Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/fd72c4e9-b812-3643-887f-8bc02719229e.roa
File:                     fd72c4e9-b812-3643-887f-8bc02719229e.roa (raw, json)
Hash identifier:          8IDkUy3dQjaJElkf/OxMNO2XUnInlsQKHwEuSORQQZo=
Subject key identifier:   12:9B:3B:7D:BD:6F:39:6A:80:08:05:24:1A:BE:2E:D0:8A:82:A9:52
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D5C4D20088D10441895479A00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/fd72c4e9-b812-3643-887f-8bc02719229e.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Sun 27 Mar 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5c:4d:20:08:8d:10:44:18:95:47:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Mar 27 04:00:00 2022 GMT
        Subject: CN=10f5f871-774c-460b-85b6-338e118332c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cf:3f:67:9e:98:6d:05:a3:bf:e9:29:7c:4a:
                    a6:0f:ca:0a:13:79:f2:95:82:29:e1:fa:15:19:6b:
                    84:f1:6e:5c:77:56:9a:41:d9:2f:f3:1d:aa:9d:e4:
                    6b:de:4f:bb:9f:e9:fa:10:cc:29:7b:44:be:38:b7:
                    5d:da:d6:ad:e1:5e:b7:2b:47:fb:1d:08:2f:22:26:
                    43:8b:16:f8:20:92:5d:3b:a5:60:f9:4e:c0:7c:e9:
                    e2:ad:eb:ff:f8:20:de:84:2d:c0:5d:f3:a0:63:bc:
                    de:ec:6d:b3:5f:24:7b:bf:f5:2b:c8:3e:e1:62:61:
                    5f:8f:02:e2:06:48:55:1a:aa:00:12:1c:15:74:85:
                    7a:6c:3f:86:3c:b4:6c:62:62:fc:08:8c:8b:f7:46:
                    fb:81:96:7e:7e:ee:df:3e:59:16:e4:e9:ed:67:b6:
                    55:57:74:44:23:b2:a6:76:da:74:a7:d7:95:5a:09:
                    d7:ed:f4:b2:c4:01:02:fd:a3:25:43:4d:a3:1a:ad:
                    e2:26:3a:fa:e8:1a:f3:9b:c9:20:c4:92:d5:b7:32:
                    77:5a:7c:f1:d5:ca:e8:7e:9b:e4:ff:f3:9e:05:0d:
                    30:0d:5d:70:7b:0e:00:00:c5:d6:53:51:94:80:17:
                    6a:dd:88:c8:d9:15:ff:0c:de:a1:8a:50:be:67:2a:
                    38:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9B:3B:7D:BD:6F:39:6A:80:08:05:24:1A:BE:2E:D0:8A:82:A9:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/fd72c4e9-b812-3643-887f-8bc02719229e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:f0:db:78:bd:42:d0:ee:a9:17:d6:28:15:85:c2:05:cc:ab:
         a4:2d:12:05:6b:79:33:3b:3b:25:cf:7e:99:5b:e1:1c:82:a2:
         ed:07:de:bb:a4:7a:3a:45:55:c2:44:e4:8d:db:fb:1c:ed:7d:
         f1:83:68:40:6f:c5:d6:18:d1:4a:bc:14:57:42:29:f5:5e:b0:
         56:5a:7a:13:61:17:7d:27:02:ad:a5:58:36:7f:e2:e7:27:f7:
         93:0c:65:ca:b5:37:33:2a:36:63:be:0f:ca:3b:85:55:02:27:
         44:97:2e:a6:68:7a:4f:df:83:ae:86:4d:56:57:34:95:64:67:
         4b:57:7f:00:9c:8b:a4:c9:f4:8a:d1:58:58:63:ba:6d:f3:ac:
         c7:6c:29:a7:12:62:a9:b5:00:26:47:5e:22:c6:f5:62:a4:c4:
         66:ae:a4:f7:65:98:52:c4:aa:94:f6:95:b7:84:32:3c:95:bf:
         71:6f:ba:bd:51:e5:d2:27:7b:d3:46:5b:91:36:78:43:5e:13:
         0a:08:a3:61:ca:eb:d4:37:2f:96:f5:5f:95:b7:45:99:13:9d:
         be:8f:e4:81:3b:93:16:c7:35:7f:a6:a4:83:62:1a:ed:b7:fc:
         61:ed:e2:4c:ae:b8:16:1b:19:44:a1:e8:9a:dd:2d:a2:02:46:
         d0:e0:02:12
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD1cTSAIjRBEGJVHmgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDMyNTA0MDAwMFoXDTIyMDMyNzA0MDAwMFowLzEtMCsGA1UEAxMk
MTBmNWY4NzEtNzc0Yy00NjBiLTg1YjYtMzM4ZTExODMzMmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms8/Z56YbQWjv+kpfEqmD8oKE3nylYIp4foV
GWuE8W5cd1aaQdkv8x2qneRr3k+7n+n6EMwpe0S+OLdd2tat4V63K0f7HQgvIiZD
ixb4IJJdO6Vg+U7AfOnirev/+CDehC3AXfOgY7ze7G2zXyR7v/UryD7hYmFfjwLi
BkhVGqoAEhwVdIV6bD+GPLRsYmL8CIyL90b7gZZ+fu7fPlkW5OntZ7ZVV3REI7Km
dtp0p9eVWgnX7fSyxAEC/aMlQ02jGq3iJjr66Brzm8kgxJLVtzJ3Wnzx1crofpvk
//OeBQ0wDV1wew4AAMXWU1GUgBdq3YjI2RX/DN6hilC+Zyo4JQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBKbO329bzlqgAgFJBq+LtCKgqlSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvZmQ3MmM0ZTktYjgxMi0z
NjQzLTg4N2YtOGJjMDI3MTkyMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIrw23i9QtDuqRfWKBWFwgXMq6QtEgVreTM7OyXPfplb4RyCou0H
3rukejpFVcJE5I3b+xztffGDaEBvxdYY0Uq8FFdCKfVesFZaehNhF30nAq2lWDZ/
4ucn95MMZcq1NzMqNmO+D8o7hVUCJ0SXLqZoek/fg66GTVZXNJVkZ0tXfwCci6TJ
9IrRWFhjum3zrMdsKacSYqm1ACZHXiLG9WKkxGaupPdlmFLEqpT2lbeEMjyVv3Fv
ur1R5dIne9NGW5E2eENeEwoIo2HK69Q3L5b1X5W3RZkTnb6P5IE7kxbHNX+mpINi
Gu23/GHt4kyuuBYbGUSh6JrdLaICRtDgAhI=
-----END CERTIFICATE-----