ac:80:4b:3a:61:c5:0c:a2:36:77:ec:c4:64:47:e6:67:5a:
         89:bb:18:f3:d5:16:af:f7:27:7c:72:94:f0:35:c9:98:c8:fe:
         ef:59:9b:0e:f7:4a:a7:a0:15:bd:e3:73:d7:22:94:2b:8d:3b:
         96:b9:98:a1:63:a9:2c:2d:fb:43:80:50:4d:01:1b:23:86:6f:
         fc:ed:75:e4:11:bd:fb:7b:30:85:e0:bf:c3:ee:af:5c:7f:25:
         25:c8:98:14:ff:3f:b6:85:d2:d1:3d:f5:8d:31:ac:27:a7:7c:
         9e:a2:61:26
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD+qyEAjVGTHpCtYogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMTAyMTEyMDAwMFoXDTIyMTAyNDA0MDAwMFowLzEtMCsGA1UEAxMk
ZThiMWQ4N2ItNWJjZC00Mjc1LWJkYWMtMmVlMjAyZjk3MTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM9h9eKLtoeErv3cMxdFl2tPGAelSfRxG1V7
haa+FJEKoomtlqVPIvO2RrlCA6fYaoDdSORqOjhNCMXTTxOkzj0tX/fBqXcqwciO
RB/zkLx4yhgOL9vtRz8Z5pyBh6eTcBYnUPazhf/NrkOikY7GXhmIXZtiExB2Le8l
AJTX0TkkwKHIz3m8NW2ZrfEPjV+ZzAZj9uioyS6iSKrrSN+re6MoKlS3qf/0cY54
fV8xCChuPBymq1w1kBRNbrN/IN1I1XrjT9CHXN4KV532IfGzVR6ThYFJdINsII5E
KFi39hMIieeZhOUib+V5QFS33HuX8bgvVds4XUdkMSrbHO7NdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIzoS5ucFwI/tVuDZOt+3TFFejSTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvZDEzOTk0MTEtOGM1ZS0z
MGQ4LThlYzYtZTg3Zjg3Y2I3M2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEQ1WDJiwegCFQRPv/sllua6psMx2HV1xyyz4WqW1WXGkpAc6I7f
q20B/Xw+54Nnbq49bEGvBYOjf73u4UhSEIbs82+ukfnuBL9mYhznpcZwpjIDzaY5
jTx639607FwF+fMqsqxEKNDACyClcOjKvyUXxs4BJYRG2dy8QegR/CDBUbHnvOnZ
M/mU7bPyQ/LWLBGsgEs6YcUMojZ37MRkR+ZnWom7GPPVFq/3J3xylPA1yZjI/u9Z
mw73SqegFb3jc9cilCuNO5a5mKFjqSwt+0OAUE0BGyOGb/ztdeQRvft7MIXgv8Pu
r1x/JSXImBT/P7aF0tE99Y0xrCenfJ6iYSY=
-----END CERTIFICATE-----