Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/384ad60b-136f-3681-9f22-cf099884c220.roa
File:                     384ad60b-136f-3681-9f22-cf099884c220.roa (raw, json)
Hash identifier:          WuOFXUeUA14T3KWRCFrFQ1VtA9LztJ1xaY0n5Wf6rDE=
Subject key identifier:   DE:2F:6F:FB:05:DE:27:39:3A:65:7F:CF:41:05:42:EC:96:8D:4E:E1
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CE2AD99C66E651E091320A2C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/384ad60b-136f-3681-9f22-cf099884c220.roa
Signing time:             Wed 09 Feb 2022 05:00:00 +0000
ROA not before:           Wed 09 Feb 2022 05:00:00 +0000
ROA not after:            Fri 11 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e2:ad:99:c6:6e:65:1e:09:13:20:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb  9 05:00:00 2022 GMT
            Not After : Feb 11 05:00:00 2022 GMT
        Subject: CN=87988293-74af-4a21-8e0f-ee8913827b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:07:1c:dd:b5:29:78:a4:b2:88:76:b6:a9:
                    fa:0d:c6:9e:32:2a:0a:0f:ba:02:f8:0d:82:33:3c:
                    ad:e5:82:3d:08:80:e4:71:ce:8a:0b:21:28:8b:b2:
                    96:56:db:f3:55:84:78:d8:66:8b:f9:77:72:07:5d:
                    cd:3e:b1:ec:e5:cd:cb:1e:30:86:70:2d:08:f5:2a:
                    2d:9d:9b:35:ac:14:e5:80:47:41:32:e1:06:42:7b:
                    cf:59:f5:be:b3:dd:c7:b3:3b:eb:b7:5b:80:09:ff:
                    fc:e2:a2:b5:5e:72:d6:b3:11:ca:5a:3c:7d:c8:05:
                    bd:00:4e:e2:a8:b7:9a:6e:46:59:36:d1:8c:44:4f:
                    d2:e1:19:51:63:71:6d:6d:7b:fb:7e:c0:d0:0e:28:
                    2d:03:f4:e1:9b:ac:be:5d:1e:d4:88:02:5a:f0:e7:
                    86:ad:be:5e:7c:4f:d3:7f:c7:e0:75:a1:44:54:cd:
                    df:88:52:50:30:0c:cf:21:78:be:f2:87:58:95:76:
                    36:b2:c6:e0:48:41:22:f5:dd:6a:cd:2d:83:81:22:
                    46:18:52:c9:4a:d3:c0:40:f3:da:c7:19:86:bd:03:
                    11:6d:bf:8b:2b:9b:1e:04:8c:02:bf:b0:a5:42:ef:
                    5a:ea:ff:18:b4:47:8b:71:cc:3d:2e:8e:0e:13:a6:
                    fe:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2F:6F:FB:05:DE:27:39:3A:65:7F:CF:41:05:42:EC:96:8D:4E:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/384ad60b-136f-3681-9f22-cf099884c220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:82:d9:1e:d3:80:36:40:25:df:22:0d:81:ad:f3:bb:79:b4:
         08:bc:ba:f6:72:64:da:84:53:ac:d5:bc:55:f2:ff:78:50:ae:
         80:bd:fa:ef:ea:84:4e:c0:a0:7b:7b:50:49:13:e2:ab:f0:0f:
         24:52:99:cb:3b:8f:3d:5a:10:d1:b8:1d:1c:b1:ee:66:27:33:
         fb:cc:d7:95:ce:ec:d8:9a:c9:f5:32:c5:5f:0c:dc:4b:90:c6:
         43:50:12:b8:2c:4f:95:89:da:0f:96:3e:6f:51:df:6d:a2:dd:
         28:9d:7d:70:62:13:6d:6f:98:83:4f:33:78:05:26:e1:b4:d5:
         ef:0c:0b:ea:a0:09:b8:41:19:81:7e:67:35:70:8e:ac:fb:54:
         68:69:d2:32:47:d2:b6:34:85:65:ba:db:a9:44:89:80:51:e8:
         db:d9:23:5c:0d:f7:f5:bb:80:a4:0e:28:3a:39:bf:c9:4e:bb:
         c6:7a:e3:b1:f9:fe:65:29:1d:13:be:f7:cc:44:ad:73:71:57:
         52:78:85:c4:a2:b1:c2:a3:bd:7a:6d:fd:4d:9c:7a:65:02:db:
         53:11:3b:e2:2d:48:5c:4e:5b:02:5f:dd:cb:83:cc:4e:f4:96:
         fc:2c:a3:20:fe:80:6f:7a:e6:78:59:22:c8:bc:24:86:f4:c1:
         6e:ca:8b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----