Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d3a75c1e-bf02-37fe-834a-c619ae8336a9.roa
File:                     d3a75c1e-bf02-37fe-834a-c619ae8336a9.roa (raw, json)
Hash identifier:          aQyuDhfAp5hR41V3iedyUk4YMa0KKkVoHLa4cA8ey9w=
Subject key identifier:   32:3E:9D:BF:93:E9:85:42:A8:B4:F7:6E:62:9A:2C:0D:49:F4:81:A9
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F9CCC25AABF4A2E098EA67280
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d3a75c1e-bf02-37fe-834a-c619ae8336a9.roa
Signing time:             Sun 16 Oct 2022 12:00:00 +0000
ROA not before:           Sun 16 Oct 2022 12:00:00 +0000
ROA not after:            Wed 19 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:391::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9c:cc:25:aa:bf:4a:2e:09:8e:a6:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 16 12:00:00 2022 GMT
            Not After : Oct 19 04:00:00 2022 GMT
        Subject: CN=666f0510-be40-462c-9285-a097651f9783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5f:40:a2:af:47:df:3e:1f:5f:83:3a:df:8b:
                    05:fb:f3:c3:70:a3:0c:b8:81:64:f7:31:50:62:f2:
                    9d:bf:53:bd:d2:91:9b:0d:d1:f6:66:fa:84:04:88:
                    27:43:1d:cc:00:27:33:25:d8:39:bd:e5:5a:5e:b8:
                    b4:7c:b3:56:f3:09:a0:e6:07:07:c7:44:f6:b1:8c:
                    8f:9f:0c:ab:fd:4e:ac:e5:67:ed:d0:83:86:3e:5e:
                    20:02:57:a6:72:05:1d:a8:1e:0c:91:7a:c0:fd:c3:
                    34:8c:17:6e:b9:57:0e:b9:33:bf:5c:45:db:61:31:
                    00:04:7e:6b:1e:a3:1d:e1:47:45:a7:7f:cc:cb:52:
                    f0:4e:18:2d:2d:d1:04:ac:fb:80:ca:67:b9:f5:d4:
                    ca:50:0c:b5:38:8d:23:c3:1d:02:f8:dd:99:75:8c:
                    db:c5:24:94:4f:11:08:af:0d:4b:95:1a:d8:59:4f:
                    dd:c8:95:5d:45:18:c0:1a:aa:9d:36:e6:5a:35:a3:
                    07:6a:7b:93:8f:85:3a:e0:a3:9e:21:33:8e:7a:6b:
                    58:90:c4:74:3e:98:c4:b1:5b:70:0d:c3:c3:a3:e3:
                    8a:a0:1d:59:46:25:bf:c4:6e:83:51:ba:dd:98:88:
                    d6:60:e2:a5:66:2a:c9:0a:ba:4e:37:4f:37:a4:f2:
                    bf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3E:9D:BF:93:E9:85:42:A8:B4:F7:6E:62:9A:2C:0D:49:F4:81:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d3a75c1e-bf02-37fe-834a-c619ae8336a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:ee:2b:92:75:a7:18:af:77:3d:67:51:22:73:0e:88:4e:6b:
         63:c5:fa:67:a3:6a:17:a5:73:51:fb:1c:b0:7b:43:ac:c1:13:
         d1:54:a9:ad:35:d0:1e:36:49:ef:e1:fd:44:82:82:de:c0:e6:
         df:52:66:1b:bb:6e:0a:a6:f9:f4:9e:09:34:02:e7:31:fa:c3:
         d0:13:3e:5d:98:90:5e:0f:7e:51:80:82:78:9b:20:9a:7c:4f:
         f0:ba:f6:82:de:ee:a0:98:90:eb:25:bc:fb:54:c7:69:ae:d2:
         85:1e:f3:7b:08:af:3f:72:8c:47:27:1c:33:ed:1b:27:91:5f:
         58:ea:44:ed:b0:67:25:8d:ec:2d:d8:aa:82:1a:4a:9d:f9:9d:
         ef:27:c5:a1:50:77:7b:b1:b8:5b:35:e6:bf:1d:80:58:af:d9:
         aa:9b:4d:87:13:51:83:4d:0b:a8:e7:47:d0:46:e7:6e:8c:c2:
         5a:06:64:92:a1:d0:07:49:6c:13:e5:ea:d1:e0:65:6a:3a:1a:
         05:a5:51:5c:53:2c:77:d7:18:e1:34:02:76:7b:59:2b:bf:e0:
         54:4d:e0:5f:9f:9f:03:5e:4e:de:38:c7:76:76:a0:0c:76:22:
         78:59:56:1a:a3:8c:e8:e0:4f:b1:6a:47:56:71:1f:08:95:54:
         26:dd:61:d2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD+czCWqv0ouCY6mcoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMTAxNjEyMDAwMFoXDTIyMTAxOTA0MDAwMFowLzEtMCsGA1UEAxMk
NjY2ZjA1MTAtYmU0MC00NjJjLTkyODUtYTA5NzY1MWY5NzgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgF9Aoq9H3z4fX4M634sF+/PDcKMMuIFk9zFQ
YvKdv1O90pGbDdH2ZvqEBIgnQx3MACczJdg5veVaXri0fLNW8wmg5gcHx0T2sYyP
nwyr/U6s5Wft0IOGPl4gAlemcgUdqB4MkXrA/cM0jBduuVcOuTO/XEXbYTEABH5r
HqMd4UdFp3/My1LwThgtLdEErPuAyme59dTKUAy1OI0jwx0C+N2ZdYzbxSSUTxEI
rw1LlRrYWU/dyJVdRRjAGqqdNuZaNaMHanuTj4U64KOeITOOemtYkMR0PpjEsVtw
DcPDo+OKoB1ZRiW/xG6DUbrdmIjWYOKlZirJCrpON083pPK//wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDI+nb+T6YVCqLT3bmKaLA1J9IGpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvZDNhNzVjMWUtYmYwMi0z
N2ZlLTgzNGEtYzYxOWFlODMzNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJvuK5J1pxivdz1nUSJzDohOa2PF+mejahelc1H7HLB7Q6zBE9FU
qa010B42Se/h/USCgt7A5t9SZhu7bgqm+fSeCTQC5zH6w9ATPl2YkF4PflGAgnib
IJp8T/C69oLe7qCYkOslvPtUx2mu0oUe83sIrz9yjEcnHDPtGyeRX1jqRO2wZyWN
7C3YqoIaSp35ne8nxaFQd3uxuFs15r8dgFiv2aqbTYcTUYNNC6jnR9BG526MwloG
ZJKh0AdJbBPl6tHgZWo6GgWlUVxTLHfXGOE0AnZ7WSu/4FRN4F+fnwNeTt44x3Z2
oAx2InhZVhqjjOjgT7FqR1ZxHwiVVCbdYdI=
-----END CERTIFICATE-----