Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/2e96f731-4025-3920-b243-30486b56e9ae.roa
File:                     2e96f731-4025-3920-b243-30486b56e9ae.roa (raw, json)
Hash identifier:          0ZWyh/e5Yj96Ftb3tc03CgI6bPwZTAptFtGe7m7H/Nc=
Subject key identifier:   EB:68:C2:4B:B9:58:C1:32:FB:26:78:A4:7E:89:1A:9B:6E:67:EC:96
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D7E80F11CDBBAE981AAB5BE00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/2e96f731-4025-3920-b243-30486b56e9ae.roa
Signing time:             Wed 06 Apr 2022 04:00:00 +0000
ROA not before:           Wed 06 Apr 2022 04:00:00 +0000
ROA not after:            Fri 08 Apr 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:7e:80:f1:1c:db:ba:e9:81:aa:b5:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Apr  6 04:00:00 2022 GMT
            Not After : Apr  8 04:00:00 2022 GMT
        Subject: CN=13ccab9d-77e1-4702-9934-72d709861cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5d:ac:2d:da:ac:48:d8:a4:b8:4d:b1:5e:94:
                    9d:59:ce:27:14:cd:46:10:8c:c8:81:3c:72:b4:5f:
                    95:d9:e2:a9:37:a6:a1:c9:4c:24:9c:00:15:b1:63:
                    1e:5c:cd:c8:9a:74:88:52:cb:5e:61:fc:16:04:08:
                    f7:b3:10:26:e5:6e:ce:8f:f5:f9:da:56:68:e7:ff:
                    c0:ac:95:64:93:25:5e:c9:22:04:db:2e:66:94:ed:
                    ef:8f:c3:f6:0c:de:5b:58:ea:d4:39:d5:ef:59:54:
                    52:15:d1:48:2c:28:c5:64:69:ec:59:86:79:58:7a:
                    db:95:f9:5d:62:f4:be:a6:42:df:03:e4:ac:58:0d:
                    dc:92:c1:d6:f6:75:90:82:ea:92:22:66:1f:48:18:
                    1b:fb:46:83:b4:1c:9d:39:fa:9e:4e:5c:c3:f7:fd:
                    48:9b:28:d3:6d:41:c3:77:61:f1:ac:ec:dd:0a:43:
                    78:f2:5a:52:b1:bb:5b:2e:ca:a2:f9:03:6a:1f:72:
                    9d:60:3f:f0:ad:69:d1:86:dd:23:ac:fa:80:40:c2:
                    91:b5:eb:be:e8:62:2f:27:c7:6f:cd:f9:d1:3b:3a:
                    6c:55:90:aa:a1:f8:e0:4b:a9:cc:4c:be:01:53:96:
                    90:06:4b:97:b5:de:a9:53:64:f6:c5:53:1f:64:23:
                    99:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:68:C2:4B:B9:58:C1:32:FB:26:78:A4:7E:89:1A:9B:6E:67:EC:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/2e96f731-4025-3920-b243-30486b56e9ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:22:41:2f:1a:6e:6f:f4:73:da:74:fd:66:28:66:19:de:bd:
         f3:c1:43:4b:25:c6:c7:2a:73:ec:71:28:d5:7e:2e:81:9b:07:
         ad:25:84:c6:af:1b:c4:ac:90:cf:11:93:3a:f5:36:87:98:ba:
         ba:97:49:4f:15:41:69:63:2e:3d:ee:11:05:39:67:2e:62:1e:
         78:f9:36:8b:57:58:79:a6:a8:c4:2c:c2:43:b9:4b:4c:ae:26:
         c8:ac:4a:92:a6:44:31:c5:95:da:00:95:6b:e2:4d:7e:09:0a:
         16:6c:37:02:88:df:e6:17:f9:be:f4:0a:32:d1:04:30:d9:d8:
         e0:36:f8:0f:53:76:86:2e:13:fc:39:3a:b0:1a:8b:7e:ba:ca:
         47:0d:eb:3c:a3:77:35:98:23:45:4b:b0:8d:74:ce:87:ef:5e:
         4d:89:3c:ca:61:3a:a3:37:8d:a5:d0:74:0c:62:fa:2c:4a:f8:
         4f:a7:01:e3:74:2a:78:71:7b:1a:5d:19:06:ef:75:3d:1c:0c:
         31:4e:21:ca:74:1d:39:bc:5a:c7:87:0a:64:15:03:52:f9:d3:
         de:c9:a7:a0:83:e9:a8:d9:0b:5f:ed:07:06:61:4a:c5:e5:b9:
         4d:9d:a1:b5:84:d1:84:0d:42:97:ce:5d:6b:59:4d:65:3e:e4:
         7f:e7:20:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----