Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/131502f4-cd83-37d6-8219-591d24f3fd0e.roa
File:                     131502f4-cd83-37d6-8219-591d24f3fd0e.roa (raw, json)
Hash identifier:          fCqchBKv35OPa4w8eMKtZW5LLfBfffS+/T6zCrcb7jc=
Subject key identifier:   9E:EC:D2:10:DD:1A:6C:A6:5B:7C:0A:81:F6:A7:22:DA:22:AB:D9:99
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E202B82A1766F87CF3BF3DB00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/131502f4-cd83-37d6-8219-591d24f3fd0e.roa
Signing time:             Thu 02 Jun 2022 12:00:00 +0000
ROA not before:           Thu 02 Jun 2022 12:00:00 +0000
ROA not after:            Sun 05 Jun 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:20:2b:82:a1:76:6f:87:cf:3b:f3:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jun  2 12:00:00 2022 GMT
            Not After : Jun  5 04:00:00 2022 GMT
        Subject: CN=ad544b63-e849-41fd-ac0a-ba553e2f9edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ff:3e:5f:86:d8:fb:5f:26:67:ed:4b:4d:c0:
                    56:ad:52:bd:6d:27:f2:9f:95:82:2e:86:a8:08:19:
                    c7:fd:52:4c:51:82:d5:52:04:6e:00:f6:06:28:27:
                    1a:58:0a:0f:ac:e5:99:74:9d:a6:15:56:7d:ff:db:
                    5d:81:90:95:24:9a:49:fa:81:44:ab:44:95:b5:2c:
                    96:bb:7f:f2:be:e3:6c:ce:09:b4:64:30:62:2f:63:
                    ad:c5:8a:b6:22:d3:de:f5:41:c7:f7:c2:53:e4:ce:
                    b0:96:45:6d:e1:b0:9e:28:a9:50:f3:28:5b:87:98:
                    88:2b:41:0d:f8:9a:42:96:92:bc:e1:77:14:a7:31:
                    3b:2e:1a:df:a9:a4:26:34:aa:db:1e:9c:4f:94:07:
                    a9:bb:e5:33:3d:53:6f:a6:e0:11:34:4c:1a:68:97:
                    2a:c2:32:50:2e:cd:43:9d:af:a5:05:46:ff:62:69:
                    26:ae:92:4f:ee:19:3e:d1:79:7f:da:cd:74:34:4d:
                    71:c7:2a:e4:f3:59:42:83:31:3d:80:de:64:26:5b:
                    14:08:1c:79:1f:ae:2a:23:0c:c6:94:ed:ed:dd:31:
                    0c:11:71:e6:bf:2e:56:2d:7f:9d:27:17:f7:99:68:
                    d7:1a:2e:37:c4:da:af:d1:d1:6c:4b:b5:9f:cb:bb:
                    93:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EC:D2:10:DD:1A:6C:A6:5B:7C:0A:81:F6:A7:22:DA:22:AB:D9:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/131502f4-cd83-37d6-8219-591d24f3fd0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:69:3a:f8:43:e4:9c:76:7f:2d:a6:f7:6c:43:f1:86:0e:d3:
         49:af:c5:5d:86:b6:8a:e4:03:4b:a5:09:67:4f:3e:7b:c1:64:
         5c:6a:ba:02:ec:30:0d:a9:50:76:c5:53:e2:4f:54:ac:f3:e2:
         56:fb:e5:da:65:b5:2d:cb:26:70:34:9e:9d:10:e0:00:67:98:
         7c:d7:81:b9:4c:73:06:84:60:20:6f:d5:2a:ee:97:12:32:2d:
         f7:20:d0:37:0e:a8:8e:02:ac:a2:9e:05:9f:27:47:9b:3d:8c:
         a7:1a:5a:6a:ab:2b:f2:3b:91:35:55:00:7d:d5:70:b4:97:8f:
         7c:0a:51:d9:60:14:83:2c:f8:40:de:29:6a:45:7a:d4:28:39:
         79:6c:1c:60:89:b1:94:71:07:72:33:9a:4e:44:e7:16:00:53:
         11:06:dc:04:02:bb:01:b0:22:7b:6b:fc:fb:e7:94:d9:df:c5:
         4d:5f:fa:9d:1a:fd:73:59:32:07:1d:c1:e9:91:f1:8a:00:14:
         5e:ee:8a:79:37:69:d1:2b:84:df:a3:d5:0b:d1:5e:5d:5d:5e:
         05:b8:df:d9:bf:56:64:e6:14:4d:8b:15:ec:57:83:c9:40:8d:
         55:5d:25:35:33:39:aa:5a:6e:a0:45:d9:03:f3:2a:47:9d:ff:
         a7:7d:aa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----