Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e66c23f2-00db-3803-8a25-73374fcfb394.roa
File:                     e66c23f2-00db-3803-8a25-73374fcfb394.roa (raw, json)
Hash identifier:          3D0KKylcDjEuY6X2a2Zmvjzrx0CEf7LmP/CAAyYVh80=
Subject key identifier:   59:02:B9:8B:87:CB:54:54:D5:66:7A:9B:60:44:98:E6:30:81:1C:32
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F4E6D0E002E93F32A83BBA980
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e66c23f2-00db-3803-8a25-73374fcfb394.roa
Signing time:             Sun 18 Sep 2022 12:00:00 +0000
ROA not before:           Sun 18 Sep 2022 12:00:00 +0000
ROA not after:            Wed 21 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:4e:6d:0e:00:2e:93:f3:2a:83:bb:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep 18 12:00:00 2022 GMT
            Not After : Sep 21 04:00:00 2022 GMT
        Subject: CN=c64dec0b-7ca8-47ab-bda0-28f77ae1898b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e7:6f:20:11:bf:c2:da:4a:80:ee:31:3f:1b:
                    e2:00:7f:f1:13:3e:c5:e8:79:9f:9c:78:0e:c5:b1:
                    d0:12:1e:9e:13:c5:41:82:fe:5b:88:c1:66:34:38:
                    c0:8f:27:19:4f:02:ef:73:86:c8:c9:ef:a9:c0:e4:
                    3f:99:af:c5:76:38:91:04:de:e6:e4:30:fe:2d:30:
                    0c:78:9b:86:c6:97:d9:61:e2:bf:77:b8:2c:64:04:
                    f2:62:a4:56:c2:dd:d0:0f:25:54:4c:1d:c5:f4:cd:
                    e8:b1:a1:5b:4c:40:6e:d5:1e:f8:b5:f9:1a:8c:a6:
                    b3:22:13:d2:16:d7:72:62:87:fc:76:22:9b:36:0f:
                    18:54:4c:71:cb:f0:db:3a:e5:06:73:f8:31:c5:94:
                    7f:e9:55:35:04:fa:d4:f9:c0:4b:7c:53:aa:5e:34:
                    40:92:4b:a5:69:5f:ab:f2:48:bb:68:d6:37:d1:d2:
                    09:f5:fb:0e:86:fb:ca:6d:81:6e:07:b0:58:44:b2:
                    cd:16:f0:2c:b2:73:fd:6f:f1:15:4f:35:12:5b:9b:
                    76:35:42:d6:76:60:58:66:15:c8:3a:d0:4b:2a:73:
                    ab:91:f1:d0:dc:d2:9c:d4:58:e7:53:3b:63:8b:c7:
                    77:4a:3c:7e:a9:47:d2:a8:09:be:99:fa:8b:b6:25:
                    b6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:02:B9:8B:87:CB:54:54:D5:66:7A:9B:60:44:98:E6:30:81:1C:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e66c23f2-00db-3803-8a25-73374fcfb394.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:59:f8:6a:a0:ec:ec:9b:ca:59:64:42:ac:01:94:f0:f9:af:
         af:99:cf:28:70:09:4d:d2:b4:7f:06:77:4a:77:62:77:8a:0e:
         0c:f0:91:df:83:3a:0b:a8:e7:87:49:eb:39:79:c0:52:fe:40:
         1a:94:58:0e:91:5a:47:c2:d7:09:2a:1e:51:04:44:e4:ef:25:
         2c:f6:b2:f3:3c:37:e4:4f:b7:fd:6c:ae:63:64:96:4e:07:61:
         d2:ea:fe:3f:ff:00:11:07:8f:67:84:6b:f1:d4:5c:7b:22:98:
         23:9b:43:5b:9d:11:25:40:12:a5:8e:cd:50:15:2e:b9:4d:e4:
         7f:67:64:16:4e:e5:c3:01:e9:a8:24:15:8a:d6:0e:f5:2f:51:
         e4:b8:51:59:50:dd:90:5f:71:c3:75:27:ca:38:bc:0d:3e:98:
         0a:02:3b:70:e0:7e:84:67:49:96:6b:60:f3:49:5b:4b:94:2f:
         6b:a7:84:23:05:93:e3:12:81:d8:f4:03:68:69:3f:2a:3e:9e:
         d7:e9:21:87:de:bf:85:9a:3b:56:37:c7:6c:eb:8c:b8:0a:36:
         1b:e8:79:81:37:8f:0b:4f:43:e8:39:11:51:7b:dd:a7:6e:e0:
         6b:4a:a2:50:ea:7f:df:76:27:16:c7:ce:0f:91:2b:02:d8:05:
         a8:d4:15:e8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD9ObQ4ALpPzKoO7qYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDkxODEyMDAwMFoXDTIyMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
YzY0ZGVjMGItN2NhOC00N2FiLWJkYTAtMjhmNzdhZTE4OThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+dvIBG/wtpKgO4xPxviAH/xEz7F6HmfnHgO
xbHQEh6eE8VBgv5biMFmNDjAjycZTwLvc4bIye+pwOQ/ma/FdjiRBN7m5DD+LTAM
eJuGxpfZYeK/d7gsZATyYqRWwt3QDyVUTB3F9M3osaFbTEBu1R74tfkajKazIhPS
FtdyYof8diKbNg8YVExxy/DbOuUGc/gxxZR/6VU1BPrU+cBLfFOqXjRAkkulaV+r
8ki7aNY30dIJ9fsOhvvKbYFuB7BYRLLNFvAssnP9b/EVTzUSW5t2NULWdmBYZhXI
OtBLKnOrkfHQ3NKc1FjnUztji8d3Sjx+qUfSqAm+mfqLtiW20wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFkCuYuHy1RU1WZ6m2BEmOYwgRwyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvZTY2YzIzZjItMDBkYi0z
ODAzLThhMjUtNzMzNzRmY2ZiMzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH1Z+Gqg7OybyllkQqwBlPD5r6+ZzyhwCU3StH8Gd0p3YneKDgzw
kd+DOguo54dJ6zl5wFL+QBqUWA6RWkfC1wkqHlEEROTvJSz2svM8N+RPt/1srmNk
lk4HYdLq/j//ABEHj2eEa/HUXHsimCObQ1udESVAEqWOzVAVLrlN5H9nZBZO5cMB
6agkFYrWDvUvUeS4UVlQ3ZBfccN1J8o4vA0+mAoCO3DgfoRnSZZrYPNJW0uUL2un
hCMFk+MSgdj0A2hpPyo+ntfpIYfev4WaO1Y3x2zrjLgKNhvoeYE3jwtPQ+g5EVF7
3adu4GtKolDqf992JxbHzg+RKwLYBajUFeg=
-----END CERTIFICATE-----