Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4c22f9ee-d784-3f1c-98e9-572047081d0a.roa
File:                     4c22f9ee-d784-3f1c-98e9-572047081d0a.roa (raw, json)
Hash identifier:          tfD8Aqw1RbMJt23G0nVCrbodcDqQ/OHIVPxSYU/AdtQ=
Subject key identifier:   BB:01:8A:64:8D:6E:BB:29:C9:93:23:07:D6:6A:7A:71:F4:E5:37:AD
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EBC9A98A05FFB46B33E037140
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4c22f9ee-d784-3f1c-98e9-572047081d0a.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Sun 31 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bc:9a:98:a0:5f:fb:46:b3:3e:03:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Jul 31 04:00:00 2022 GMT
        Subject: CN=0e464fd6-44b1-43c7-a27e-c4b107dea452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:80:74:c1:ed:d2:54:48:d9:3e:57:c4:f8:4a:
                    cd:6f:6d:f9:d8:7d:d2:37:6e:0c:5a:52:3f:07:40:
                    9b:66:f8:97:92:35:3a:17:7d:af:f5:04:1c:36:24:
                    12:5c:e3:ba:62:d8:66:f3:c7:40:df:5b:cc:73:21:
                    a1:d9:a3:93:db:6b:8f:a6:27:95:58:4f:fd:dd:00:
                    4d:4a:3b:5d:c0:07:3a:8a:7f:6e:d8:01:58:0e:8e:
                    5f:1e:8a:67:86:38:75:6e:82:09:2e:72:b6:e1:93:
                    6d:db:b2:10:46:3a:01:75:b6:e4:4f:3a:3f:b2:29:
                    8e:57:0e:8c:10:eb:9f:df:22:2a:81:e0:4c:cd:e9:
                    60:31:15:b5:41:f9:72:07:c5:77:8b:50:d5:3d:57:
                    ae:86:d0:3f:e0:11:25:e9:e8:1c:b9:03:2b:18:8b:
                    16:28:73:72:65:8a:bb:a4:6c:94:e6:fb:35:77:f3:
                    e0:b4:74:36:b9:68:bd:3a:71:d4:f3:81:ee:31:54:
                    08:2b:ec:39:20:68:49:30:c5:7e:f1:e0:5a:e4:00:
                    6f:16:10:7e:8c:61:54:95:1a:a9:72:d0:a6:5a:e5:
                    4b:6c:4d:b4:4f:3b:89:e0:e1:76:fe:fa:c8:23:27:
                    c4:8e:54:d1:8e:31:f7:9e:1f:c8:25:ae:ca:27:79:
                    c3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:01:8A:64:8D:6E:BB:29:C9:93:23:07:D6:6A:7A:71:F4:E5:37:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4c22f9ee-d784-3f1c-98e9-572047081d0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:eb:66:f5:f8:da:0f:95:d4:c5:5a:8e:fe:60:db:d1:48:12:
         96:3b:95:75:01:3b:78:46:c6:7e:37:d2:be:4a:f4:2a:c4:80:
         a2:80:3e:59:39:50:fd:5e:c0:a8:18:a1:52:74:4c:76:85:84:
         11:7d:94:a6:ba:7b:47:c9:5f:32:73:4f:cf:c0:59:51:e0:16:
         57:48:68:bc:16:6e:71:d0:d4:2d:c3:9c:05:3b:0d:12:1c:36:
         19:65:94:fb:e4:df:70:13:8f:f4:b8:56:8c:a9:9a:f4:81:31:
         f9:fe:74:2f:12:7a:3f:13:d2:09:4c:ec:d9:c2:58:3e:b0:8c:
         f6:00:fc:8a:99:f3:f3:31:45:1b:bc:c9:74:bb:0c:4d:b2:6d:
         25:07:73:95:4b:6f:ad:c7:28:e2:e5:4c:08:71:b1:fe:0a:3b:
         45:1d:2b:be:d8:cc:b5:ec:98:1e:03:49:06:6a:86:cd:80:c8:
         16:5b:b9:5a:1a:69:00:b2:5b:a0:31:11:6f:21:60:80:92:0e:
         6f:06:44:ad:d1:4d:fe:60:33:3e:0a:21:5b:8b:e3:1c:f8:43:
         d1:b0:43:b5:65:f0:f2:fa:36:6d:97:9f:0c:a1:8b:c6:11:5c:
         39:ae:ad:b0:cc:66:83:89:ae:c5:bb:64:75:31:ca:84:80:76:
         f8:28:4e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----