Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/09b552c4-1258-3712-8d1f-1e111bdb94bc.roa
File:                     09b552c4-1258-3712-8d1f-1e111bdb94bc.roa (raw, json)
Hash identifier:          YcqKUUW6ybH2Lk03F8WxHo0/oupa0FHUlYaw42Du+ug=
Subject key identifier:   5F:69:22:51:6F:C7:7E:21:82:76:22:CA:12:E2:BF:16:D5:41:3C:33
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F89C4391713EEA4C91E3C2280
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/09b552c4-1258-3712-8d1f-1e111bdb94bc.roa
Signing time:             Sun 09 Oct 2022 12:00:00 +0000
ROA not before:           Sun 09 Oct 2022 12:00:00 +0000
ROA not after:            Wed 12 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:89:c4:39:17:13:ee:a4:c9:1e:3c:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct  9 12:00:00 2022 GMT
            Not After : Oct 12 04:00:00 2022 GMT
        Subject: CN=c3cc8b8a-473c-4751-9907-92b3a128f6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f5:fb:2a:6c:47:ad:ae:ae:36:75:d4:67:5b:
                    e5:6f:14:9a:f2:0d:0a:ce:9e:7d:27:e2:07:25:2e:
                    dd:5f:c8:3e:bb:1e:53:fd:1b:2c:f0:2c:9e:ae:bd:
                    5b:83:42:a5:0f:73:ff:49:21:21:bc:9e:e6:f3:30:
                    75:7f:d5:52:f6:f0:7f:22:a8:dd:9c:32:82:f7:4d:
                    99:2e:c5:af:7d:3c:d0:76:fe:03:6d:de:12:aa:98:
                    67:33:51:a7:6a:21:1d:ed:d0:b9:59:4e:dc:ca:a5:
                    3d:b8:ce:11:87:76:e9:6d:23:a6:8a:70:38:60:9f:
                    68:c9:bb:71:e0:a6:c2:7a:ec:8b:b4:a4:b0:8b:20:
                    d5:ff:55:9b:a7:0a:93:f1:d8:1c:68:9a:30:e8:d1:
                    af:c1:c8:8c:1e:4d:11:c1:0a:f4:c1:c6:be:fc:98:
                    3b:5b:42:36:07:39:30:e2:35:d2:b1:2b:91:e8:28:
                    9d:2a:6d:54:75:59:88:ef:07:ca:96:6b:db:98:3d:
                    a3:34:e7:d3:2a:be:70:77:14:d0:83:75:ba:72:b8:
                    51:55:8d:0b:83:74:54:ba:ab:8b:ce:94:f1:fe:b1:
                    72:5c:1b:16:b3:5e:e6:e2:15:0f:af:c2:bf:86:23:
                    bb:90:20:a5:d7:e4:7d:40:c2:ed:a3:55:fd:f5:a8:
                    eb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:69:22:51:6F:C7:7E:21:82:76:22:CA:12:E2:BF:16:D5:41:3C:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/09b552c4-1258-3712-8d1f-1e111bdb94bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:37:35:33:4f:f0:bd:bd:a7:0d:0f:08:79:be:2f:9d:5d:74:
         36:aa:0c:13:b9:3f:be:91:13:23:ed:c3:bd:54:10:3e:74:22:
         0e:71:1c:8c:01:3a:9e:1f:37:29:26:5e:cf:b4:c9:bd:5c:08:
         ed:cf:cc:84:32:1b:14:fe:6a:06:52:a1:75:19:c6:61:44:84:
         96:22:9a:db:9a:f7:f2:67:a4:b2:1d:0e:1c:16:15:d2:b1:4d:
         fa:39:0d:23:4c:f6:87:91:00:11:09:13:36:77:7c:fb:33:62:
         15:00:c4:fb:0b:b9:07:dd:45:ec:13:0a:c3:72:ba:15:7c:1c:
         d7:93:12:c0:78:ef:7a:8f:f6:68:70:56:b9:0d:ce:01:52:4b:
         93:5b:7a:f8:2c:5d:3c:9b:7d:dd:18:1e:21:28:62:30:20:09:
         26:6f:ad:55:25:3a:9a:7e:32:7e:16:d7:6d:e6:f7:dc:6a:23:
         d4:0f:69:21:97:49:14:15:72:b0:9a:08:d1:6a:c1:5d:e9:76:
         1d:8b:65:2b:a2:54:dc:66:bd:71:fe:86:fb:c7:9d:c1:5a:6e:
         69:a9:41:23:ef:15:b8:b7:01:56:fb:24:ea:eb:7c:bf:1f:34:
         53:b9:45:a2:6a:a1:66:14:7a:f1:86:ef:6f:95:6d:a4:cb:d0:
         b0:00:a2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----