Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ecd9f683-8966-39c9-9a2b-5080c79260b7.roa
File:                     ecd9f683-8966-39c9-9a2b-5080c79260b7.roa (raw, json)
Hash identifier:          1ei8GTnEdAN/45FAF7q9RIhAhpdVplUqBTweHtXOymQ=
Subject key identifier:   E0:72:A7:B2:81:C7:2C:E6:D6:A0:1D:7A:3E:E1:BF:A6:D0:E3:EC:AB
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F07900E24ABEC8184A14F1E00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ecd9f683-8966-39c9-9a2b-5080c79260b7.roa
Signing time:             Wed 24 Aug 2022 12:00:00 +0000
ROA not before:           Wed 24 Aug 2022 12:00:00 +0000
ROA not after:            Sat 27 Aug 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:07:90:0e:24:ab:ec:81:84:a1:4f:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Aug 24 12:00:00 2022 GMT
            Not After : Aug 27 04:00:00 2022 GMT
        Subject: CN=7d056373-59d7-4f72-9a19-5d8b923a3c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5e:3b:ca:aa:45:88:50:aa:5b:a0:fd:6c:25:
                    32:77:55:ed:25:31:63:47:8a:ca:80:d6:07:ba:fe:
                    37:50:a5:97:73:fb:64:05:b4:35:86:17:cd:e7:03:
                    a6:11:f0:d7:d6:cd:0d:76:e8:10:94:a8:5b:48:45:
                    0c:71:d8:1d:1d:c8:16:1b:b5:3b:b2:c2:b5:fa:ac:
                    fa:6f:f0:6f:37:7a:60:f6:ba:62:74:16:53:92:d6:
                    75:20:0a:64:b3:d0:45:91:a9:22:1b:c9:42:aa:5b:
                    25:f1:a5:2b:9c:17:eb:b6:80:ff:33:01:1b:6d:ff:
                    87:62:48:40:37:b0:19:e0:e9:31:f6:f5:af:cf:a8:
                    35:e1:97:d9:fd:ca:0e:b9:ce:67:aa:d8:ab:37:bf:
                    37:96:ba:1a:52:68:41:f0:e2:53:2e:a0:90:3b:60:
                    69:04:26:78:70:e5:ed:a5:0b:86:a2:e7:20:ed:aa:
                    7c:ab:ea:4a:52:9a:43:ea:56:72:d8:92:c2:89:40:
                    70:17:26:93:63:ae:7a:46:e7:bc:24:3d:6d:41:cf:
                    39:d9:4e:5e:f3:e1:4b:bc:06:ef:31:f3:2b:49:1d:
                    e1:0e:42:01:5a:ce:8e:ba:fd:83:88:27:f5:b4:a5:
                    12:07:f9:b2:ac:ab:c4:8b:9b:48:a7:6e:78:b4:fd:
                    8a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:72:A7:B2:81:C7:2C:E6:D6:A0:1D:7A:3E:E1:BF:A6:D0:E3:EC:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ecd9f683-8966-39c9-9a2b-5080c79260b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:1e:c4:c4:48:79:ec:1d:39:83:a1:31:9a:18:02:b8:2f:d1:
         d1:f9:ce:86:f8:ee:34:9e:d6:98:1d:01:01:70:78:24:df:82:
         4f:a4:6b:00:5d:ff:d0:4a:66:8a:9d:00:8b:06:d8:b8:14:a2:
         53:1c:5a:df:1a:b0:12:f3:89:a1:06:ef:35:ff:de:5c:cb:be:
         0b:89:55:14:c2:a3:7f:56:82:7a:06:ef:bf:c5:36:c2:51:86:
         1b:91:70:ef:b1:46:c6:b7:51:b5:d5:65:bf:2a:c4:e8:6b:fc:
         84:30:ed:48:9f:37:54:2c:2d:2b:7c:c2:4a:cc:66:2e:a3:fd:
         34:1a:0e:73:dc:dc:71:16:c1:90:b5:7e:14:a8:9b:cd:6d:26:
         81:73:47:d7:70:00:e9:25:1b:82:50:da:bf:cf:84:51:36:6f:
         33:24:7e:24:9d:63:5b:aa:48:d5:d7:58:9f:5b:de:34:63:d6:
         42:bf:8b:4c:f4:af:ec:3c:27:f6:36:a3:2b:9d:45:8d:8f:a3:
         89:0f:e6:8f:b9:2e:25:43:f5:84:7f:64:02:48:62:d9:35:e6:
         21:7b:9e:a7:fe:90:b7:d4:eb:cb:bb:60:9d:6e:76:02:55:4e:
         36:1a:3e:ff:13:20:3f:64:b8:ff:68:95:ec:9a:b3:7f:bc:24:
         cf:27:c4:5a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD8HkA4kq+yBhKFPHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDgyNDEyMDAwMFoXDTIyMDgyNzA0MDAwMFowLzEtMCsGA1UEAxMk
N2QwNTYzNzMtNTlkNy00ZjcyLTlhMTktNWQ4YjkyM2EzYzUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil47yqpFiFCqW6D9bCUyd1XtJTFjR4rKgNYH
uv43UKWXc/tkBbQ1hhfN5wOmEfDX1s0NdugQlKhbSEUMcdgdHcgWG7U7ssK1+qz6
b/BvN3pg9rpidBZTktZ1IApks9BFkakiG8lCqlsl8aUrnBfrtoD/MwEbbf+HYkhA
N7AZ4Okx9vWvz6g14ZfZ/coOuc5nqtirN783lroaUmhB8OJTLqCQO2BpBCZ4cOXt
pQuGoucg7ap8q+pKUppD6lZy2JLCiUBwFyaTY656Rue8JD1tQc852U5e8+FLvAbv
MfMrSR3hDkIBWs6Ouv2DiCf1tKUSB/myrKvEi5tIp254tP2KWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOByp7KBxyzm1qAdej7hv6bQ4+yrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvZWNkOWY2ODMtODk2Ni0z
OWM5LTlhMmItNTA4MGM3OTI2MGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHgexMRIeewdOYOhMZoYArgv0dH5zob47jSe1pgdAQFweCTfgk+k
awBd/9BKZoqdAIsG2LgUolMcWt8asBLziaEG7zX/3lzLvguJVRTCo39WgnoG77/F
NsJRhhuRcO+xRsa3UbXVZb8qxOhr/IQw7UifN1QsLSt8wkrMZi6j/TQaDnPc3HEW
wZC1fhSom81tJoFzR9dwAOklG4JQ2r/PhFE2bzMkfiSdY1uqSNXXWJ9b3jRj1kK/
i0z0r+w8J/Y2oyudRY2Po4kP5o+5LiVD9YR/ZAJIYtk15iF7nqf+kLfU68u7YJ1u
dgJVTjYaPv8TID9kuP9oleyas3+8JM8nxFo=
-----END CERTIFICATE-----