Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/41f6c3a2-e4f8-37b4-9df6-25daa97ea33c.roa
File:                     41f6c3a2-e4f8-37b4-9df6-25daa97ea33c.roa (raw, json)
Hash identifier:          5ozXKQspPw3bXrSIoWmmLOQfGDQPdhea4sHP8zPmnL4=
Subject key identifier:   2C:2B:7A:8D:B2:D7:84:B8:A3:BC:C4:F5:45:36:99:8E:EB:B8:A9:71
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D3382D47E9DE11367666A4A40
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/41f6c3a2-e4f8-37b4-9df6-25daa97ea33c.roa
Signing time:             Thu 10 Mar 2022 05:00:00 +0000
ROA not before:           Thu 10 Mar 2022 05:00:00 +0000
ROA not after:            Sat 12 Mar 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:82:d4:7e:9d:e1:13:67:66:6a:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar 10 05:00:00 2022 GMT
            Not After : Mar 12 05:00:00 2022 GMT
        Subject: CN=9b2bb60c-86be-4e87-99a0-cf3b4f61f723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:bf:57:fc:2e:d8:fa:5f:41:f1:a4:a8:50:
                    3f:ef:29:b8:31:c8:5a:1f:a8:b0:16:e4:cb:07:36:
                    fd:a2:39:65:a2:09:51:de:1f:36:b2:e8:2e:75:43:
                    a2:00:16:f4:9c:4e:cc:fe:0b:10:54:52:95:a7:b2:
                    d1:4a:f1:d1:d9:ab:3a:59:ac:b3:96:b4:cb:3c:c6:
                    a6:5a:95:bc:84:42:86:85:b8:a0:4a:fe:15:c5:43:
                    6d:92:0d:cd:d0:51:a4:7d:b2:ad:b2:87:1f:cd:8a:
                    0e:ce:1a:80:67:57:29:37:db:19:83:ee:55:b4:8d:
                    ab:c6:48:c7:6a:0f:6a:62:ed:22:ec:be:34:37:b5:
                    1e:bd:ab:cb:98:52:1c:6d:56:f8:6e:c9:9c:97:29:
                    77:87:83:39:8e:c5:37:fd:18:00:a9:39:5c:34:9b:
                    bd:60:e3:85:ae:65:43:84:b7:bf:e9:61:61:fd:b0:
                    85:f1:4b:16:e4:9e:42:7f:fc:8e:69:22:1c:e7:b6:
                    99:1b:7f:81:1f:68:75:9d:92:37:5b:ba:05:c1:9d:
                    fe:e8:e0:08:e6:2f:70:6b:6b:b9:1d:56:3b:28:73:
                    c5:ff:de:2a:96:04:d5:89:8d:ac:e5:e6:f1:33:49:
                    c5:33:6d:e3:fd:04:df:2d:7d:25:32:d6:a1:22:58:
                    0c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2B:7A:8D:B2:D7:84:B8:A3:BC:C4:F5:45:36:99:8E:EB:B8:A9:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/41f6c3a2-e4f8-37b4-9df6-25daa97ea33c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c4:53:38:e3:e6:2a:d2:2a:76:86:b7:6d:e5:f7:bf:70:07:
         cc:03:32:e1:a9:84:d3:ce:a8:dd:2c:25:a3:7b:27:9f:46:81:
         d1:58:4e:80:fd:e3:da:97:78:a9:27:27:7d:14:82:ae:31:8c:
         1e:57:7d:31:0d:5f:c6:c5:7d:a6:93:e7:86:0c:b2:ed:20:c0:
         42:b3:eb:48:98:c1:2d:02:56:d6:1a:61:83:a6:e2:d3:1f:52:
         20:11:af:bb:fc:ce:91:dc:2d:78:77:80:38:ad:94:4e:67:cb:
         e7:07:db:9f:57:84:40:76:6a:11:b4:7d:a0:b6:c3:a1:38:1b:
         cf:d8:1b:92:46:98:79:81:e0:e0:b6:c0:28:cb:86:2a:3b:69:
         f6:8e:84:64:f5:ed:23:78:eb:61:8e:21:de:6d:7e:f1:5e:52:
         e2:30:f0:4c:8a:0d:30:19:cf:a6:10:8e:64:93:db:87:7c:4f:
         5c:01:bd:88:b5:04:a7:a2:61:ff:16:9b:32:7c:d0:57:4a:88:
         cc:b9:07:c0:c9:00:2a:cb:15:43:25:cf:37:ab:89:fb:a8:22:
         af:ec:30:c4:11:3c:d0:9b:88:2e:f1:33:a5:f7:a3:5a:44:09:
         8e:c2:1b:1a:6f:45:2d:1f:ad:6c:8d:c6:d2:94:58:cb:7b:ea:
         6d:5c:63:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----