Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/333b62ff-0c3e-312b-8bcf-c59747485a66.roa
File:                     333b62ff-0c3e-312b-8bcf-c59747485a66.roa (raw, json)
Hash identifier:          Rcf2+7PeEU+qJIYcuIYvOmO2LlfjidD4h8c5fUgkNGQ=
Subject key identifier:   D6:81:9E:E3:54:15:F0:5A:F7:79:DC:A7:8F:DD:04:71:42:1A:81:6B
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D447BFBD685510A2172A01A00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/333b62ff-0c3e-312b-8bcf-c59747485a66.roa
Signing time:             Wed 16 Mar 2022 04:00:00 +0000
ROA not before:           Wed 16 Mar 2022 04:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:44:7b:fb:d6:85:51:0a:21:72:a0:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar 16 04:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=c86ecc2a-fcec-4e28-b1d3-9c76528dba30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2a:3e:78:10:c0:23:3b:57:9f:5e:46:55:2a:
                    d1:b9:cd:de:2b:3c:82:90:c0:fb:b4:16:28:9d:2d:
                    b7:ed:da:d7:c6:04:a9:0d:d5:2d:87:f4:90:c4:92:
                    8e:cf:ac:18:78:19:82:a3:a7:2a:e5:b1:e1:d5:c5:
                    e1:8f:4b:72:09:6e:e0:5a:ae:b9:c5:5e:63:2c:d3:
                    aa:da:2b:c1:4d:a0:4e:56:fc:16:20:0c:74:b2:38:
                    af:7e:0d:8b:03:e8:4c:12:b6:06:be:bf:1c:40:51:
                    97:35:3a:0a:5f:fa:71:c7:ad:79:c9:47:b9:b1:f3:
                    d8:ef:a2:35:d1:ff:97:a3:74:02:9a:a8:3a:2d:9f:
                    61:11:6e:b5:42:2a:86:b0:ac:ae:2c:f4:68:64:77:
                    26:fb:fb:cf:3b:7d:10:04:92:2e:60:48:80:a5:ce:
                    29:3b:c6:df:8a:c1:30:64:8f:6e:30:df:d5:38:5f:
                    e6:b1:b9:89:db:f0:67:00:c1:77:84:30:28:6a:df:
                    9e:c2:01:12:a7:c2:9c:41:6e:81:62:fd:41:11:f9:
                    53:38:0d:35:06:43:b7:64:fe:b1:cb:5c:1a:87:82:
                    f5:cc:3c:26:9b:32:68:9f:7b:75:f4:0f:2b:6d:11:
                    0b:4f:6b:ed:ea:9d:6e:b8:fa:51:6b:f4:e6:e3:b2:
                    49:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:81:9E:E3:54:15:F0:5A:F7:79:DC:A7:8F:DD:04:71:42:1A:81:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/333b62ff-0c3e-312b-8bcf-c59747485a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:8a:9e:5c:8d:94:c6:02:78:2f:56:38:e8:48:7f:5b:f1:0c:
         f4:d9:61:d7:bf:43:61:5f:0b:ad:6c:45:be:85:d4:43:3b:36:
         8c:de:d2:9c:7f:d0:5b:53:37:00:52:5a:c7:75:88:7e:14:df:
         7d:97:9e:9c:25:72:a6:7b:68:fd:37:33:1f:a0:61:23:b1:8d:
         bd:3b:d0:40:f7:54:fd:ea:b9:28:c8:5a:75:57:e7:23:3a:4e:
         1c:6e:7c:86:73:02:6a:db:b4:c5:52:ad:c9:b6:25:87:3b:cc:
         95:9f:89:eb:88:6c:0a:f4:34:0a:0d:8c:ab:da:b6:1d:52:d9:
         04:50:bf:02:47:8f:00:34:54:03:20:22:61:13:55:1d:8a:75:
         ef:da:e4:c9:08:7f:3b:7c:05:5d:3a:02:de:13:82:69:21:ff:
         b5:83:15:36:d1:b0:f8:c3:83:6d:61:85:50:b4:f4:56:2a:19:
         80:29:5a:e7:9e:e2:db:6f:44:91:12:6f:e6:f8:4c:a0:75:82:
         4d:98:03:2d:b2:02:e8:47:3a:ef:90:cf:ae:de:ee:27:66:f9:
         ff:d7:a1:81:0a:b4:c4:08:3b:45:99:64:66:0a:6d:10:c1:f2:
         df:08:2e:15:2e:89:14:fa:cd:3b:b7:f9:e6:9a:59:1c:8f:3a:
         8e:d5:4e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----