Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1df883ef-f273-3f8f-b0f9-42e7b53e5f33.roa
File:                     1df883ef-f273-3f8f-b0f9-42e7b53e5f33.roa (raw, json)
Hash identifier:          qOMVFMMGusOAcqkjLA2DcnM2yG2uEGtPit+Nr6CCLcw=
Subject key identifier:   AD:C0:E5:FE:0D:29:50:FF:16:0F:B2:EF:F5:95:71:9B:12:89:FC:D9
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F43285838EB20F334F6E6C5BDE9FC2880
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1df883ef-f273-3f8f-b0f9-42e7b53e5f33.roa
Signing time:             Tue 05 Nov 2019 05:00:00 +0000
ROA not before:           Tue 05 Nov 2019 05:00:00 +0000
ROA not after:            Wed 17 May 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        2605:9cc0:396::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:eb:20:f3:34:f6:e6:c5:bd:e9:fc:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  5 05:00:00 2019 GMT
            Not After : May 17 04:00:00 2023 GMT
        Subject: CN=4a10f207-893e-430e-a2c1-62c3ad58ee28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:72:4a:a5:db:2a:c9:09:38:8f:b1:1a:c8:70:
                    e8:35:1a:6e:5f:5d:71:43:1d:2b:55:6f:21:82:8a:
                    85:58:8a:38:23:63:53:d0:74:8c:64:4d:7c:48:fc:
                    a3:2e:b0:38:59:6e:75:1f:1f:08:8d:5f:12:f3:4e:
                    ce:d6:70:92:39:be:ee:37:89:3c:af:c7:82:0d:98:
                    73:87:8c:f1:ba:61:f2:e6:4a:fb:59:d3:aa:bd:4e:
                    ca:0c:fc:6b:ae:35:b5:c4:7b:31:c1:6f:51:bd:56:
                    72:80:a1:54:6c:5d:4a:d2:c3:2d:87:17:72:47:7a:
                    5c:c6:22:07:13:53:01:72:19:6a:af:88:5b:d2:73:
                    f6:87:9e:d5:2d:a0:81:a6:b0:c4:b6:80:fa:91:0e:
                    01:a6:09:b5:c5:04:4d:8a:a6:ab:0d:8a:3a:10:42:
                    9f:e7:fa:43:b9:00:aa:ce:d4:bc:08:aa:42:8c:ac:
                    0d:12:eb:37:2e:b7:52:a6:82:44:7c:64:7c:cf:19:
                    d7:5f:c7:d0:bc:04:54:98:ef:08:c3:53:62:55:44:
                    6c:df:11:4e:23:19:24:1b:fa:8e:d9:1b:da:13:c2:
                    ba:64:a2:43:ba:04:ef:84:63:4d:cd:12:47:60:aa:
                    bc:f8:19:79:f2:04:a8:cb:39:38:6f:96:a6:f2:82:
                    35:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C0:E5:FE:0D:29:50:FF:16:0F:B2:EF:F5:95:71:9B:12:89:FC:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1df883ef-f273-3f8f-b0f9-42e7b53e5f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:396::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:07:ca:df:49:05:9f:9c:24:85:53:da:6e:03:ac:33:94:1d:
         f6:51:2a:79:10:ec:f5:d0:a8:3d:2d:c5:86:71:cc:71:73:54:
         bb:95:97:12:32:85:d4:4c:6e:40:a5:a7:75:7b:22:91:a9:0e:
         96:e0:5d:cf:c6:ef:29:15:72:5c:26:4a:72:95:bd:1a:fb:4c:
         83:ca:d5:ae:6a:f4:95:2f:09:ca:38:e5:f4:17:c2:c1:42:e0:
         be:70:61:e1:c1:eb:73:5f:ca:81:fb:10:e1:9e:60:3e:06:8f:
         d2:87:df:ba:de:bb:e0:a1:d3:a5:da:6b:0f:ef:8c:75:8e:54:
         3e:ea:a8:a7:8e:12:11:0a:92:29:59:08:4e:5b:5c:d5:b5:e0:
         d7:66:1b:b3:fc:51:31:8f:52:63:df:46:26:58:75:d9:ce:c8:
         bb:b1:1a:45:ec:e9:af:7a:04:cb:f8:8b:4f:71:45:33:79:46:
         10:42:a2:66:60:ee:58:d8:e8:d8:d0:83:b6:5b:bf:4e:32:1b:
         b2:25:ae:ff:3b:cd:48:88:ab:3a:23:0e:6a:eb:66:38:9d:39:
         9c:87:69:a4:29:09:df:dc:25:d5:ba:0a:5d:9c:89:b4:73:89:
         d9:45:00:66:4f:de:0e:e2:f1:15:35:2b:f2:c2:7e:cc:8e:b1:
         22:90:b3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----