Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/22c2195e-4413-3ed6-9673-45bd7dc4ad7b.roa
File:                     22c2195e-4413-3ed6-9673-45bd7dc4ad7b.roa (raw, json)
Hash identifier:          BQp1o5p57cAEXiZJcjqokwGJDFESNKccnD5LzdHf/Uw=
Subject key identifier:   6F:79:FE:CE:8B:9E:54:91:DC:D1:F5:CF:52:E4:E7:99:E0:4D:93:B7
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F43285838EB2126230F7CBBDF190F8A80
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/22c2195e-4413-3ed6-9673-45bd7dc4ad7b.roa
Signing time:             Tue 05 Nov 2019 05:00:00 +0000
ROA not before:           Tue 05 Nov 2019 05:00:00 +0000
ROA not after:            Wed 17 May 2023 04:00:00 +0000
asID:                     16509
IP address blocks:        2605:9cc0:396::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:eb:21:26:23:0f:7c:bb:df:19:0f:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  5 05:00:00 2019 GMT
            Not After : May 17 04:00:00 2023 GMT
        Subject: CN=27414ef1-c99f-48b1-b87b-a28cea243056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ec:21:62:f3:1d:f8:99:86:a9:70:04:62:d1:
                    7b:63:cb:2d:5c:13:df:68:74:ba:38:05:cf:32:f7:
                    ea:a6:32:74:89:7b:bf:f0:c6:0f:d3:40:11:81:63:
                    24:65:5c:25:41:86:c0:fa:68:33:56:b0:a7:a6:57:
                    9d:0e:96:9b:ce:94:2d:3b:1d:2e:43:a0:42:80:f9:
                    c2:23:b3:84:8a:6d:ed:74:15:7c:b5:08:bf:0d:a1:
                    1d:1d:ae:24:2e:8c:82:a4:da:70:77:86:23:99:f5:
                    ea:2e:d0:32:9f:b1:45:94:02:9e:c7:5a:2c:ab:ee:
                    2c:5e:4a:7a:ad:a4:c0:4f:38:61:fb:91:a3:2c:b1:
                    3e:69:79:90:3f:be:1b:95:72:a1:9c:99:4d:97:c8:
                    07:87:6c:c6:58:ce:73:74:a7:e9:3c:b5:52:d3:44:
                    af:ca:87:f7:6b:bf:43:14:85:7d:eb:e2:b1:6d:39:
                    63:8e:1e:05:2e:9e:9d:66:9c:45:a3:f4:f0:66:3d:
                    e1:5f:79:b9:69:b8:46:cc:2e:63:8d:17:c7:0a:57:
                    a7:f5:ee:ad:b3:08:7b:73:ce:2d:4b:41:bc:93:77:
                    b6:bf:37:e7:ba:1c:73:44:31:2f:7d:38:64:dc:ea:
                    c3:e2:79:09:3a:eb:d2:28:b6:74:41:32:66:d9:00:
                    e5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:79:FE:CE:8B:9E:54:91:DC:D1:F5:CF:52:E4:E7:99:E0:4D:93:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/22c2195e-4413-3ed6-9673-45bd7dc4ad7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:396::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e0:01:f5:46:52:bb:f8:de:24:b9:c9:40:92:59:da:f9:e3:
         b8:55:18:64:b2:bb:09:88:f5:2c:5e:1e:7f:e8:97:fa:48:43:
         27:bf:69:50:bb:24:52:0d:46:5b:0c:03:11:8d:97:d9:57:10:
         4b:cd:3a:3a:88:06:e0:f1:07:b1:83:4a:5f:35:a3:b8:01:be:
         cf:fd:f7:68:cf:14:17:0a:f2:e4:ad:e3:b4:74:39:5f:3f:af:
         81:cd:e0:76:8e:3d:c7:eb:21:95:f2:c3:7f:76:3a:16:13:3a:
         fa:54:15:b6:06:15:dd:e0:ca:11:1e:bb:91:44:9c:0d:3f:18:
         db:c2:85:d7:d7:03:0a:a2:26:fc:16:a5:28:33:b8:a7:9b:34:
         39:7b:d4:31:03:58:04:09:f2:bf:61:c7:bd:28:73:58:ce:1f:
         8d:69:94:c4:84:72:19:f9:fb:7e:6f:80:03:95:5d:14:9a:10:
         57:29:19:f1:2f:ed:70:29:e0:4c:86:8f:74:7e:fb:c1:77:cf:
         53:0c:1d:45:b5:3c:37:01:fc:81:b0:05:a4:a2:d7:80:39:59:
         9d:4f:83:ec:c1:99:f6:1d:08:29:60:c1:e6:08:b1:3a:7f:72:
         77:46:57:46:64:91:88:8e:73:2e:bc:09:95:14:6e:cc:b7:3e:
         87:ed:11:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----