Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ea603a0b-4531-31c9-82ee-fe3cd87bf6ac.roa
File:                     ea603a0b-4531-31c9-82ee-fe3cd87bf6ac.roa (raw, json)
Hash identifier:          rnQnbA0AussrZPF6ceFAEDezyf0KNIRCVArg1dsF3RU=
Subject key identifier:   27:FE:EA:88:AB:7F:C2:27:EE:B1:FB:94:EA:15:82:3D:C3:03:DD:7A
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583DCE1AB9623F0A2626C3ABC7A0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ea603a0b-4531-31c9-82ee-fe3cd87bf6ac.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Fri 06 May 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ce:1a:b9:62:3f:0a:26:26:c3:ab:c7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : May  6 04:00:00 2022 GMT
        Subject: CN=e4da4363-6abd-44f0-9245-9a5300cfe685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:23:25:fa:f7:49:56:90:7c:85:11:2e:d2:1c:
                    20:82:6a:96:cb:c1:76:cf:ff:59:e4:a9:bb:09:48:
                    a8:15:49:09:c4:01:bf:d1:17:62:50:35:17:8e:85:
                    29:71:42:23:da:c3:8a:3c:bf:61:3c:d7:e4:c8:1f:
                    17:73:9b:10:4f:3b:d2:91:39:3a:b3:c0:5d:00:48:
                    90:cd:4e:12:90:35:a1:f4:8f:73:e0:ca:0a:85:19:
                    5b:52:62:fd:a2:26:61:cc:26:68:e2:57:75:ea:c7:
                    04:41:4a:15:4a:78:24:cc:49:f7:de:6d:34:9b:4a:
                    84:e0:14:e9:66:ed:60:f2:15:6f:a9:89:8a:d4:50:
                    06:4d:95:71:89:3c:db:43:45:d1:7b:eb:69:74:6d:
                    db:6c:56:83:2e:60:2a:4b:34:27:00:e4:a7:20:91:
                    90:47:38:e8:f8:cb:ab:37:96:7b:a1:94:e2:8b:ca:
                    bc:64:d8:f9:5d:d8:98:9b:ac:90:9f:bb:04:1a:9f:
                    dd:8a:26:46:de:2e:96:66:e9:5b:3b:64:75:57:47:
                    0f:7c:f6:85:0d:04:ef:bd:75:a5:1a:71:fb:50:c7:
                    88:cb:b2:54:30:3e:05:fd:5b:16:af:6b:bf:f9:cb:
                    9e:62:e4:47:97:51:ea:62:0a:db:89:22:87:30:07:
                    3c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FE:EA:88:AB:7F:C2:27:EE:B1:FB:94:EA:15:82:3D:C3:03:DD:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ea603a0b-4531-31c9-82ee-fe3cd87bf6ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f5:80:67:90:57:c1:9b:10:cd:85:85:07:75:1e:0d:95:fa:
         65:7c:1b:18:fd:d7:a4:18:ae:c9:88:82:6f:dc:2f:6e:8b:39:
         c2:f6:0a:53:c7:8e:5f:36:4f:08:a5:8a:93:01:8a:c3:a1:9f:
         09:9d:a2:fa:2c:71:9a:32:08:c0:31:0d:90:4c:16:16:08:4d:
         87:35:f7:17:94:a9:9a:a6:cf:f1:9a:1e:75:88:d2:b6:94:49:
         4c:aa:a0:0b:7c:26:a3:31:18:96:55:7e:e6:a5:13:a3:bf:f1:
         2f:95:7b:84:27:c7:7e:79:0f:eb:04:97:6b:fd:55:ea:08:6e:
         b5:32:09:b9:b1:3a:d7:31:3b:8a:c3:0c:4e:cc:b9:50:15:65:
         88:ea:5a:29:ee:ec:06:9e:05:40:26:29:d7:d7:0d:79:f7:77:
         dd:a2:ea:51:dc:96:8d:60:e3:d2:86:06:f2:32:e0:e1:ad:94:
         07:47:97:94:d8:0f:5a:66:2f:26:00:38:41:2d:6d:e7:f3:4a:
         3b:29:7e:b7:29:20:6e:a0:4c:c5:60:8c:03:ca:05:00:c8:51:
         7c:94:62:97:7f:32:0b:4d:f1:01:3b:ab:a5:8d:d5:21:67:a6:
         bd:7f:82:5d:52:5f:9a:a3:d4:4a:c9:05:71:60:30:99:5d:4d:
         6c:09:26:86
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD3OGrliPwomJsOrx6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDUwMzEyMDAwMFoXDTIyMDUwNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZTRkYTQzNjMtNmFiZC00NGYwLTkyNDUtOWE1MzAwY2ZlNjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCMl+vdJVpB8hREu0hwggmqWy8F2z/9Z5Km7
CUioFUkJxAG/0RdiUDUXjoUpcUIj2sOKPL9hPNfkyB8Xc5sQTzvSkTk6s8BdAEiQ
zU4SkDWh9I9z4MoKhRlbUmL9oiZhzCZo4ld16scEQUoVSngkzEn33m00m0qE4BTp
Zu1g8hVvqYmK1FAGTZVxiTzbQ0XRe+tpdG3bbFaDLmAqSzQnAOSnIJGQRzjo+Mur
N5Z7oZTii8q8ZNj5XdiYm6yQn7sEGp/diiZG3i6WZulbO2R1V0cPfPaFDQTvvXWl
GnH7UMeIy7JUMD4F/VsWr2u/+cueYuRHl1HqYgrbiSKHMAc8cwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCf+6oirf8In7rH7lOoVgj3DA916MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvZWE2MDNhMGItNDUzMS0z
MWM5LTgyZWUtZmUzY2Q4N2JmNmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFv1gGeQV8GbEM2FhQd1Hg2V+mV8Gxj916QYrsmIgm/cL26LOcL2
ClPHjl82TwilipMBisOhnwmdovoscZoyCMAxDZBMFhYITYc19xeUqZqmz/GaHnWI
0raUSUyqoAt8JqMxGJZVfualE6O/8S+Ve4Qnx355D+sEl2v9VeoIbrUyCbmxOtcx
O4rDDE7MuVAVZYjqWinu7AaeBUAmKdfXDXn3d92i6lHclo1g49KGBvIy4OGtlAdH
l5TYD1pmLyYAOEEtbefzSjspfrcpIG6gTMVgjAPKBQDIUXyUYpd/MgtN8QE7q6WN
1SFnpr1/gl1SX5qj1ErJBXFgMJldTWwJJoY=
-----END CERTIFICATE-----