Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4e8f8ba3-6332-325a-9f0f-cc5e184ea9fa.roa
File:                     4e8f8ba3-6332-325a-9f0f-cc5e184ea9fa.roa (raw, json)
Hash identifier:          3TAWDpvRoM9QVn6EJqNojL20U03EETCmt5V7lLYmeJM=
Subject key identifier:   6A:97:1B:81:9C:B4:88:99:66:EE:24:BC:0C:DF:31:70:CA:BE:99:B5
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CCDFC1D8A4426F39D00B8FA40
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4e8f8ba3-6332-325a-9f0f-cc5e184ea9fa.roa
Signing time:             Wed 02 Feb 2022 05:00:00 +0000
ROA not before:           Wed 02 Feb 2022 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:cd:fc:1d:8a:44:26:f3:9d:00:b8:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb  2 05:00:00 2022 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=5df18e13-47ed-407a-b9c9-4a78022db5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d1:46:e4:a8:7e:1e:8a:c9:6a:a6:f9:10:69:
                    98:b5:f9:f5:de:33:85:65:dd:4b:42:72:f0:d2:43:
                    cc:39:93:1f:67:d5:58:89:a3:b6:f0:a9:b8:c7:23:
                    17:19:1e:cc:42:be:0b:6d:3b:2b:46:9f:94:04:18:
                    c1:ae:ce:b7:f6:61:9e:19:a7:51:99:99:24:b9:41:
                    50:ef:63:2a:45:d6:16:10:86:d8:45:58:ef:44:b7:
                    d7:58:5b:5c:46:f2:fd:a1:18:89:ce:a2:a0:7a:66:
                    d7:0d:4b:59:24:57:33:f6:91:8b:51:09:7c:81:03:
                    9e:3c:ce:27:5b:c3:0d:d7:34:17:9c:29:19:be:3c:
                    75:60:46:1f:e3:17:f5:c5:70:4b:9e:3e:0b:b2:43:
                    b7:3b:9e:32:58:6a:35:90:01:27:85:93:8c:b3:a0:
                    d0:ed:c2:95:99:4b:02:1b:82:70:13:a1:09:bc:23:
                    4e:d3:67:ee:46:e0:64:19:6b:50:22:2b:84:3e:eb:
                    77:d8:35:39:24:19:7d:86:a3:34:e1:e6:ce:1e:ab:
                    0d:d2:65:bb:4d:68:fa:4d:a3:b9:15:66:2b:ed:86:
                    40:d2:94:35:2a:e2:3d:8f:a4:39:7b:ee:c2:8e:ac:
                    93:df:51:6b:3b:4e:07:3e:9b:9e:43:a5:fd:26:0b:
                    e5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:97:1B:81:9C:B4:88:99:66:EE:24:BC:0C:DF:31:70:CA:BE:99:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4e8f8ba3-6332-325a-9f0f-cc5e184ea9fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c2:be:43:c8:68:53:b0:53:c6:ed:d7:a5:e2:c7:91:94:97:
         b7:e3:e7:88:24:2d:b4:8c:74:24:cf:bc:7a:ed:ac:86:db:86:
         15:b0:94:ec:5a:d7:07:a4:bb:3a:68:1e:a7:89:4c:db:01:84:
         1a:07:ee:98:59:f2:19:04:dc:cb:c7:60:a1:97:79:cf:eb:f3:
         12:9a:13:fb:64:d4:6f:4d:a8:ba:c8:45:c7:ef:a7:d2:9d:02:
         73:37:ae:1f:aa:23:83:6d:be:cc:d9:02:02:07:1a:41:e6:0d:
         43:a4:46:06:43:d5:c8:23:47:fc:16:d5:64:49:26:8a:4a:ee:
         66:01:d1:74:7e:57:e3:78:e0:8d:9f:4f:ba:36:0d:93:da:3a:
         d3:4f:de:9a:5f:11:16:ee:e6:1f:7e:01:9c:70:45:15:e5:27:
         3b:6f:fb:26:bf:db:d8:09:b1:20:93:d9:89:5a:b1:a4:38:14:
         7d:47:89:b9:e0:f0:b1:1e:93:ca:9a:68:8d:1e:ee:52:ee:12:
         1c:06:d0:a7:2e:2b:9e:83:cc:06:f0:bb:42:67:0e:2e:f5:9a:
         18:9f:71:a7:4d:2b:51:b4:15:90:0d:d2:65:4d:ef:e1:17:39:
         53:3c:fb:12:d3:b0:85:52:53:92:01:9d:fe:7c:28:42:23:2f:
         00:a8:0b:d3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDzN/B2KRCbznQC4+kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDIwMjA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NWRmMThlMTMtNDdlZC00MDdhLWI5YzktNGE3ODAyMmRiNWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztFG5Kh+HorJaqb5EGmYtfn13jOFZd1LQnLw
0kPMOZMfZ9VYiaO28Km4xyMXGR7MQr4LbTsrRp+UBBjBrs639mGeGadRmZkkuUFQ
72MqRdYWEIbYRVjvRLfXWFtcRvL9oRiJzqKgembXDUtZJFcz9pGLUQl8gQOePM4n
W8MN1zQXnCkZvjx1YEYf4xf1xXBLnj4LskO3O54yWGo1kAEnhZOMs6DQ7cKVmUsC
G4JwE6EJvCNO02fuRuBkGWtQIiuEPut32DU5JBl9hqM04ebOHqsN0mW7TWj6TaO5
FWYr7YZA0pQ1KuI9j6Q5e+7CjqyT31FrO04HPpueQ6X9JgvlHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGqXG4GctIiZZu4kvAzfMXDKvpm1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvNGU4ZjhiYTMtNjMzMi0z
MjVhLTlmMGYtY2M1ZTE4NGVhOWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEvCvkPIaFOwU8bt16Xix5GUl7fj54gkLbSMdCTPvHrtrIbbhhWw
lOxa1wekuzpoHqeJTNsBhBoH7phZ8hkE3MvHYKGXec/r8xKaE/tk1G9NqLrIRcfv
p9KdAnM3rh+qI4NtvszZAgIHGkHmDUOkRgZD1cgjR/wW1WRJJopK7mYB0XR+V+N4
4I2fT7o2DZPaOtNP3ppfERbu5h9+AZxwRRXlJztv+ya/29gJsSCT2YlasaQ4FH1H
ibng8LEek8qaaI0e7lLuEhwG0KcuK56DzAbwu0JnDi71mhifcadNK1G0FZAN0mVN
7+EXOVM8+xLTsIVSU5IBnf58KEIjLwCoC9M=
-----END CERTIFICATE-----