Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f580f8b5-0aa6-3fcf-8a0e-2766144bfdd1.roa
File:                     f580f8b5-0aa6-3fcf-8a0e-2766144bfdd1.roa (raw, json)
Hash identifier:          hllwZTa+NjSEnC1a7jNs9/IDmFw+4Hbt6HMz4QmkYG0=
Subject key identifier:   FC:42:4D:EA:33:D3:C4:07:05:81:05:B5:7A:02:F0:3D:F2:64:07:2B
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E6D79C56C6E48CBBA67542E00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f580f8b5-0aa6-3fcf-8a0e-2766144bfdd1.roa
Signing time:             Thu 30 Jun 2022 12:00:00 +0000
ROA not before:           Thu 30 Jun 2022 12:00:00 +0000
ROA not after:            Sun 03 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6d:79:c5:6c:6e:48:cb:ba:67:54:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jun 30 12:00:00 2022 GMT
            Not After : Jul  3 04:00:00 2022 GMT
        Subject: CN=a5ae2c86-7832-4362-9b17-389d44ff48fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:d8:64:67:50:9a:47:85:d8:21:cd:79:bc:
                    a9:09:c7:d0:25:94:75:f7:b4:1a:6c:ce:70:36:98:
                    30:5d:01:ab:16:53:d7:74:04:b0:56:9d:46:c5:f0:
                    3f:71:13:c7:85:7d:fd:ab:14:ea:ec:2b:d2:a9:6a:
                    34:49:35:fe:fd:ac:dc:48:1c:04:2c:4f:c5:e9:ce:
                    05:27:a8:d6:d1:d3:41:95:a7:7a:39:8a:70:67:6d:
                    ca:f3:60:79:86:69:f2:28:73:93:21:18:e2:38:0c:
                    33:e7:ca:ec:87:8b:7c:05:77:3f:f1:88:e9:5f:51:
                    a5:db:58:8b:55:69:dd:0e:a5:4b:14:ee:9a:c2:8c:
                    25:7f:97:1e:6b:69:15:18:7e:1f:f7:12:7e:d1:1f:
                    b4:08:0b:36:b3:11:91:26:b7:ba:d8:bf:19:ba:5c:
                    2e:60:e1:25:b3:44:a3:96:e6:41:0a:77:c3:13:4f:
                    30:20:88:db:c4:4f:bf:69:49:0b:15:b6:a5:70:02:
                    c9:b7:43:b6:7a:0e:db:d3:6c:79:d0:94:db:6a:24:
                    55:5b:2a:10:0d:47:a9:77:f4:65:04:af:16:76:32:
                    3d:c7:30:bc:52:eb:3e:df:47:8b:72:48:26:56:ca:
                    9f:41:30:2f:3b:9b:86:df:5c:bb:3d:0f:3f:54:0a:
                    14:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:42:4D:EA:33:D3:C4:07:05:81:05:B5:7A:02:F0:3D:F2:64:07:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f580f8b5-0aa6-3fcf-8a0e-2766144bfdd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:78:41:61:8d:a7:9c:c2:f6:b0:06:38:83:d0:7c:0d:e3:c2:
         2c:d2:e6:44:7e:5e:36:9c:a5:58:fa:8f:b8:1c:57:59:77:51:
         65:25:2b:3b:f9:93:e6:87:41:01:17:5d:f7:a6:c0:8a:7c:f2:
         d6:f6:da:cd:b4:b7:11:79:01:81:1d:cc:02:d1:28:9f:51:2c:
         d4:a8:b7:f4:23:2f:64:3b:8f:46:e9:ab:a9:b8:f0:9e:f5:e7:
         bf:95:c3:03:de:a0:62:59:76:a9:1a:da:26:b3:11:21:5c:2e:
         14:7a:48:a1:37:58:38:6e:c2:4c:eb:35:b1:4d:d3:b4:34:df:
         7d:00:6d:fa:ea:f2:3e:ee:b6:40:56:1d:5a:c1:04:e9:c6:c7:
         de:45:86:05:19:41:bb:55:96:e2:c4:db:59:11:15:cb:ee:46:
         1a:96:fc:01:18:4e:d9:3c:10:30:85:21:d8:5e:67:95:fa:ce:
         7a:d3:ad:40:64:1f:2d:b4:d3:9e:aa:e7:85:24:ef:40:af:15:
         48:79:75:40:84:02:93:e4:fe:c2:a2:37:32:41:b3:80:21:26:
         3d:3f:98:8f:0a:de:2f:79:41:3c:4a:12:8f:66:3e:22:a7:01:
         af:4c:49:c8:06:d8:1b:a7:e9:09:92:df:62:e3:9b:3e:13:5e:
         cf:45:f3:e4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD5tecVsbkjLumdULgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDYzMDEyMDAwMFoXDTIyMDcwMzA0MDAwMFowLzEtMCsGA1UEAxMk
YTVhZTJjODYtNzgzMi00MzYyLTliMTctMzg5ZDQ0ZmY0OGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvjYZGdQmkeF2CHNebypCcfQJZR197QabM5w
NpgwXQGrFlPXdASwVp1GxfA/cRPHhX39qxTq7CvSqWo0STX+/azcSBwELE/F6c4F
J6jW0dNBlad6OYpwZ23K82B5hmnyKHOTIRjiOAwz58rsh4t8BXc/8YjpX1Gl21iL
VWndDqVLFO6awowlf5cea2kVGH4f9xJ+0R+0CAs2sxGRJre62L8ZulwuYOEls0Sj
luZBCnfDE08wIIjbxE+/aUkLFbalcALJt0O2eg7b02x50JTbaiRVWyoQDUepd/Rl
BK8WdjI9xzC8Uus+30eLckgmVsqfQTAvO5uG31y7PQ8/VAoUyQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPxCTeoz08QHBYEFtXoC8D3yZAcrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvZjU4MGY4YjUtMGFhNi0z
ZmNmLThhMGUtMjc2NjE0NGJmZGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF14QWGNp5zC9rAGOIPQfA3jwizS5kR+XjacpVj6j7gcV1l3UWUl
Kzv5k+aHQQEXXfemwIp88tb22s20txF5AYEdzALRKJ9RLNSot/QjL2Q7j0bpq6m4
8J7157+VwwPeoGJZdqka2iazESFcLhR6SKE3WDhuwkzrNbFN07Q0330Abfrq8j7u
tkBWHVrBBOnGx95FhgUZQbtVluLE21kRFcvuRhqW/AEYTtk8EDCFIdheZ5X6znrT
rUBkHy20056q54Uk70CvFUh5dUCEApPk/sKiNzJBs4AhJj0/mI8K3i95QTxKEo9m
PiKnAa9MScgG2Bun6QmS32Ljmz4TXs9F8+Q=
-----END CERTIFICATE-----