Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/fed87a11-a6c1-3d61-a842-3277cece1246.roa
File:                     fed87a11-a6c1-3d61-a842-3277cece1246.roa (raw, json)
Hash identifier:          6Pozqpw77tHGpwuL+IhOb/p/EVMqLEnxwJlT63Lb0Z0=
Subject key identifier:   D0:9A:67:29:65:22:8E:04:F0:A7:29:1A:DE:2E:23:F1:83:85:E5:5E
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E16EE400E00C4C53A34524200
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/fed87a11-a6c1-3d61-a842-3277cece1246.roa
Signing time:             Mon 30 May 2022 12:00:00 +0000
ROA not before:           Mon 30 May 2022 12:00:00 +0000
ROA not after:            Thu 02 Jun 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:16:ee:40:0e:00:c4:c5:3a:34:52:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May 30 12:00:00 2022 GMT
            Not After : Jun  2 04:00:00 2022 GMT
        Subject: CN=33426cdf-2ce4-4949-be1b-ae2f57e7268d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cf:fa:2c:7a:c7:e7:4f:ea:fc:73:1b:ba:87:
                    2c:05:63:a5:1e:e4:eb:2e:20:34:8c:85:7e:cf:0b:
                    f2:ad:d3:ee:44:a3:34:fb:da:59:4d:a3:26:bd:4d:
                    14:ca:4c:ef:25:a9:cf:52:b5:8b:08:2b:11:d0:62:
                    c6:37:96:39:ee:d0:3a:eb:a2:67:fe:42:da:7c:9f:
                    37:a1:1c:4d:1c:d3:e2:de:07:54:32:7f:17:d2:1a:
                    28:3e:24:20:ea:75:a1:24:ed:8b:1c:57:b8:97:d1:
                    d6:0a:69:94:fd:ce:29:ff:a4:47:c9:2b:f9:b1:84:
                    ef:1d:43:db:24:b8:87:c2:d1:50:b9:90:e0:f9:85:
                    6d:a4:2c:21:87:9d:9a:d1:d1:23:8e:cb:5c:67:17:
                    0b:50:da:3a:91:4a:46:eb:46:a4:b0:ec:2b:da:08:
                    31:48:19:73:64:74:2a:9c:12:a8:2f:9c:e0:bb:fa:
                    ac:93:e1:4c:b9:8b:46:55:df:e2:90:3b:d7:e4:98:
                    43:00:3d:c9:4a:d4:82:0d:2c:b5:f4:3e:b4:dd:9d:
                    7a:c3:24:05:9a:78:6a:7c:ea:11:34:f2:18:0d:62:
                    8b:db:65:cb:f3:3b:62:f0:c3:d7:a2:a3:8e:42:96:
                    62:6a:00:06:e5:dc:c8:90:28:b3:56:fa:7d:7f:5b:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9A:67:29:65:22:8E:04:F0:A7:29:1A:DE:2E:23:F1:83:85:E5:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/fed87a11-a6c1-3d61-a842-3277cece1246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c4:4b:ac:56:bc:98:e8:d5:1c:76:b3:5f:7f:6d:01:ee:1e:
         61:4b:c0:9f:14:99:62:16:42:9f:fb:dc:ec:7b:8c:50:c3:72:
         51:c5:41:0a:ec:98:f1:02:2d:55:3a:a2:6a:9b:be:b8:83:f4:
         3f:f6:f7:67:ba:df:1e:d3:82:e7:8c:6a:4a:6e:2b:87:eb:b7:
         ed:95:6b:1b:48:1e:bf:52:4a:b5:7c:37:df:0e:59:45:d1:80:
         c3:10:73:be:c2:6b:32:35:0f:9c:dd:39:74:fb:b3:28:12:ca:
         a1:db:d0:88:91:65:8a:dd:2f:d1:f5:2e:d4:4e:92:3f:69:85:
         ec:13:27:b7:06:88:96:02:c0:cb:05:06:88:b5:4a:ca:62:aa:
         44:0c:48:9a:b0:4f:09:77:65:ec:49:af:fd:85:f6:bf:9a:ba:
         0b:a9:a4:ea:70:33:2f:39:f2:e1:fb:5d:12:9e:62:2f:ca:c5:
         3a:af:ee:f2:10:d7:e3:0b:e1:d6:a2:8a:8b:d9:be:d4:34:83:
         36:bb:e3:72:b5:59:c1:0c:f1:f8:70:0a:6e:8f:55:ba:c7:2c:
         94:fb:4e:44:ae:f0:18:c2:a8:e0:08:a4:47:e8:e3:f1:85:ab:
         16:58:f2:9e:7b:0e:ef:20:f8:49:72:ab:37:f8:ac:0c:84:ca:
         67:98:fb:cb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD4W7kAOAMTFOjRSQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDUzMDEyMDAwMFoXDTIyMDYwMjA0MDAwMFowLzEtMCsGA1UEAxMk
MzM0MjZjZGYtMmNlNC00OTQ5LWJlMWItYWUyZjU3ZTcyNjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs/6LHrH50/q/HMbuocsBWOlHuTrLiA0jIV+
zwvyrdPuRKM0+9pZTaMmvU0UykzvJanPUrWLCCsR0GLGN5Y57tA666Jn/kLafJ83
oRxNHNPi3gdUMn8X0hooPiQg6nWhJO2LHFe4l9HWCmmU/c4p/6RHySv5sYTvHUPb
JLiHwtFQuZDg+YVtpCwhh52a0dEjjstcZxcLUNo6kUpG60aksOwr2ggxSBlzZHQq
nBKoL5zgu/qsk+FMuYtGVd/ikDvX5JhDAD3JStSCDSy19D603Z16wyQFmnhqfOoR
NPIYDWKL22XL8zti8MPXoqOOQpZiagAG5dzIkCizVvp9f1tv2wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNCaZyllIo4E8KcpGt4uI/GDheVeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvZmVkODdhMTEtYTZjMS0z
ZDYxLWE4NDItMzI3N2NlY2UxMjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFrES6xWvJjo1Rx2s19/bQHuHmFLwJ8UmWIWQp/73Ox7jFDDclHF
QQrsmPECLVU6omqbvriD9D/292e63x7TgueMakpuK4frt+2VaxtIHr9SSrV8N98O
WUXRgMMQc77CazI1D5zdOXT7sygSyqHb0IiRZYrdL9H1LtROkj9phewTJ7cGiJYC
wMsFBoi1SspiqkQMSJqwTwl3ZexJr/2F9r+auguppOpwMy858uH7XRKeYi/KxTqv
7vIQ1+ML4daiiovZvtQ0gza743K1WcEM8fhwCm6PVbrHLJT7TkSu8BjCqOAIpEfo
4/GFqxZY8p57Du8g+Elyqzf4rAyEymeY+8s=
-----END CERTIFICATE-----