Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/53e13978-583a-33ae-9c02-85c1b3a8afac.roa
File:                     53e13978-583a-33ae-9c02-85c1b3a8afac.roa (raw, json)
Hash identifier:          vxGaW2cpvDHPXiXtTzxFe9uauhxDRs8UAO1QKFa/z2k=
Subject key identifier:   64:28:85:75:DE:69:73:84:A3:7A:19:E1:8E:71:4B:FA:F1:0B:CB:B5
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E58F1923733EDE45585D1D440
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/53e13978-583a-33ae-9c02-85c1b3a8afac.roa
Signing time:             Wed 22 Jun 2022 12:00:00 +0000
ROA not before:           Wed 22 Jun 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:58:f1:92:37:33:ed:e4:55:85:d1:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jun 22 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=937ba276-86fe-4e3f-a9f9-f9ebf84e633c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8d:51:15:e5:f3:6c:8d:4c:92:62:56:24:32:
                    b9:d4:df:84:87:45:d1:c5:d0:d8:3e:e7:71:b0:3d:
                    88:18:21:ca:96:6e:8b:41:5a:2b:92:59:eb:3d:f5:
                    1e:bc:89:eb:b0:8d:28:f7:a5:23:b1:d8:50:34:6d:
                    28:d7:c5:0c:47:44:c6:4b:13:6d:29:a8:90:b8:72:
                    89:bf:10:95:08:5d:e2:e5:ec:f7:25:23:cd:e2:b4:
                    b1:e1:07:03:6b:f1:7e:83:eb:bb:d7:7d:47:1a:f6:
                    71:21:e7:34:06:7a:0d:46:bd:ab:c6:66:b3:31:03:
                    d2:13:76:cb:68:65:b2:2b:5f:3a:11:67:46:94:7d:
                    e1:3f:20:68:92:e0:2f:66:84:6b:21:10:4a:02:11:
                    8b:8b:ad:bc:fc:34:b4:13:f1:69:1c:ec:81:d0:cc:
                    fe:5d:a0:f6:64:f8:85:8d:20:ec:c6:a3:de:40:12:
                    56:cc:4d:3a:c6:fc:bd:6d:7a:f6:3a:d2:8b:2d:d0:
                    16:02:7d:5e:01:3c:bc:d3:a5:d5:fc:6a:f6:e3:78:
                    44:1b:93:c7:ef:93:d9:7d:be:8c:40:14:23:2d:fc:
                    de:b3:5f:43:6f:05:10:4a:c8:16:df:ac:22:16:fb:
                    13:d5:6a:18:4c:70:ad:2f:cf:4b:3a:d7:01:da:16:
                    77:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:28:85:75:DE:69:73:84:A3:7A:19:E1:8E:71:4B:FA:F1:0B:CB:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/53e13978-583a-33ae-9c02-85c1b3a8afac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:03:80:23:5d:0d:47:d9:80:c4:37:ef:fe:1f:d1:f5:f5:66:
         db:ff:b8:ec:d0:42:22:8a:82:31:4e:89:6a:04:00:b5:93:0e:
         bb:20:f2:99:5c:45:cf:b0:16:40:8a:76:4e:1d:9e:6d:9c:af:
         92:bc:83:99:12:1d:3f:e2:f8:7d:dd:79:5d:5c:08:5b:9c:e8:
         5b:1d:e0:d2:b0:fe:fd:dd:ac:81:98:b8:33:e6:57:02:79:01:
         8a:6f:1d:4f:10:c1:a3:12:17:76:c9:52:16:b0:79:3b:1b:6c:
         8d:cf:47:9f:54:6c:37:dc:d1:45:6f:3c:11:46:f3:90:d9:62:
         ab:8e:73:7e:21:01:35:e0:a7:6c:4b:1d:bb:ff:80:86:2e:c4:
         5d:c7:f1:df:13:b1:7e:3c:b9:ac:1c:42:02:ea:ae:0a:3c:a1:
         75:75:1b:e0:3d:8f:e0:68:87:95:78:64:05:1a:b8:4e:60:ad:
         fa:8d:0e:9b:34:68:9f:4a:be:15:73:b0:53:54:34:eb:f2:e7:
         b0:4e:5d:59:6b:be:bd:9c:6f:4a:95:65:44:f2:19:da:3e:b6:
         6a:67:90:3e:68:b7:dc:07:8d:f3:35:bb:e2:31:65:83:1c:87:
         4d:4d:97:bb:05:fc:fe:55:1a:77:b8:4c:f5:b5:cc:40:50:40:
         24:bf:01:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----