Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d1a8db31-bfe4-3c1d-bfc1-3a12b6068473.roa
File:                     d1a8db31-bfe4-3c1d-bfc1-3a12b6068473.roa (raw, json)
Hash identifier:          IP9PcQutChiVca6VlIemuAgj9KYM28RbCml3RJCb2e0=
Subject key identifier:   D5:F7:59:95:E6:60:F1:51:18:FE:07:39:46:A2:F3:E8:B2:BB:24:09
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F66EFA0825E8461E1FD278FA0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d1a8db31-bfe4-3c1d-bfc1-3a12b6068473.roa
Signing time:             Wed 28 Sep 2022 12:00:00 +0000
ROA not before:           Wed 28 Sep 2022 12:00:00 +0000
ROA not after:            Thu 03 Nov 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2605:9cc0:39c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:66:ef:a0:82:5e:84:61:e1:fd:27:8f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep 28 12:00:00 2022 GMT
            Not After : Nov  3 04:00:00 2022 GMT
        Subject: CN=8f77b898-ac54-4f1d-896b-9f0cccc471bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c6:44:a8:4e:a1:35:36:c5:74:ea:2d:0c:8c:
                    52:6c:f8:d6:03:73:8d:d2:66:a9:1f:0b:1a:a2:b3:
                    8c:31:6e:db:14:e9:2d:46:41:d3:36:f0:b3:ed:0a:
                    0e:e4:1f:a2:17:38:16:c0:fe:d1:a7:ab:7a:d5:33:
                    f3:20:51:f2:a4:15:82:76:4e:e0:cd:8c:4f:6f:b5:
                    d1:77:e6:75:fc:c5:3f:bb:bb:28:a8:15:75:05:d2:
                    84:1b:38:c8:b6:75:b2:8c:4d:78:e8:f5:f9:18:ef:
                    69:7a:7e:ec:fe:3d:1f:b2:0e:ed:06:e0:cd:8e:52:
                    ef:8e:82:83:dc:5a:d1:c2:5e:80:bf:b3:96:30:b2:
                    f2:df:1d:81:92:70:d6:58:ce:9f:51:71:a0:5a:cb:
                    76:65:58:25:07:90:ab:d8:c2:5b:d6:f8:08:ae:c8:
                    c3:82:2b:02:1b:da:c4:af:8f:c7:77:f7:b1:b8:5e:
                    9e:2f:f7:2a:1a:b0:c1:46:c4:84:f0:73:c9:69:1e:
                    a2:ee:77:63:e1:90:2c:62:fc:5c:32:32:f2:09:e4:
                    8e:fc:d3:bd:cc:77:92:fd:20:57:6d:77:5b:9f:13:
                    79:e7:c6:51:64:f2:ff:ab:f2:65:5e:74:10:29:a3:
                    92:89:d5:48:37:e3:05:ce:fe:25:f6:1f:5c:43:15:
                    bd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F7:59:95:E6:60:F1:51:18:FE:07:39:46:A2:F3:E8:B2:BB:24:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d1a8db31-bfe4-3c1d-bfc1-3a12b6068473.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:39c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a9:7d:d9:bc:9b:c7:6d:e8:f3:29:45:7a:22:d7:65:1c:35:
         78:37:2b:e2:a7:64:8d:84:da:5d:3d:0d:fb:82:00:e6:1b:b5:
         43:54:e0:60:f0:6b:1e:3f:6d:15:cc:c5:e0:57:0c:56:9d:45:
         7a:be:38:5c:e2:47:2d:08:3c:2a:b3:19:5d:4b:86:06:d4:f5:
         c3:82:0f:b7:38:3d:a5:1b:41:c7:b9:8f:40:8f:88:f0:a6:f8:
         1e:4e:92:5a:1c:a3:f0:e4:96:60:52:a9:b5:3c:15:1d:23:1f:
         04:4f:30:c9:03:5d:5c:ff:6f:86:68:4b:7e:b9:6a:03:7d:29:
         bb:cd:2d:45:ba:bf:ca:9e:9a:6f:8f:18:9c:48:a4:17:ba:20:
         9c:19:b3:c2:88:86:e4:11:86:50:21:e4:e2:5e:5a:38:20:b6:
         e0:54:e4:6d:59:d4:7f:e9:c2:46:19:84:65:9c:5b:91:2e:a7:
         02:d3:0e:f1:77:bb:2b:e8:26:d7:2f:85:8f:8e:5e:7b:10:39:
         14:b5:64:22:ae:53:02:2f:a9:2a:1b:9b:94:21:d3:18:a2:62:
         bc:8a:04:9b:60:90:9f:6b:fe:4a:50:4c:f9:a9:04:9a:7c:4c:
         ec:54:b1:8a:52:1d:8b:cf:d0:ab:e3:4f:83:b6:70:d0:a3:01:
         1b:29:ac:de
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD9m76CCXoRh4f0nj6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDkyODEyMDAwMFoXDTIyMTEwMzA0MDAwMFowLzEtMCsGA1UEAxMk
OGY3N2I4OTgtYWM1NC00ZjFkLTg5NmItOWYwY2NjYzQ3MWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MZEqE6hNTbFdOotDIxSbPjWA3ON0mapHwsa
orOMMW7bFOktRkHTNvCz7QoO5B+iFzgWwP7Rp6t61TPzIFHypBWCdk7gzYxPb7XR
d+Z1/MU/u7soqBV1BdKEGzjItnWyjE146PX5GO9pen7s/j0fsg7tBuDNjlLvjoKD
3FrRwl6Av7OWMLLy3x2BknDWWM6fUXGgWst2ZVglB5Cr2MJb1vgIrsjDgisCG9rE
r4/Hd/exuF6eL/cqGrDBRsSE8HPJaR6i7ndj4ZAsYvxcMjLyCeSO/NO9zHeS/SBX
bXdbnxN558ZRZPL/q/JlXnQQKaOSidVIN+MFzv4l9h9cQxW9FwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNX3WZXmYPFRGP4HOUai8+iyuyQJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvZDFhOGRiMzEtYmZlNC0z
YzFkLWJmYzEtM2ExMmI2MDY4NDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOc
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFmpfdm8m8dt6PMpRXoi12UcNXg3K+KnZI2E2l09DfuCAOYbtUNU
4GDwax4/bRXMxeBXDFadRXq+OFziRy0IPCqzGV1LhgbU9cOCD7c4PaUbQce5j0CP
iPCm+B5Okloco/DklmBSqbU8FR0jHwRPMMkDXVz/b4ZoS365agN9KbvNLUW6v8qe
mm+PGJxIpBe6IJwZs8KIhuQRhlAh5OJeWjggtuBU5G1Z1H/pwkYZhGWcW5EupwLT
DvF3uyvoJtcvhY+OXnsQORS1ZCKuUwIvqSobm5Qh0xiiYryKBJtgkJ9r/kpQTPmp
BJp8TOxUsYpSHYvP0KvjT4O2cNCjARsprN4=
-----END CERTIFICATE-----