Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e727fd03-1b0a-3010-b4fd-2969fffcafc6.roa
File:                     e727fd03-1b0a-3010-b4fd-2969fffcafc6.roa (raw, json)
Hash identifier:          zwPOfU8a5esJoKPJktF3NPo3KdVWFQceyRRNPVmW6vI=
Subject key identifier:   B8:76:1F:3C:B3:17:54:13:53:19:49:C1:46:76:1D:EF:B3:5B:66:BD
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D71096E29DAAAD886B6FBD4B0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e727fd03-1b0a-3010-b4fd-2969fffcafc6.roa
Signing time:             Fri 01 Apr 2022 04:00:00 +0000
ROA not before:           Fri 01 Apr 2022 04:00:00 +0000
ROA not after:            Sun 03 Apr 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:71:09:6e:29:da:aa:d8:86:b6:fb:d4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Apr  1 04:00:00 2022 GMT
            Not After : Apr  3 04:00:00 2022 GMT
        Subject: CN=3b2108d2-0e16-42d9-b174-ae68d5220d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:65:ff:8f:8e:78:f1:2d:4e:e8:c3:15:8d:d4:
                    1d:cc:9d:3f:18:de:a5:de:53:60:01:54:06:6a:7f:
                    85:2d:e4:88:ba:cd:80:e5:8e:36:14:8b:51:33:92:
                    5c:28:0d:3b:1c:f8:16:e1:ec:64:39:4a:47:e9:b2:
                    62:b2:28:5d:b8:13:0f:56:04:93:ab:80:25:30:61:
                    cb:16:62:34:30:a8:4a:4e:8f:18:43:ff:2e:0f:1a:
                    75:0f:22:c8:40:27:17:92:ea:da:95:cd:e8:5b:de:
                    1e:2d:6a:9a:67:bc:e6:62:ae:75:cb:9e:3a:56:87:
                    60:e3:27:81:cb:a8:1c:ac:05:74:46:fb:49:97:bd:
                    02:af:77:96:cd:86:6b:2c:b6:8b:af:3d:12:3a:01:
                    71:cd:d6:7f:2a:a6:d7:fa:39:16:75:8b:0a:08:58:
                    37:6f:50:c4:7a:d0:ad:7a:bf:3f:d7:40:0a:e1:8d:
                    8f:64:a8:2c:f6:10:2d:a6:87:52:f3:7f:7a:a7:17:
                    98:53:01:24:0f:70:38:79:73:0f:f1:ee:07:c0:cb:
                    0d:1e:4e:ec:7b:38:f7:8c:4e:36:d4:30:a8:51:5a:
                    42:d6:6a:c5:5f:ab:4d:1d:22:10:f3:d3:66:7b:f6:
                    ee:a2:02:8d:6c:18:c8:2b:8a:9c:ca:72:e7:bd:bc:
                    76:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:76:1F:3C:B3:17:54:13:53:19:49:C1:46:76:1D:EF:B3:5B:66:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e727fd03-1b0a-3010-b4fd-2969fffcafc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:91:16:45:16:b5:2d:91:93:e6:22:40:99:26:a5:78:87:96:
         37:d3:01:25:3f:b5:26:65:6a:4a:58:ac:98:03:74:37:d1:05:
         4c:54:c0:94:11:0d:92:c6:23:6c:0c:28:7b:6e:f2:fa:a6:6e:
         0e:05:70:39:05:1f:20:69:fd:63:c4:54:0d:b2:cb:df:0f:69:
         df:98:6b:02:59:62:53:b4:f4:36:d4:a5:28:ca:29:ab:5b:b1:
         9e:f3:2b:87:76:e4:9c:9a:26:19:49:b9:72:5a:5b:13:38:34:
         71:29:42:70:ba:01:57:2d:5c:ea:b7:df:05:b1:9a:3a:61:93:
         0c:39:49:de:d0:6d:e1:02:97:c8:40:29:38:a9:f6:f8:2f:f7:
         a1:b8:ae:34:65:cb:a5:04:43:31:ef:cb:b4:a1:d8:c3:4f:7b:
         00:79:0a:4a:f4:76:ca:ec:8f:81:ce:29:3b:32:18:c7:e6:d6:
         4e:ec:b0:06:c2:38:c5:29:f2:51:2b:81:69:ce:da:f1:84:2a:
         15:ba:a6:11:38:b8:6c:74:31:c1:9d:4a:36:27:5a:b0:27:f2:
         ea:8d:43:3e:23:71:36:43:ca:8b:81:a9:57:6c:8d:ea:bf:d8:
         3b:5f:1a:77:a1:5c:c3:06:5f:34:83:05:60:9d:a9:1b:0f:77:
         c1:e3:8b:aa
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD1xCW4p2qrYhrb71LAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDQwMTA0MDAwMFoXDTIyMDQwMzA0MDAwMFowLzEtMCsGA1UEAxMk
M2IyMTA4ZDItMGUxNi00MmQ5LWIxNzQtYWU2OGQ1MjIwZDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWX/j4548S1O6MMVjdQdzJ0/GN6l3lNgAVQG
an+FLeSIus2A5Y42FItRM5JcKA07HPgW4exkOUpH6bJisihduBMPVgSTq4AlMGHL
FmI0MKhKTo8YQ/8uDxp1DyLIQCcXkuralc3oW94eLWqaZ7zmYq51y546Vodg4yeB
y6gcrAV0RvtJl70Cr3eWzYZrLLaLrz0SOgFxzdZ/KqbX+jkWdYsKCFg3b1DEetCt
er8/10AK4Y2PZKgs9hAtpodS8396pxeYUwEkD3A4eXMP8e4HwMsNHk7sezj3jE42
1DCoUVpC1mrFX6tNHSIQ89Nme/buogKNbBjIK4qcynLnvbx2kwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLh2HzyzF1QTUxlJwUZ2He+zW2a9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvZTcyN2ZkMDMtMWIwYS0z
MDEwLWI0ZmQtMjk2OWZmZmNhZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAByRFkUWtS2Rk+YiQJkmpXiHljfTASU/tSZlakpYrJgDdDfRBUxU
wJQRDZLGI2wMKHtu8vqmbg4FcDkFHyBp/WPEVA2yy98Pad+YawJZYlO09DbUpSjK
KatbsZ7zK4d25JyaJhlJuXJaWxM4NHEpQnC6AVctXOq33wWxmjphkww5Sd7QbeEC
l8hAKTip9vgv96G4rjRly6UEQzHvy7Sh2MNPewB5Ckr0dsrsj4HOKTsyGMfm1k7s
sAbCOMUp8lErgWnO2vGEKhW6phE4uGx0McGdSjYnWrAn8uqNQz4jcTZDyouBqVds
jeq/2DtfGnehXMMGXzSDBWCdqRsPd8Hji6o=
-----END CERTIFICATE-----