Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/136ae1ee-f4b1-386c-966c-6dc00b4a921b.roa
File:                     136ae1ee-f4b1-386c-966c-6dc00b4a921b.roa (raw, json)
Hash identifier:          AZIQoGEAvJUzvBIn/Z/uiZNii1BQvVnPy1jh1Zs0OIM=
Subject key identifier:   6B:E2:B8:83:F2:18:1E:D4:F9:39:3C:23:24:DA:F8:CE:1A:0F:25:FF
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FBA696DC5E87064CEBA9B8800
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/136ae1ee-f4b1-386c-966c-6dc00b4a921b.roa
Signing time:             Thu 27 Oct 2022 12:00:00 +0000
ROA not before:           Thu 27 Oct 2022 12:00:00 +0000
ROA not after:            Sun 30 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ba:69:6d:c5:e8:70:64:ce:ba:9b:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 27 12:00:00 2022 GMT
            Not After : Oct 30 04:00:00 2022 GMT
        Subject: CN=c4fc9871-e253-448a-81ce-0a73e75cd9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:f3:d5:98:47:22:96:b8:e3:37:82:74:a8:
                    b3:24:8f:fa:0c:f2:85:22:c4:ae:7b:dc:b2:e8:39:
                    92:98:5c:8a:0c:0c:86:b3:8b:8a:d9:cc:97:06:94:
                    9b:f9:0f:34:20:df:49:43:d4:52:b9:c0:90:fd:b8:
                    47:c3:c0:dc:61:4c:a1:30:07:e0:1f:d5:6b:33:b9:
                    b3:d5:48:a1:8e:95:c0:2a:56:42:ca:ed:ac:69:fa:
                    b5:61:d6:2d:7f:12:1e:25:b1:0b:a7:69:12:46:78:
                    eb:96:c9:ec:35:23:49:1b:bb:ec:8c:1e:2f:ba:44:
                    67:75:39:2c:ec:77:71:7b:37:80:7d:69:e1:38:90:
                    fe:b3:3f:77:e8:37:5e:be:9d:c0:39:0e:af:ce:b2:
                    ac:cf:42:d4:46:00:f1:6c:b7:4a:22:a8:0d:00:3d:
                    aa:bc:5e:89:d1:fe:32:73:23:58:5f:fe:e4:1f:fa:
                    d7:80:e8:05:50:50:cc:05:d1:65:02:00:74:ad:03:
                    82:81:bd:93:06:49:fb:c0:73:65:e8:37:ca:5d:ae:
                    da:05:00:bf:b8:44:c7:cf:82:67:4f:b1:31:19:52:
                    fc:18:42:01:7a:85:99:87:6f:5e:f3:3a:36:23:c0:
                    70:e2:db:af:d1:66:c8:0e:30:66:f3:c4:82:e7:70:
                    43:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E2:B8:83:F2:18:1E:D4:F9:39:3C:23:24:DA:F8:CE:1A:0F:25:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/136ae1ee-f4b1-386c-966c-6dc00b4a921b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:cc:7d:b3:4b:d2:61:72:58:78:44:ca:79:27:1f:a9:08:06:
         ee:a3:c9:13:5a:67:69:b9:9e:2f:b8:39:25:f7:96:8c:5f:ee:
         b0:0b:00:53:3a:35:62:9b:c9:f8:63:36:87:07:d6:b7:7f:dd:
         2c:d3:eb:46:66:72:0a:e8:e2:3d:35:8f:9c:d1:53:4d:f0:e5:
         f4:41:6f:5d:04:c9:f2:bb:7f:8c:aa:da:fd:69:51:26:49:65:
         34:4e:a6:72:c8:8b:75:eb:40:1f:a1:a4:0e:20:ad:2a:91:4a:
         72:d0:12:c6:f1:a4:73:ab:0d:42:65:93:aa:2d:ea:fb:12:74:
         a5:86:bf:65:26:c3:06:19:01:bf:55:06:e1:c2:0b:42:73:95:
         f6:d4:02:43:04:65:9e:a4:0e:9f:1c:5c:92:55:df:ec:10:5c:
         51:96:19:40:6c:91:67:a0:e3:e9:22:d5:93:4e:2e:4e:9f:39:
         d0:0c:30:e1:de:1a:7c:2f:72:c8:18:07:73:7a:80:8c:9e:87:
         ea:30:03:8d:eb:0f:77:58:37:32:20:b8:49:d2:e1:3d:0f:9c:
         07:5e:62:49:7b:39:58:1d:d3:e5:41:42:2c:db:d6:bd:4a:85:
         c0:2d:c5:bf:2e:d2:cc:86:15:c7:d4:75:12:18:71:13:88:79:
         35:1a:91:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----