Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/eb2afd62-7daf-31e0-8dd2-a2f4d2679fd7.roa
File:                     eb2afd62-7daf-31e0-8dd2-a2f4d2679fd7.roa (raw, json)
Hash identifier:          ys/tfbNGv7t3ZZAaugJXDJ5X187VRRIkGNea4JTyDts=
Subject key identifier:   98:D9:5B:E1:BD:3F:16:32:E9:E5:EF:D4:D1:07:EC:52:03:DE:4C:D4
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583BC95AE81E2E1F254E060CBD80
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/eb2afd62-7daf-31e0-8dd2-a2f4d2679fd7.roa
Signing time:             Tue 05 Nov 2019 05:00:00 +0000
ROA not before:           Tue 05 Nov 2019 05:00:00 +0000
ROA not after:            Sun 04 Feb 2024 05:00:00 +0000
asID:                     8987
IP address blocks:        2605:9cc0:407::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:c9:5a:e8:1e:2e:1f:25:4e:06:0c:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  5 05:00:00 2019 GMT
            Not After : Feb  4 05:00:00 2024 GMT
        Subject: CN=3082c315-1fe8-4160-be55-96d88235f182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7d:a3:91:37:16:b9:70:6c:3d:7f:ec:2d:9c:
                    dc:31:be:87:fb:6f:34:06:6d:32:27:45:38:85:ad:
                    b7:36:0d:c2:76:a9:66:14:46:01:6e:c5:7c:62:a8:
                    31:3e:ed:bf:7d:4f:2b:72:03:d0:1e:67:2d:dc:08:
                    4a:b0:a3:a3:d2:08:b6:a9:7d:9a:b8:48:1e:c4:c9:
                    95:8f:81:ac:dc:e8:41:88:3d:17:48:a9:71:cb:fc:
                    8a:62:af:fe:92:fb:36:1f:b1:b2:23:bc:fe:5e:97:
                    33:bb:87:2b:a6:bb:0f:b8:db:11:00:57:ff:74:a7:
                    74:11:ad:d6:c4:fd:f4:84:97:c4:db:20:eb:16:01:
                    c8:e7:8b:04:74:3a:b5:3c:c4:f2:07:9d:af:66:5d:
                    47:f9:ae:ed:17:eb:65:9c:4e:df:3d:ee:93:a3:7b:
                    f2:54:8b:1b:52:fc:59:c3:47:3a:4c:8e:59:91:a6:
                    63:0e:d4:a6:85:82:91:0f:b8:54:7d:27:b9:d6:9f:
                    5a:a8:5f:45:98:e3:60:12:5d:1f:d4:47:3f:6f:47:
                    63:da:b7:07:4c:0d:5e:98:ca:d5:52:0d:6d:e7:95:
                    27:21:41:ee:a6:41:71:f2:01:c6:70:b5:d8:58:3a:
                    97:95:9a:02:11:ef:9e:de:d8:ac:b2:7f:91:19:d3:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D9:5B:E1:BD:3F:16:32:E9:E5:EF:D4:D1:07:EC:52:03:DE:4C:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/eb2afd62-7daf-31e0-8dd2-a2f4d2679fd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:407::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:ea:42:9f:d3:0f:b4:e4:78:90:69:0e:5a:73:e8:90:b5:a7:
         36:e6:ed:4b:33:dd:5b:d0:6d:db:80:f2:fe:6c:0b:77:ba:ed:
         71:d0:b3:e7:19:75:58:45:60:bf:1e:9f:66:41:84:d6:31:7d:
         be:09:c0:bf:07:c5:fa:aa:79:30:bf:54:6c:15:ad:34:5c:56:
         7f:43:1f:7c:cf:18:16:65:c4:6c:97:4f:d1:a6:cc:44:10:c4:
         a9:48:64:d3:fa:ef:ea:61:ff:8c:2b:4c:d0:75:d2:03:fb:e5:
         bf:39:44:32:f1:e6:41:48:f5:6c:be:3f:3f:c5:cd:cf:54:ba:
         07:29:e9:77:00:9b:c5:d8:7c:2c:d7:01:fb:d2:b4:b9:c3:4a:
         fe:35:16:9e:a1:91:b4:75:d5:81:15:04:c0:5a:55:a8:31:f1:
         53:68:6f:ee:6a:f0:b4:ea:ac:62:33:48:f0:83:bb:e3:d2:ee:
         1c:58:a5:39:6f:a8:e2:e6:76:a5:a8:46:ee:68:fd:d1:c7:5a:
         8b:46:40:a7:b0:37:5e:d4:63:64:52:c1:b4:0c:ab:80:4c:86:
         23:0b:ae:4a:42:23:59:3a:c0:9a:04:2f:1e:60:25:4d:d1:ea:
         d2:5b:62:8d:a8:15:6d:c3:58:32:ff:de:af:78:ad:a6:d5:a9:
         81:ed:fd:cf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDvJWugeLh8lTgYMvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTE5MTEwNTA1MDAwMFoXDTI0MDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
MzA4MmMzMTUtMWZlOC00MTYwLWJlNTUtOTZkODgyMzVmMTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH2jkTcWuXBsPX/sLZzcMb6H+280Bm0yJ0U4
ha23Ng3CdqlmFEYBbsV8YqgxPu2/fU8rcgPQHmct3AhKsKOj0gi2qX2auEgexMmV
j4Gs3OhBiD0XSKlxy/yKYq/+kvs2H7GyI7z+Xpczu4crprsPuNsRAFf/dKd0Ea3W
xP30hJfE2yDrFgHI54sEdDq1PMTyB52vZl1H+a7tF+tlnE7fPe6To3vyVIsbUvxZ
w0c6TI5ZkaZjDtSmhYKRD7hUfSe51p9aqF9FmONgEl0f1Ec/b0dj2rcHTA1emMrV
Ug1t55UnIUHupkFx8gHGcLXYWDqXlZoCEe+e3tissn+RGdMceQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJjZW+G9PxYy6eXv1NEH7FID3kzUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvZWIyYWZkNjItN2RhZi0z
MWUwLThkZDItYTJmNGQyNjc5ZmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAQH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKvqQp/TD7TkeJBpDlpz6JC1pzbm7Usz3VvQbduA8v5sC3e67XHQ
s+cZdVhFYL8en2ZBhNYxfb4JwL8HxfqqeTC/VGwVrTRcVn9DH3zPGBZlxGyXT9Gm
zEQQxKlIZNP67+ph/4wrTNB10gP75b85RDLx5kFI9Wy+Pz/Fzc9Uugcp6XcAm8XY
fCzXAfvStLnDSv41Fp6hkbR11YEVBMBaVagx8VNob+5q8LTqrGIzSPCDu+PS7hxY
pTlvqOLmdqWoRu5o/dHHWotGQKewN17UY2RSwbQMq4BMhiMLrkpCI1k6wJoELx5g
JU3R6tJbYo2oFW3DWDL/3q94rabVqYHt/c8=
-----END CERTIFICATE-----