Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/091acd89-bbf6-306d-9e67-2c6c8bc8a125.roa
File:                     091acd89-bbf6-306d-9e67-2c6c8bc8a125.roa (raw, json)
Hash identifier:          hEnW9MLh/hPqQnp//9bai4w6RB4ziMM3HvE4QDrX0Jo=
Subject key identifier:   FA:02:BE:AE:1E:08:C4:1A:70:6F:9B:3D:88:67:94:E5:C4:9B:BD:BB
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EFCE7499C0D6371B117EAFF80
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/091acd89-bbf6-306d-9e67-2c6c8bc8a125.roa
Signing time:             Sat 20 Aug 2022 12:00:00 +0000
ROA not before:           Sat 20 Aug 2022 12:00:00 +0000
ROA not after:            Tue 23 Aug 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:fc:e7:49:9c:0d:63:71:b1:17:ea:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Aug 20 12:00:00 2022 GMT
            Not After : Aug 23 04:00:00 2022 GMT
        Subject: CN=af24e17e-58f7-4f3c-b9d9-9b402e3c4246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:d8:36:65:71:3a:52:48:62:58:36:15:41:
                    33:7e:c2:4a:65:09:9a:f3:ef:f9:c2:8d:2f:a0:4c:
                    d1:e2:5f:18:6d:16:10:be:73:05:59:f3:12:1d:e6:
                    17:89:70:dd:97:f4:b8:07:64:9b:e9:3f:96:53:f6:
                    20:56:a4:2a:06:fa:6c:6e:b1:68:3e:31:84:7f:5e:
                    6a:13:2d:6d:8e:a6:7b:02:09:71:c8:35:7b:65:a9:
                    e4:94:8a:55:ce:af:d9:08:b8:02:a1:4e:6b:ac:35:
                    6f:c7:c4:cd:d7:5e:b6:06:95:ae:20:c9:4d:a7:cc:
                    10:4e:e0:8b:87:df:79:0c:e2:ac:80:80:2a:d0:da:
                    a1:70:f5:6d:b3:71:b3:23:a9:7b:f9:ac:b5:4c:27:
                    98:bf:c7:c3:bd:47:e1:c3:11:fe:e1:ee:6c:d8:9f:
                    28:df:00:67:30:86:3d:0f:c5:ab:60:4e:02:bf:7b:
                    2c:95:73:d9:2c:81:8e:75:3f:f0:b5:0b:c5:cd:1b:
                    fb:f4:d1:c2:40:9c:a5:e5:98:84:8c:1b:da:52:ff:
                    93:70:d1:49:90:38:47:2b:86:6b:4f:2c:5c:31:a4:
                    7c:07:50:44:5d:fa:c5:04:7f:ba:67:72:dd:a8:0d:
                    10:72:83:6e:18:3c:91:be:5b:0d:ae:ae:f2:6b:ba:
                    97:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:02:BE:AE:1E:08:C4:1A:70:6F:9B:3D:88:67:94:E5:C4:9B:BD:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/091acd89-bbf6-306d-9e67-2c6c8bc8a125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d9:79:cf:c8:e1:35:5d:60:d2:ef:1c:0a:8d:cd:6d:7b:90:
         34:30:e4:81:39:65:24:53:1a:9a:06:99:44:09:23:f8:1d:32:
         b7:79:86:9c:69:47:3f:d4:75:3b:67:07:dd:5d:8e:2d:6f:eb:
         30:7a:56:f4:2c:fd:5e:9a:1b:9e:2a:e6:b0:fe:56:fa:1e:24:
         d0:41:1a:dd:93:68:89:8e:ed:cc:40:ba:5c:fb:78:29:80:35:
         60:1e:78:4d:48:a2:a0:57:9a:cd:76:17:57:a0:e0:11:f7:8d:
         a7:92:27:22:fb:ad:90:bd:ab:33:5d:6a:33:e7:e6:52:f2:eb:
         0a:3a:99:e8:f1:6b:0c:1e:8b:ba:bf:0a:8a:60:35:04:a0:26:
         66:ec:78:a9:85:6f:03:c5:b5:a2:a2:d8:6e:73:f6:03:5d:92:
         c1:c7:e2:fc:32:ee:2c:9e:51:50:53:2e:28:d3:d7:02:f2:52:
         cb:32:bc:15:65:db:22:65:4b:b9:56:dd:ba:f4:58:cb:b1:15:
         56:fa:38:10:42:2f:79:5d:93:a5:87:99:a2:e6:e0:23:a3:e5:
         5b:d7:02:5c:e6:e1:30:f7:86:d0:5a:c9:36:29:64:48:b8:97:
         c0:17:2b:b3:7f:4f:0f:3f:a4:7b:46:53:2a:18:81:f0:1c:a6:
         73:08:d5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----