Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/267872b3-eb3e-32ee-b464-325f9356a21a.roa
File:                     267872b3-eb3e-32ee-b464-325f9356a21a.roa (raw, json)
Hash identifier:          Y75jgAUniPHBp4GQOtbzfGQtEXzpaOuzucjScmabadY=
Subject key identifier:   5B:DB:09:19:31:33:B8:10:B3:04:F2:09:DA:C0:0F:68:94:0A:F4:E5
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F3BE8644F2E87376B8AB4C900
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/267872b3-eb3e-32ee-b464-325f9356a21a.roa
Signing time:             Mon 12 Sep 2022 12:00:00 +0000
ROA not before:           Mon 12 Sep 2022 12:00:00 +0000
ROA not after:            Thu 15 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3b:e8:64:4f:2e:87:37:6b:8a:b4:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep 12 12:00:00 2022 GMT
            Not After : Sep 15 04:00:00 2022 GMT
        Subject: CN=35bed5e9-7986-4226-8e86-73cc6230f9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:be:52:15:cc:a6:b8:bb:39:0b:7e:3f:82:1c:
                    5f:c0:bc:cc:47:0c:56:c0:e3:2a:1a:7a:46:f3:c3:
                    ce:30:aa:80:ad:3d:3c:9e:b9:b1:43:32:28:c2:0e:
                    21:6f:52:1e:db:45:37:f5:28:45:c4:38:71:a7:73:
                    a4:08:ba:63:06:7c:05:51:28:c5:40:28:0b:48:9a:
                    86:e0:9e:cf:39:f4:c9:45:d6:14:84:d9:53:6a:2b:
                    54:fd:41:0b:48:fa:04:0d:56:2a:e8:c5:cb:af:3d:
                    07:47:91:7a:17:da:d5:4a:74:13:03:f8:4e:08:11:
                    0d:b9:04:1e:f4:b5:f4:e5:00:34:3e:b6:68:30:78:
                    e1:07:07:5d:7c:9c:6e:25:ec:8c:9c:a0:de:83:b5:
                    f0:dc:de:9c:90:48:11:47:13:f4:4c:f6:46:21:21:
                    1e:81:a5:47:5a:5c:9d:46:6f:e8:31:6f:d4:a0:26:
                    36:75:55:ed:52:81:e5:5b:b2:a1:4b:ea:79:9a:28:
                    bc:fb:99:fc:a3:81:a2:6d:39:9e:1b:94:d3:94:af:
                    77:8d:7a:9d:75:e5:54:da:ca:7f:ca:71:bc:41:01:
                    9d:21:35:e2:22:37:63:45:9d:e6:76:69:c0:4e:f6:
                    9d:4b:2e:3d:c1:40:5b:09:0b:28:6f:02:51:66:a2:
                    d2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DB:09:19:31:33:B8:10:B3:04:F2:09:DA:C0:0F:68:94:0A:F4:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/267872b3-eb3e-32ee-b464-325f9356a21a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:6c:7f:5d:2a:52:0f:00:ef:55:5d:9b:a9:4b:3c:38:69:7a:
         d0:56:ec:67:5e:bb:dd:05:08:2a:4b:57:5a:4f:93:7e:e1:7c:
         ed:e5:a9:4c:61:8a:fd:cb:ff:9b:84:84:69:9b:c0:9a:cc:2f:
         2a:de:35:91:a4:5d:67:1b:5c:46:a0:4f:ec:7e:dd:7b:40:5e:
         45:82:0c:30:ae:0a:e8:82:ed:89:e4:24:07:27:74:91:4f:c8:
         65:89:11:5d:f5:e8:6a:a1:87:30:ef:58:79:29:fa:ee:68:ff:
         2d:e0:df:17:92:44:75:57:ff:65:e2:dd:3d:48:ca:15:a0:80:
         bc:c2:b8:7a:60:cf:54:c7:73:4c:a4:9a:d4:9a:2e:57:28:14:
         77:b9:3c:9f:c8:1d:88:de:00:02:94:53:46:7d:df:41:b6:e7:
         95:85:27:90:e8:d3:56:0d:5e:b3:0c:16:75:b0:d0:79:e5:37:
         f3:4d:27:fd:81:84:31:92:04:78:51:17:8f:1d:8c:f4:37:ec:
         cc:0f:d2:d0:6b:6a:e3:cf:9c:1d:d1:f2:21:73:43:87:01:b8:
         19:75:cb:47:6f:d8:ae:4e:9e:d4:7d:ef:da:f6:e9:97:f7:67:
         46:46:66:9d:e9:f9:06:7f:a1:d4:b5:aa:b0:32:8a:0a:c1:5f:
         38:0d:de:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----