Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/32267880-30dd-36a1-bb3b-2193d5e5c853.roa
File:                     32267880-30dd-36a1-bb3b-2193d5e5c853.roa (raw, json)
Hash identifier:          lkX3wTT18XQnNXgQp9rCxZJ05smiHMBO4e7XbcifRuI=
Subject key identifier:   A3:48:DE:F8:72:1D:56:AD:61:3F:FA:80:FF:69:4C:37:67:74:AA:07
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D814BA47209408C09E09BFC00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/32267880-30dd-36a1-bb3b-2193d5e5c853.roa
Signing time:             Thu 07 Apr 2022 04:00:00 +0000
ROA not before:           Thu 07 Apr 2022 04:00:00 +0000
ROA not after:            Sat 09 Apr 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:81:4b:a4:72:09:40:8c:09:e0:9b:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Apr  7 04:00:00 2022 GMT
            Not After : Apr  9 04:00:00 2022 GMT
        Subject: CN=a96de48f-caa6-437a-a8a8-8a42c5b51a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:ba:6d:80:47:68:fe:da:62:da:bd:c9:a5:
                    49:c3:a1:a7:93:1c:01:f7:9d:41:a1:f8:11:ee:39:
                    34:8a:e9:b4:41:c7:cc:14:4a:23:f1:86:b1:c5:c5:
                    f6:f0:65:67:58:6e:2d:53:54:e0:0d:0b:38:ee:35:
                    c0:68:18:db:50:f0:8c:81:3b:ca:00:cc:aa:8f:6a:
                    e2:ba:13:58:28:9a:e0:25:df:c9:93:b6:fd:ee:e6:
                    0c:b6:b5:d0:71:c8:0a:60:1d:5a:7d:52:f5:69:fe:
                    35:b3:1e:1c:1d:b7:0a:1e:11:d6:52:f4:b8:88:6c:
                    19:0e:ee:ea:02:ea:ff:95:89:73:0f:11:df:74:dc:
                    39:77:0f:47:3c:ab:2b:91:1d:c1:8f:7e:6e:d7:ce:
                    52:a2:72:58:d3:ea:9d:88:eb:4d:0d:28:d7:b3:ab:
                    eb:c9:eb:a6:0d:74:4c:81:46:62:9a:b9:50:06:3b:
                    1f:fe:dc:96:37:aa:a9:7a:ab:b6:1d:69:b5:ed:61:
                    08:52:2b:75:2f:70:d3:32:94:ec:12:05:7c:e8:13:
                    ec:52:91:2c:6b:98:b0:1c:a2:4e:d1:a3:52:f1:48:
                    26:0a:d5:84:97:3f:27:19:35:e3:92:8b:24:22:a4:
                    46:99:23:70:87:b1:a0:49:fb:93:95:f6:27:f5:22:
                    d1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:48:DE:F8:72:1D:56:AD:61:3F:FA:80:FF:69:4C:37:67:74:AA:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/32267880-30dd-36a1-bb3b-2193d5e5c853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:7e:4f:e8:bc:d7:fe:c0:72:ef:63:85:43:e4:29:52:ab:04:
         ad:64:5d:42:5a:9c:89:46:24:16:c1:c0:69:02:93:2b:24:11:
         fa:4b:bf:16:43:38:46:5d:34:87:8c:b7:07:15:71:8b:0e:7b:
         84:25:44:23:d7:32:74:59:dc:b9:cc:65:11:04:8e:73:2f:d6:
         30:ad:93:b7:9e:a8:d7:e8:25:23:0a:38:ce:87:34:55:d7:e7:
         43:64:d9:ac:d4:08:c8:bd:95:42:1e:f9:33:2b:a7:da:83:b9:
         a8:0e:f9:99:1c:c5:cf:a7:0e:2e:a7:3a:f6:78:07:43:7a:6e:
         7d:3e:48:92:52:6a:f7:ab:a3:70:5f:30:ec:7a:e2:80:34:a7:
         7f:48:63:50:59:49:44:45:2d:92:b6:72:b3:c6:fb:65:2a:99:
         52:fd:2e:53:d8:99:1e:0e:10:74:1e:8b:04:5e:0a:1a:6a:f4:
         ea:11:6e:52:9d:a2:16:49:16:44:b0:f2:33:4e:36:3e:e6:71:
         c3:5c:31:2c:5f:ad:e2:ca:50:5b:4f:77:af:ba:75:95:bb:93:
         db:e7:4c:2a:53:a8:a3:1f:14:f4:20:c5:a5:0b:23:a0:3a:5a:
         48:24:39:87:c5:f7:a2:88:e8:46:be:70:45:d5:18:c6:1c:f9:
         53:3e:99:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----