Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/436fd30a-4aaa-3bd6-a83c-b3618ae5db5c.roa
File:                     436fd30a-4aaa-3bd6-a83c-b3618ae5db5c.roa (raw, json)
Hash identifier:          hUxbeKkZtmKixli4hBMNKP/0SFWAY3GuK0D0//kDho4=
Subject key identifier:   62:41:8F:66:5F:5E:2B:C7:5F:16:3C:97:7B:F0:1E:47:71:0A:61:B6
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D552111C5BB1A70518120A0D0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/436fd30a-4aaa-3bd6-a83c-b3618ae5db5c.roa
Signing time:             Tue 22 Mar 2022 04:00:00 +0000
ROA not before:           Tue 22 Mar 2022 04:00:00 +0000
ROA not after:            Thu 24 Mar 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:21:11:c5:bb:1a:70:51:81:20:a0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar 22 04:00:00 2022 GMT
            Not After : Mar 24 04:00:00 2022 GMT
        Subject: CN=4ca10fc2-dc68-41e6-a318-3300c37f1ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:5e:f6:0e:3f:98:a5:a5:05:41:e4:c8:34:
                    43:b4:39:f7:06:b1:72:12:91:3d:d4:d3:98:aa:34:
                    ae:43:af:29:57:3f:15:8b:31:ce:20:24:42:64:b0:
                    9b:c3:48:9d:24:61:78:95:68:46:53:c5:40:21:af:
                    bf:f8:6c:a1:79:19:4a:a7:93:cc:69:5e:e5:cd:0f:
                    b0:f0:d1:98:3a:94:6c:f8:b0:87:3b:11:9d:b4:df:
                    ab:94:fe:94:96:92:ca:cc:b6:1b:0c:f4:0b:0c:b0:
                    3c:76:bf:69:84:74:d0:c7:60:88:45:22:b1:e7:4f:
                    14:43:e1:c3:89:e8:ec:e6:77:0d:92:78:b9:82:3d:
                    a8:fd:94:d1:52:8b:10:7b:4b:ac:8b:71:ca:88:6b:
                    40:ba:6e:29:8e:d8:54:a6:19:1f:94:ce:62:e4:60:
                    6d:31:85:78:e4:bc:7f:12:1f:8d:ef:40:ff:18:a1:
                    6a:59:af:45:f3:e2:67:3c:03:13:60:2c:22:f3:17:
                    9d:15:23:a7:e4:1c:48:87:5a:13:ed:8b:ed:0e:05:
                    e9:40:fa:58:87:d4:ca:72:55:15:72:ad:95:a7:78:
                    6e:3c:83:89:65:2c:b2:91:e3:c4:b8:99:3f:c2:92:
                    27:dc:6f:b7:04:af:f4:4c:07:12:36:44:a9:d7:ff:
                    30:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:41:8F:66:5F:5E:2B:C7:5F:16:3C:97:7B:F0:1E:47:71:0A:61:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/436fd30a-4aaa-3bd6-a83c-b3618ae5db5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:d9:57:64:2b:1e:b2:30:31:ad:25:04:9b:93:b5:41:c1:c9:
         7a:dd:0e:b3:2f:94:72:01:d8:b1:e1:76:85:6d:f2:e6:58:8a:
         46:17:bc:64:7e:6f:06:92:e1:76:65:0a:80:ff:0c:c2:db:e9:
         20:8f:14:7c:00:64:0b:62:3f:20:2e:bd:bc:55:7d:9b:22:11:
         a7:81:f9:b2:cc:a0:b4:1d:04:57:60:25:18:53:e4:7e:ac:07:
         7b:60:f9:8a:99:fa:ae:39:d7:86:44:47:da:d3:ae:4b:2e:da:
         58:3c:85:b0:cf:82:91:bf:eb:cc:3e:0d:b8:32:54:50:8a:3f:
         44:aa:6d:c4:71:ef:d7:d9:19:29:52:85:df:85:eb:9c:c5:d3:
         1f:40:a5:05:f6:5a:02:4e:f0:cc:24:90:d8:f8:6f:b0:ba:d4:
         20:8c:b5:33:a7:ee:b3:05:c4:29:8c:d6:5d:ba:39:35:24:78:
         dc:0d:9a:f2:4b:96:bb:ce:5d:c0:4c:b5:0b:aa:e3:f5:a8:df:
         32:8e:5c:4e:2e:e3:53:25:3d:6a:5c:cb:c2:a7:8d:31:1a:a1:
         5d:19:7d:54:8a:3b:87:a9:4e:97:ca:42:e8:04:5b:f2:41:98:
         0a:7b:9c:7f:cc:b0:2f:2e:16:5e:b8:e8:01:f2:fb:0d:e1:36:
         f3:5b:12:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----