Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/44a42b8e-d87b-3859-8a97-c417adfcd9aa.roa
File:                     44a42b8e-d87b-3859-8a97-c417adfcd9aa.roa (raw, json)
Hash identifier:          gHPXFaH7vOhcwDjlYuLP8yPxxWcaecK+rydNt2LPTCY=
Subject key identifier:   F4:5B:CA:F7:AB:86:BC:00:7A:B7:BD:23:82:11:77:A3:10:C2:C6:E3
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F43285840282114F59002B6A8B12907C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/44a42b8e-d87b-3859-8a97-c417adfcd9aa.roa
Signing time:             Mon 05 Dec 2022 12:00:00 +0000
ROA not before:           Mon 05 Dec 2022 12:00:00 +0000
ROA not after:            Thu 08 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:28:21:14:f5:90:02:b6:a8:b1:29:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Dec  5 12:00:00 2022 GMT
            Not After : Dec  8 05:00:00 2022 GMT
        Subject: CN=b9d89d54-e51e-4a7d-9be8-f5074e33e6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:ef:8c:4d:76:06:9b:b7:77:e2:1e:7b:78:
                    7a:66:3b:bc:e2:37:b8:8a:dd:63:fe:70:e1:0a:49:
                    28:9f:b4:4a:b7:43:77:d0:35:45:26:4d:fa:e6:7f:
                    09:28:26:bb:05:56:d2:a4:a2:a6:fa:33:aa:45:96:
                    3b:68:63:1f:05:93:8b:5c:f2:94:4f:f8:0c:59:98:
                    fd:7c:79:4b:3d:5c:35:5f:8c:fe:af:38:20:5c:72:
                    ec:40:0a:83:50:31:60:32:af:5b:63:40:d9:9d:79:
                    46:e2:db:12:2b:3b:80:fa:22:44:00:ac:c4:b1:0a:
                    08:f8:06:54:4e:f2:4d:89:67:66:73:a5:e5:d9:3a:
                    c1:77:54:da:1a:d1:76:aa:66:f6:15:34:f0:2e:99:
                    f3:69:e9:39:22:3d:b0:01:5d:7b:15:29:d4:b9:d0:
                    8e:89:3d:02:4e:f0:c9:d6:94:75:4a:40:72:62:2f:
                    67:73:3e:bc:cd:fe:1a:8f:28:cc:a4:24:cb:85:66:
                    93:43:10:8c:72:9d:3c:de:8c:11:17:00:8d:fc:59:
                    77:a6:e0:cc:c1:41:41:ec:8e:33:a6:4a:da:44:be:
                    67:55:87:09:76:9b:84:b9:06:43:8b:23:e9:23:ec:
                    ce:f1:b2:28:9f:6d:f4:ce:3e:ac:49:09:3c:f3:0f:
                    ac:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5B:CA:F7:AB:86:BC:00:7A:B7:BD:23:82:11:77:A3:10:C2:C6:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/44a42b8e-d87b-3859-8a97-c417adfcd9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:d1:a5:d2:15:c6:f1:05:b8:c2:ba:34:4b:c6:f3:8b:18:74:
         02:b2:03:f4:9b:c3:70:14:df:67:66:9d:2f:02:ba:1b:b9:6d:
         b5:50:62:90:b4:4a:e7:47:d3:89:7f:9e:89:ac:f9:96:8a:d9:
         73:54:86:31:e4:02:85:0e:ea:39:76:03:a8:d9:29:ab:fc:88:
         df:47:1f:3e:10:38:a8:e6:25:9a:0b:25:f4:47:2d:89:a9:e0:
         97:c1:75:48:27:02:bd:ab:98:c1:88:97:c2:bd:15:b8:fa:eb:
         40:e1:9d:33:04:20:eb:61:35:da:d9:10:14:bc:b2:99:52:a2:
         b2:2c:7a:97:17:11:06:2a:da:8c:a4:70:a8:36:17:e3:80:72:
         9f:27:be:8f:ba:86:07:69:bd:f6:24:73:46:8e:06:06:b4:66:
         39:de:a4:fc:01:47:42:04:6e:c5:4e:28:e3:90:30:50:a7:1e:
         f3:94:62:60:3b:52:39:11:db:5d:b9:e3:36:2f:b0:57:02:b6:
         05:e9:6b:26:16:f8:cb:18:19:b9:ed:39:5d:a8:8b:61:f5:4a:
         64:06:20:15:67:bf:02:ec:ac:df:bf:42:1b:b9:b3:90:5c:ce:
         df:8c:4d:e3:49:92:74:db:17:b3:55:bf:48:88:1b:bd:48:63:
         95:8e:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----