Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/49a3677a-549c-3678-92e5-54d2b9b449e1.roa
File:                     49a3677a-549c-3678-92e5-54d2b9b449e1.roa (raw, json)
Hash identifier:          iayfd6frEdftqBqvJZZlZ1IvX2zXdsNEX/hYvNpA714=
Subject key identifier:   5B:D8:2C:AE:13:EB:72:CF:04:58:67:54:4D:E7:08:61:21:54:16:B8
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CF17FCEBA401A041615DED980
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/49a3677a-549c-3678-92e5-54d2b9b449e1.roa
Signing time:             Mon 14 Feb 2022 05:00:00 +0000
ROA not before:           Mon 14 Feb 2022 05:00:00 +0000
ROA not after:            Wed 16 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:f1:7f:ce:ba:40:1a:04:16:15:de:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb 14 05:00:00 2022 GMT
            Not After : Feb 16 05:00:00 2022 GMT
        Subject: CN=7bdc6a2e-38df-4137-b153-e629ce4d5513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:23:42:12:94:3d:a8:26:04:fd:86:c8:7b:98:
                    22:d8:cb:ce:54:f4:a1:24:62:0a:28:a9:62:3c:3d:
                    ca:5b:ac:8f:16:54:f8:24:be:27:cb:e3:88:ab:90:
                    7e:3d:80:ea:c2:d1:50:4c:fb:56:fe:35:d7:ad:70:
                    97:00:bc:63:2e:43:7b:80:e4:fe:30:8e:86:ae:6e:
                    07:97:9b:3e:10:9a:c6:0d:e6:ad:47:db:9f:65:70:
                    04:17:51:25:58:e7:34:90:f2:70:bf:48:38:cd:a8:
                    a2:94:58:ff:c9:02:ab:8b:26:e5:ac:0a:6a:03:99:
                    f2:71:a9:b4:f8:1c:5a:5b:e4:96:22:8e:80:94:ce:
                    ec:38:26:ca:83:52:ff:22:b8:7a:b9:c8:10:7a:65:
                    82:09:8e:86:b5:d2:38:f0:e8:7b:2e:f6:74:c2:b4:
                    da:62:df:30:b7:4e:ef:4a:5d:fb:8a:59:a4:ee:65:
                    f1:84:75:14:1b:b3:98:a8:de:c4:1f:26:7a:3d:5c:
                    9a:ee:84:50:d0:7f:26:6b:2a:14:45:18:c1:06:df:
                    f7:96:97:0a:50:f9:a3:e3:6f:72:da:ef:81:4a:d6:
                    a7:38:18:7b:0b:e6:fe:b1:7c:65:8f:b2:94:35:c5:
                    ed:f0:09:16:77:df:83:a2:7c:f4:61:14:42:c4:54:
                    9b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D8:2C:AE:13:EB:72:CF:04:58:67:54:4D:E7:08:61:21:54:16:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/49a3677a-549c-3678-92e5-54d2b9b449e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:df:71:bd:e5:74:0e:ce:45:f4:7e:8f:7b:ac:e9:76:2c:db:
         5c:91:03:91:63:ed:5f:02:cb:f0:6c:34:98:14:49:4a:2a:9a:
         c6:3b:99:74:4a:7b:de:a8:97:f8:bb:7e:35:04:c3:d3:92:20:
         f7:bc:aa:d5:7c:96:b5:c1:c3:80:1a:72:0b:71:b0:79:d2:59:
         ac:f3:c7:3b:b8:58:6d:03:3a:ac:f8:ff:b8:f6:e2:a8:e7:c4:
         af:4f:7b:76:15:c8:ff:6e:7f:90:00:7e:69:42:dd:a1:fb:8e:
         a2:44:44:7e:9b:f8:d7:e9:95:e4:80:0b:7f:20:ec:d3:59:4a:
         aa:6b:3d:1f:51:eb:ba:10:27:00:d4:68:c5:c8:31:5b:ba:8c:
         e0:5c:61:26:ec:d3:5b:ea:2b:89:57:b0:f1:93:0f:f3:a9:a2:
         90:aa:36:df:3c:fc:8f:02:36:13:ed:e3:26:9b:1c:d5:13:48:
         72:fd:75:c7:de:c4:26:07:15:84:4a:1a:76:b0:f9:dd:30:f0:
         62:f2:8b:46:00:c8:b9:6b:18:a0:1d:57:95:ab:d3:80:2e:08:
         a7:7d:fe:a3:f7:92:e2:ca:d4:e6:4f:48:15:6b:ab:13:f7:17:
         03:09:72:98:43:0a:95:f6:bb:0d:34:c5:c1:eb:26:81:02:3c:
         5f:b4:8a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----