Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/22955aca-b8c7-3d10-b5fa-e0b4fd56db3b.roa
File:                     22955aca-b8c7-3d10-b5fa-e0b4fd56db3b.roa (raw, json)
Hash identifier:          2lAvL3trMZSLA9/4XFAsCxcWyCn3be4q8oXWuRJyoqw=
Subject key identifier:   30:4B:4F:04:85:EB:FB:EE:E0:C8:43:82:BA:0F:EE:DD:A1:62:E4:C6
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FC8C469EFC4C5F7BDCF1F2B40
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/22955aca-b8c7-3d10-b5fa-e0b4fd56db3b.roa
Signing time:             Tue 01 Nov 2022 12:00:00 +0000
ROA not before:           Tue 01 Nov 2022 12:00:00 +0000
ROA not after:            Fri 04 Nov 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:391::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c8:c4:69:ef:c4:c5:f7:bd:cf:1f:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  1 12:00:00 2022 GMT
            Not After : Nov  4 04:00:00 2022 GMT
        Subject: CN=ce2f041f-b302-4c78-a048-82b243a7304b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f8:1a:eb:dd:0e:6f:fc:0f:6d:83:4b:76:ea:
                    7b:2d:f9:7f:16:e9:02:dc:60:f2:01:d4:57:41:ac:
                    17:88:91:c9:1c:04:51:4f:a1:dd:01:c0:ba:5c:da:
                    1a:a6:56:ef:f2:9c:b5:56:71:60:68:ef:e4:fe:9c:
                    91:39:92:2f:f9:2b:41:15:68:a5:3c:3f:62:fb:a4:
                    55:05:1f:97:88:7b:dd:5c:03:15:24:a3:4e:16:e9:
                    93:65:a7:ce:1c:76:e4:51:a1:8f:7c:00:95:62:ad:
                    ef:b4:a8:6d:35:be:67:52:9f:d3:2c:43:53:67:74:
                    b8:b8:37:f1:cc:75:fd:1e:2c:b9:ed:2b:70:a1:b5:
                    d2:c3:31:91:97:0b:1c:53:39:2e:31:e9:f9:d4:7e:
                    22:ca:c2:1d:2e:0f:61:05:b7:68:3a:4b:47:e4:30:
                    63:90:3a:82:47:65:88:d2:b3:6f:95:f9:43:a0:32:
                    b4:50:47:83:17:28:6e:3e:ae:ec:94:88:62:ec:ce:
                    06:ff:2b:4a:eb:f8:99:24:e0:7a:d1:82:92:8f:48:
                    76:a6:d9:b4:d9:24:b7:de:06:8a:2c:18:db:a7:c7:
                    df:27:d8:2b:d7:53:92:c5:b4:d2:45:ca:99:f8:bf:
                    a2:54:52:10:f9:e0:14:8d:d0:e6:c9:79:d4:60:be:
                    68:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4B:4F:04:85:EB:FB:EE:E0:C8:43:82:BA:0F:EE:DD:A1:62:E4:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/22955aca-b8c7-3d10-b5fa-e0b4fd56db3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:5b:8d:63:8f:f8:d1:88:7a:be:0f:60:6f:34:28:fc:ad:78:
         54:c2:a3:f0:14:f8:b3:1e:ee:33:33:2e:54:df:c6:27:5b:84:
         7a:50:9d:39:33:3d:71:e5:e7:69:aa:0e:70:b3:fe:9a:8b:0a:
         53:d1:cb:58:27:a8:e1:9d:61:ba:b1:2c:28:e9:68:e9:59:93:
         45:2f:63:f7:6b:c9:c4:2c:d6:77:66:7a:1d:20:f5:f1:17:3c:
         5f:01:42:8c:1d:46:5f:96:1f:fe:6d:7b:af:34:34:4c:75:82:
         a2:b1:69:74:fb:7e:3e:d1:9c:3e:ba:34:f2:79:40:dc:4f:db:
         1b:55:87:7d:34:2b:a0:ad:cc:62:78:04:6d:b3:41:a6:0d:44:
         ef:e5:f3:9d:80:b8:e5:e0:d3:fa:9b:56:38:b3:24:e4:15:db:
         b3:65:f4:20:27:4a:2d:22:3e:51:b4:a8:c5:b4:42:02:03:19:
         8c:fd:fc:7e:a6:f7:41:16:ee:ae:60:a7:0e:37:7e:7a:11:6e:
         38:12:08:d9:51:14:0a:92:79:14:08:cb:c8:fb:18:a9:cb:9d:
         a9:46:26:e8:b0:1d:f9:d3:46:a3:8a:8a:07:03:b2:b7:5e:d5:
         c7:20:56:ae:38:c1:80:28:19:c9:b6:89:a3:28:b5:88:a8:0c:
         31:eb:a9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----