Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f748346d-7aef-313a-9831-d270d972cc72.roa
File:                     f748346d-7aef-313a-9831-d270d972cc72.roa (raw, json)
Hash identifier:          EBZynKPd0N8tYor42ayCHy7U3R+EAo/425SMG/b50Jo=
Subject key identifier:   A2:97:2D:39:8D:28:8A:6A:97:AF:F2:8B:D6:0A:66:68:6E:D8:1C:E6
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583BBABABE3D82C7D5FD222751C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f748346d-7aef-313a-9831-d270d972cc72.roa
Signing time:             Tue 05 Nov 2019 05:00:00 +0000
ROA not before:           Tue 05 Nov 2019 05:00:00 +0000
ROA not after:            Tue 30 Jan 2024 05:00:00 +0000
asID:                     16509
IP address blocks:        2605:9cc0:533::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:ba:ba:be:3d:82:c7:d5:fd:22:27:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  5 05:00:00 2019 GMT
            Not After : Jan 30 05:00:00 2024 GMT
        Subject: CN=1dfa3d7c-0df0-4871-9e6b-65c1c2f5bd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fa:2c:eb:b0:d4:99:42:80:dd:46:51:f4:81:
                    63:e6:1d:ee:a0:c9:c4:ae:2c:ff:c6:fe:1e:73:bb:
                    b1:1e:e5:1b:70:7c:98:0e:f3:73:26:51:cd:39:2a:
                    48:2e:40:f8:f0:81:35:60:f1:06:df:cc:b7:3e:9e:
                    e9:e3:9b:f4:ba:f6:76:5b:5f:ba:f3:49:c6:09:0d:
                    73:29:f8:16:9b:9b:c4:8e:73:c7:de:1a:49:18:64:
                    c6:24:92:c0:c2:1f:e1:c3:04:08:68:aa:24:06:f1:
                    e3:03:10:02:d6:71:d1:49:b6:e6:14:b8:61:38:60:
                    8a:88:32:d3:62:8d:45:ed:b9:ec:7e:e8:95:53:d7:
                    c7:2b:66:61:cc:80:9e:ee:24:c2:48:a2:c7:3c:75:
                    98:f1:fb:0b:60:da:5f:3b:29:2b:be:22:d8:cf:ea:
                    af:ae:14:b1:a0:68:d3:25:35:78:13:95:55:00:e6:
                    4d:e3:07:a6:7d:8c:94:c0:2b:92:16:c4:3a:4f:6c:
                    33:f7:15:2e:6b:55:32:0b:a9:52:36:18:e3:b4:a9:
                    08:a8:51:f5:1b:2d:59:a8:5f:77:29:9a:89:eb:12:
                    02:95:41:0e:7e:cd:35:46:86:89:80:65:54:1a:e9:
                    30:8f:07:8a:d3:63:30:fd:d6:e2:d5:fe:3f:bb:55:
                    80:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:97:2D:39:8D:28:8A:6A:97:AF:F2:8B:D6:0A:66:68:6E:D8:1C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f748346d-7aef-313a-9831-d270d972cc72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:533::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a1:10:8e:86:32:f9:2a:45:2e:ce:c6:f8:ca:9f:55:83:f5:
         4a:4f:e3:77:75:b9:e5:c2:c7:88:c8:1b:32:5d:01:69:8f:4b:
         4b:e2:fd:a0:b6:67:24:4f:d6:f1:0e:4e:87:c4:e9:69:b8:e0:
         d3:a8:fc:66:8e:6d:26:fa:08:ad:c2:34:18:97:79:6d:a9:3f:
         ca:c0:48:0e:63:38:24:a9:41:4f:c7:06:de:46:ae:d6:8e:24:
         eb:66:b2:8c:5c:92:53:4f:ce:33:00:e3:33:77:7d:36:0b:81:
         ce:4a:ee:36:7e:bd:87:27:79:3d:82:77:b2:49:51:c4:97:f9:
         35:4e:0e:2e:4a:3b:c8:d6:65:70:28:ee:a4:e9:ab:ea:64:92:
         10:c7:a1:65:90:ec:28:2b:1a:44:df:d6:97:7d:7f:46:3c:d4:
         b4:da:7b:f3:3c:13:ff:dc:f8:bf:2a:82:23:a5:0e:bf:82:b4:
         4d:2b:29:99:25:0b:36:75:c6:9d:d0:a1:33:cf:61:67:e1:92:
         41:36:74:78:76:9c:eb:6e:eb:cb:e1:af:47:1a:a8:18:a8:a7:
         61:76:37:08:1e:ba:b4:97:94:43:42:c6:5b:d0:33:dd:ff:65:
         cc:3b:f8:cf:e3:11:f2:4c:fb:d9:16:eb:be:a9:82:0f:80:31:
         e3:2c:12:44
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDu6ur49gsfV/SInUcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTE5MTEwNTA1MDAwMFoXDTI0MDEzMDA1MDAwMFowLzEtMCsGA1UEAxMk
MWRmYTNkN2MtMGRmMC00ODcxLTllNmItNjVjMWMyZjViZDVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvos67DUmUKA3UZR9IFj5h3uoMnEriz/xv4e
c7uxHuUbcHyYDvNzJlHNOSpILkD48IE1YPEG38y3Pp7p45v0uvZ2W1+680nGCQ1z
KfgWm5vEjnPH3hpJGGTGJJLAwh/hwwQIaKokBvHjAxAC1nHRSbbmFLhhOGCKiDLT
Yo1F7bnsfuiVU9fHK2ZhzICe7iTCSKLHPHWY8fsLYNpfOykrviLYz+qvrhSxoGjT
JTV4E5VVAOZN4wemfYyUwCuSFsQ6T2wz9xUua1UyC6lSNhjjtKkIqFH1Gy1ZqF93
KZqJ6xIClUEOfs01RoaJgGVUGukwjweK02Mw/dbi1f4/u1WAcQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKKXLTmNKIpql6/yi9YKZmhu2BzmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvZjc0ODM0NmQtN2FlZi0z
MTNhLTk4MzEtZDI3MGQ5NzJjYzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAUz
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFuhEI6GMvkqRS7OxvjKn1WD9UpP43d1ueXCx4jIGzJdAWmPS0vi
/aC2ZyRP1vEOTofE6Wm44NOo/GaObSb6CK3CNBiXeW2pP8rASA5jOCSpQU/HBt5G
rtaOJOtmsoxcklNPzjMA4zN3fTYLgc5K7jZ+vYcneT2Cd7JJUcSX+TVODi5KO8jW
ZXAo7qTpq+pkkhDHoWWQ7CgrGkTf1pd9f0Y81LTae/M8E//c+L8qgiOlDr+CtE0r
KZklCzZ1xp3QoTPPYWfhkkE2dHh2nOtu68vhr0caqBiop2F2NwgeurSXlENCxlvQ
M93/Zcw7+M/jEfJM+9kW676pgg+AMeMsEkQ=
-----END CERTIFICATE-----