Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d4b8d3d5-56e0-302f-86f5-70e08210e5ce.roa
File:                     d4b8d3d5-56e0-302f-86f5-70e08210e5ce.roa (raw, json)
Hash identifier:          HEwTysdN1sPj5CyaycoMt5BeWom1qfebzqFFf+Cl16g=
Subject key identifier:   F6:4F:FB:74:42:4E:09:84:78:5B:78:35:EA:85:2E:C4:EB:2F:6F:A2
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E0FF608DD4E887C7F9C9B67C8
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d4b8d3d5-56e0-302f-86f5-70e08210e5ce.roa
Signing time:             Fri 27 May 2022 12:00:00 +0000
ROA not before:           Fri 27 May 2022 12:00:00 +0000
ROA not after:            Mon 30 May 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:0f:f6:08:dd:4e:88:7c:7f:9c:9b:67:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May 27 12:00:00 2022 GMT
            Not After : May 30 04:00:00 2022 GMT
        Subject: CN=ae4ade3a-a650-469c-a165-b35e105b72eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0d:04:0b:e3:9b:13:f3:4a:11:c6:ff:8c:b0:
                    60:84:f3:b3:f1:69:ae:b3:52:6f:d2:1f:0d:f7:0b:
                    48:a9:4b:df:ee:a3:0b:6e:0c:7e:fc:37:b9:78:67:
                    20:4b:77:dc:9f:0e:71:69:2f:c8:dd:2a:8a:cc:11:
                    e9:44:4e:b5:96:65:6f:50:7c:39:40:08:60:98:43:
                    7f:a3:85:88:c4:b4:e6:19:4e:6f:17:48:10:42:c2:
                    c4:4f:9d:52:42:d4:e6:c4:1d:90:15:40:88:3f:3c:
                    a6:fb:f6:51:64:6c:10:2b:ad:0a:2e:b3:81:98:b1:
                    69:4c:35:cf:ba:01:fb:10:f4:a5:06:88:e6:34:4b:
                    13:5f:75:26:0d:97:8a:7e:c0:40:06:bc:33:47:58:
                    16:e1:59:cb:c8:a9:68:e0:09:a3:24:83:82:a6:d4:
                    13:fb:51:64:50:16:82:9b:5d:bd:49:61:72:65:6d:
                    b4:0b:2c:37:d9:af:87:87:99:52:68:9f:76:17:9e:
                    43:90:9f:0f:d3:84:b4:d2:0c:4e:11:19:63:ea:df:
                    83:a0:ce:bb:a5:9d:60:97:55:f9:8c:f5:c2:33:4c:
                    8f:80:fd:39:98:49:9b:50:0c:30:03:32:75:b3:18:
                    46:b7:b7:91:86:ff:d3:8f:94:6e:60:79:9a:4e:73:
                    63:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4F:FB:74:42:4E:09:84:78:5B:78:35:EA:85:2E:C4:EB:2F:6F:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d4b8d3d5-56e0-302f-86f5-70e08210e5ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:91:53:d8:01:9e:15:07:2c:55:53:eb:eb:5f:09:24:5b:60:
         a1:2a:1e:9f:6b:9a:a4:cf:0c:79:00:a3:4b:d2:07:a1:a3:da:
         6e:0d:5e:28:68:05:aa:15:b9:40:39:7e:4d:aa:3e:2c:c4:f5:
         8a:fd:23:18:0c:b0:91:50:81:9a:5b:b5:d0:be:00:cf:5f:28:
         00:ea:d7:fa:fd:92:34:db:12:5e:df:77:fa:bf:a4:ce:74:cb:
         fe:0d:81:e7:eb:1e:30:39:80:27:50:7a:7a:f8:d9:e8:ad:14:
         01:c2:5d:05:e2:63:58:8f:1b:56:5c:0b:1f:15:93:21:ff:01:
         22:48:2e:a4:2e:64:4b:15:18:a0:61:bf:b4:97:c6:93:14:c0:
         8d:3a:1f:56:b9:ac:fa:3b:f1:1d:f5:d0:cb:4f:ee:ad:b5:23:
         d3:6d:dc:4b:32:6c:ca:09:74:72:5d:43:54:60:bb:a6:ec:d5:
         a4:32:0d:fa:e9:0d:60:de:df:7c:68:93:60:20:3f:da:e1:68:
         55:e6:1a:2a:bb:af:41:83:38:68:c0:b2:06:56:28:7b:bf:3d:
         89:91:0e:d4:7c:b6:d3:be:a9:d5:0c:15:2d:12:fc:2d:f3:af:
         e0:c6:ee:7b:37:a4:ed:dd:62:fc:a5:e0:87:65:40:25:08:24:
         56:97:c4:0c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD4P9gjdToh8f5ybZ8gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDUyNzEyMDAwMFoXDTIyMDUzMDA0MDAwMFowLzEtMCsGA1UEAxMk
YWU0YWRlM2EtYTY1MC00NjljLWExNjUtYjM1ZTEwNWI3MmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ0EC+ObE/NKEcb/jLBghPOz8Wmus1Jv0h8N
9wtIqUvf7qMLbgx+/De5eGcgS3fcnw5xaS/I3SqKzBHpRE61lmVvUHw5QAhgmEN/
o4WIxLTmGU5vF0gQQsLET51SQtTmxB2QFUCIPzym+/ZRZGwQK60KLrOBmLFpTDXP
ugH7EPSlBojmNEsTX3UmDZeKfsBABrwzR1gW4VnLyKlo4AmjJIOCptQT+1FkUBaC
m129SWFyZW20Cyw32a+Hh5lSaJ92F55DkJ8P04S00gxOERlj6t+DoM67pZ1gl1X5
jPXCM0yPgP05mEmbUAwwAzJ1sxhGt7eRhv/Tj5RuYHmaTnNjoQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPZP+3RCTgmEeFt4NeqFLsTrL2+iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvZDRiOGQzZDUtNTZlMC0z
MDJmLTg2ZjUtNzBlMDgyMTBlNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGSRU9gBnhUHLFVT6+tfCSRbYKEqHp9rmqTPDHkAo0vSB6Gj2m4N
XihoBaoVuUA5fk2qPizE9Yr9IxgMsJFQgZpbtdC+AM9fKADq1/r9kjTbEl7fd/q/
pM50y/4NgefrHjA5gCdQenr42eitFAHCXQXiY1iPG1ZcCx8VkyH/ASJILqQuZEsV
GKBhv7SXxpMUwI06H1a5rPo78R310MtP7q21I9Nt3EsybMoJdHJdQ1Rgu6bs1aQy
DfrpDWDe33xok2AgP9rhaFXmGiq7r0GDOGjAsgZWKHu/PYmRDtR8ttO+qdUMFS0S
/C3zr+DG7ns3pO3dYvyl4IdlQCUIJFaXxAw=
-----END CERTIFICATE-----