Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3d9b7f7a-a1ef-385f-920c-f89fe4c25ec2.roa
File:                     3d9b7f7a-a1ef-385f-920c-f89fe4c25ec2.roa (raw, json)
Hash identifier:          kTjTVxv6XZj+lfxQrESawbn8/jH3udIhOLOGQOmpEso=
Subject key identifier:   A0:5D:1B:42:05:11:F3:2A:5F:23:7A:80:89:D6:D6:F2:51:4A:D9:D6
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CE87A2643C803D261678067E0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3d9b7f7a-a1ef-385f-920c-f89fe4c25ec2.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Sun 13 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e8:7a:26:43:c8:03:d2:61:67:80:67:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Feb 13 05:00:00 2022 GMT
        Subject: CN=1f1c6302-bf87-43d9-8811-691b178ab631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:66:a1:17:ab:4b:dd:b5:f2:ee:84:d3:82:75:
                    6b:cc:31:cf:a2:fb:2f:08:c9:e7:78:96:cf:12:4a:
                    52:14:9b:26:2d:e5:ec:8e:18:c3:4d:cc:77:e2:f5:
                    bf:95:d1:56:8f:9c:34:d9:46:4b:f6:a1:3e:88:34:
                    5d:b1:47:29:17:c1:d7:2c:12:0e:7a:bd:24:fc:f1:
                    d5:dd:83:b7:83:e8:40:bb:1d:bf:7d:22:67:07:90:
                    be:77:a4:d3:e7:00:22:14:2b:ae:b5:74:a8:09:91:
                    29:8a:4e:fc:fc:15:c5:56:90:a4:04:a0:1a:8c:ab:
                    6f:7a:9d:e1:75:77:3c:37:cf:85:de:e9:54:7c:d6:
                    76:d5:b4:db:36:4b:fc:68:3a:c0:f1:6c:81:50:3b:
                    13:38:b0:b5:f1:c9:fa:9a:65:ca:83:c2:6d:30:4a:
                    49:5d:9b:34:b5:65:f1:f7:ee:a3:aa:d2:f7:6c:d0:
                    be:22:2f:4f:18:9c:c1:cd:6d:c8:27:82:c3:f5:f7:
                    4e:eb:44:60:9f:d1:cd:eb:f9:9f:67:db:85:ba:e4:
                    6e:44:e2:ef:af:45:ce:2d:bd:53:42:89:94:3a:55:
                    6a:26:49:d5:d6:99:03:bd:b7:83:a7:70:4b:97:da:
                    a6:5b:56:33:a1:cd:10:72:a1:11:56:21:63:77:17:
                    8a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5D:1B:42:05:11:F3:2A:5F:23:7A:80:89:D6:D6:F2:51:4A:D9:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3d9b7f7a-a1ef-385f-920c-f89fe4c25ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:6c:97:c3:d5:38:94:53:33:42:68:43:e9:ab:1e:15:c8:79:
         72:bf:10:88:2b:35:84:b5:d2:b1:b9:62:16:73:bc:85:54:f5:
         89:9c:b7:9f:ef:fc:a3:d7:e3:cf:b3:b3:e2:92:85:2f:09:40:
         7b:47:a8:d9:22:0b:a7:c8:24:3e:42:56:9b:ab:12:1d:ac:1f:
         a7:6f:3c:09:1f:59:7f:79:9e:51:c3:93:f2:c1:84:ed:7f:3d:
         ee:15:88:ae:1a:e4:27:44:f2:9f:07:c8:7f:b6:af:4a:17:31:
         60:1f:fb:ad:63:6c:96:a4:30:84:2b:02:f7:26:35:e8:a9:79:
         bf:28:0a:82:51:61:3a:92:d1:67:cd:23:e4:41:15:40:22:85:
         44:34:8f:1e:be:6e:22:50:99:e4:ea:98:f5:f6:ee:f8:4c:2c:
         9a:67:50:9a:17:29:ca:cf:13:3d:10:92:ba:4b:1d:42:fd:97:
         4e:19:2a:41:6c:e3:98:3b:a5:c3:1e:a0:05:4f:e4:f1:99:1f:
         59:62:3e:05:61:77:0b:34:d1:af:27:76:8f:35:7e:dc:d2:6d:
         7a:b9:b7:1d:3a:53:1e:5c:a4:44:cd:60:e2:b6:98:ba:14:1d:
         a6:f4:7f:e6:c7:bc:e5:e2:3d:7a:0f:ca:20:7f:d4:a5:1a:44:
         c3:8a:f3:16
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDzoeiZDyAPSYWeAZ+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDIxMTA1MDAwMFoXDTIyMDIxMzA1MDAwMFowLzEtMCsGA1UEAxMk
MWYxYzYzMDItYmY4Ny00M2Q5LTg4MTEtNjkxYjE3OGFiNjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGahF6tL3bXy7oTTgnVrzDHPovsvCMnneJbP
EkpSFJsmLeXsjhjDTcx34vW/ldFWj5w02UZL9qE+iDRdsUcpF8HXLBIOer0k/PHV
3YO3g+hAux2/fSJnB5C+d6TT5wAiFCuutXSoCZEpik78/BXFVpCkBKAajKtvep3h
dXc8N8+F3ulUfNZ21bTbNkv8aDrA8WyBUDsTOLC18cn6mmXKg8JtMEpJXZs0tWXx
9+6jqtL3bNC+Ii9PGJzBzW3IJ4LD9fdO60Rgn9HN6/mfZ9uFuuRuROLvr0XOLb1T
QomUOlVqJknV1pkDvbeDp3BLl9qmW1Yzoc0QcqERViFjdxeKlwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKBdG0IFEfMqXyN6gInW1vJRStnWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvM2Q5YjdmN2EtYTFlZi0z
ODVmLTkyMGMtZjg5ZmU0YzI1ZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAApsl8PVOJRTM0JoQ+mrHhXIeXK/EIgrNYS10rG5YhZzvIVU9Ymc
t5/v/KPX48+zs+KShS8JQHtHqNkiC6fIJD5CVpurEh2sH6dvPAkfWX95nlHDk/LB
hO1/Pe4ViK4a5CdE8p8HyH+2r0oXMWAf+61jbJakMIQrAvcmNeipeb8oCoJRYTqS
0WfNI+RBFUAihUQ0jx6+biJQmeTqmPX27vhMLJpnUJoXKcrPEz0QkrpLHUL9l04Z
KkFs45g7pcMeoAVP5PGZH1liPgVhdws00a8ndo81ftzSbXq5tx06Ux5cpETNYOK2
mLoUHab0f+bHvOXiPXoPyiB/1KUaRMOK8xY=
-----END CERTIFICATE-----