Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e294c233-dc5e-3c33-aaf2-59b5f6323114.roa
File:                     e294c233-dc5e-3c33-aaf2-59b5f6323114.roa (raw, json)
Hash identifier:          cXDrAUNwV5wX8/LoJ2Cfg/qEvWTl+h7o9T05+plHPP0=
Subject key identifier:   D2:1B:22:19:D5:A7:D9:16:FE:54:1A:37:62:27:B3:F8:B8:CF:CE:42
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F43285840015D656D0F51229DF28A51E0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e294c233-dc5e-3c33-aaf2-59b5f6323114.roa
Signing time:             Mon 21 Nov 2022 12:00:00 +0000
ROA not before:           Mon 21 Nov 2022 12:00:00 +0000
ROA not after:            Thu 24 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:01:5d:65:6d:0f:51:22:9d:f2:8a:51:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 21 12:00:00 2022 GMT
            Not After : Nov 24 05:00:00 2022 GMT
        Subject: CN=6b6c99b6-a865-43d4-933d-f03e4bf15e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:51:69:50:d5:e6:a3:8c:91:76:94:0f:e2:fe:
                    31:e4:9a:1e:c8:73:31:3d:0b:07:91:33:cf:39:ed:
                    00:eb:59:f2:d2:fe:c2:0a:9c:94:b7:7c:a6:69:d7:
                    37:44:9b:9a:12:06:7d:04:dd:d8:f8:56:c4:46:ac:
                    9b:55:62:7b:69:54:f3:be:cb:16:69:20:05:33:6f:
                    1a:ff:7f:fd:36:3f:f3:96:af:5d:18:12:a9:1f:aa:
                    ac:9a:3e:fe:5a:33:c0:ee:f8:8b:4b:32:1d:9b:e7:
                    e0:c9:7e:28:4d:f6:8d:83:69:6b:81:93:2d:a8:d3:
                    27:54:e5:bc:1e:7d:d2:d0:ec:e0:8f:94:ac:1e:1e:
                    9b:94:02:26:b4:1f:f3:5f:6b:ac:cd:c1:a0:cc:80:
                    14:a3:1f:2f:51:54:f7:83:d0:be:fa:2c:f7:10:58:
                    76:f8:cb:09:90:c0:37:40:33:fb:3e:93:d2:f5:e4:
                    50:92:3c:11:3d:b5:fd:49:80:43:a9:fe:e8:b8:e1:
                    23:a5:26:7d:65:1b:48:2d:67:37:d4:c5:34:40:e0:
                    87:82:08:6b:b2:d9:18:6c:7f:ed:ea:f4:5f:3b:cd:
                    3c:c1:6f:4a:23:47:48:0f:ee:1b:74:a6:d4:fc:4f:
                    47:5b:be:e9:2b:2e:de:65:2c:01:57:cd:1b:fe:6a:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1B:22:19:D5:A7:D9:16:FE:54:1A:37:62:27:B3:F8:B8:CF:CE:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e294c233-dc5e-3c33-aaf2-59b5f6323114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c6:a1:34:ff:c2:65:a2:4c:17:7d:e0:d7:87:1a:8b:b5:eb:
         60:98:39:12:38:63:02:74:cb:78:9e:ce:e3:67:ac:0d:40:f6:
         21:17:dc:13:59:20:2f:72:55:17:6c:e1:0c:a0:9f:5f:3f:84:
         45:ca:a8:6e:1c:90:07:5f:ae:53:e6:a0:5a:8d:19:a1:1f:f5:
         54:78:3d:d4:39:0f:ec:9e:b3:9e:51:9c:dc:a0:cd:f4:36:de:
         e2:7e:70:74:f0:d0:17:04:e7:1f:64:21:ea:68:94:2f:71:dd:
         89:e6:80:10:c8:73:03:ad:18:f3:7c:94:40:7c:fa:e5:8a:9c:
         24:2e:ff:28:bb:aa:c3:5b:ee:4d:5e:a3:33:0f:ad:fb:61:51:
         0f:52:15:2a:51:9c:37:50:57:c8:ed:b5:fd:c7:da:76:c1:1d:
         2f:71:a4:1c:81:06:2c:85:98:05:2f:f0:4a:79:d4:da:69:d4:
         21:16:d2:25:a4:6e:ba:fb:83:6b:c7:33:f0:06:83:05:88:aa:
         38:ce:0d:1a:83:7c:89:a0:95:db:aa:ac:66:c3:57:85:d9:95:
         25:4e:b0:34:54:79:c4:91:cf:b7:d9:41:eb:e1:5e:ab:a1:d8:
         6b:57:10:a4:a4:0e:11:2a:98:09:a2:b9:e8:7a:31:72:b9:e2:
         61:be:6e:15
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEABXWVtD1EinfKKUeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMTEyMTEyMDAwMFoXDTIyMTEyNDA1MDAwMFowLzEtMCsGA1UEAxMk
NmI2Yzk5YjYtYTg2NS00M2Q0LTkzM2QtZjAzZTRiZjE1ZTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lFpUNXmo4yRdpQP4v4x5JoeyHMxPQsHkTPP
Oe0A61ny0v7CCpyUt3ymadc3RJuaEgZ9BN3Y+FbERqybVWJ7aVTzvssWaSAFM28a
/3/9Nj/zlq9dGBKpH6qsmj7+WjPA7viLSzIdm+fgyX4oTfaNg2lrgZMtqNMnVOW8
Hn3S0Ozgj5SsHh6blAImtB/zX2uszcGgzIAUox8vUVT3g9C++iz3EFh2+MsJkMA3
QDP7PpPS9eRQkjwRPbX9SYBDqf7ouOEjpSZ9ZRtILWc31MU0QOCHgghrstkYbH/t
6vRfO808wW9KI0dID+4bdKbU/E9HW77pKy7eZSwBV80b/mo7EwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNIbIhnVp9kW/lQaN2Ins/i4z85CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvZTI5NGMyMzMtZGM1ZS0z
YzMzLWFhZjItNTliNWY2MzIzMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAzGoTT/wmWiTBd94NeHGou162CYORI4YwJ0y3iezuNnrA1A9iEX
3BNZIC9yVRds4Qygn18/hEXKqG4ckAdfrlPmoFqNGaEf9VR4PdQ5D+yes55RnNyg
zfQ23uJ+cHTw0BcE5x9kIepolC9x3YnmgBDIcwOtGPN8lEB8+uWKnCQu/yi7qsNb
7k1eozMPrfthUQ9SFSpRnDdQV8jttf3H2nbBHS9xpByBBiyFmAUv8Ep51Npp1CEW
0iWkbrr7g2vHM/AGgwWIqjjODRqDfImglduqrGbDV4XZlSVOsDRUecSRz7fZQevh
Xquh2GtXEKSkDhEqmAmiueh6MXK54mG+bhU=
-----END CERTIFICATE-----