Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5644be79-938c-3838-ada6-b2d66d2eff35.roa
File:                     5644be79-938c-3838-ada6-b2d66d2eff35.roa (raw, json)
Hash identifier:          g96dYrkUbz0XUySj+tphSS9fx+tIk6ScRROLJAJOUnY=
Subject key identifier:   BE:BC:06:ED:09:33:D9:E8:CE:CF:7B:2B:B0:E0:58:D6:1B:47:98:AC
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CC8815CDFB329877E99074EC0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5644be79-938c-3838-ada6-b2d66d2eff35.roa
Signing time:             Mon 31 Jan 2022 05:00:00 +0000
ROA not before:           Mon 31 Jan 2022 05:00:00 +0000
ROA not after:            Wed 02 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:c8:81:5c:df:b3:29:87:7e:99:07:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jan 31 05:00:00 2022 GMT
            Not After : Feb  2 05:00:00 2022 GMT
        Subject: CN=67fcad5c-84dd-4ce7-92fa-5502456d3a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0b:67:da:ef:68:f8:15:18:d1:06:78:4b:c6:
                    44:28:48:bc:5b:0b:f7:ac:e2:35:e8:88:90:0a:a8:
                    cc:9a:c6:66:d8:d9:64:d4:26:e9:73:d3:79:c8:c1:
                    da:97:25:e2:57:99:6c:be:51:d4:df:d3:08:17:41:
                    38:98:f3:83:ef:b3:bd:40:e2:4f:b8:58:c9:f9:15:
                    97:b0:a4:b0:eb:10:9d:28:d2:60:85:68:44:30:42:
                    47:bc:68:4b:d0:67:2e:d9:3a:e3:f2:ba:f7:62:2a:
                    b9:52:72:c4:ae:01:07:f1:9c:46:de:be:09:f3:ef:
                    f6:3c:6c:18:8b:20:e1:1e:09:04:75:e6:ee:c4:37:
                    65:58:f5:24:15:ff:8f:65:6b:db:da:62:78:74:05:
                    19:02:40:ab:9b:1b:a6:4d:86:78:3d:ff:f7:22:79:
                    26:1a:b9:b0:b5:ae:44:ed:ef:16:3c:94:9e:a4:7e:
                    95:f6:b1:01:72:38:44:d4:93:e5:24:be:3d:0c:cd:
                    29:08:07:a8:bb:58:23:07:d4:a5:2a:d2:0c:e0:ff:
                    b2:d8:d6:cf:06:df:90:4f:b1:d6:ab:9e:65:8d:40:
                    e3:fe:85:84:87:ca:8c:c8:72:54:24:f2:df:7c:01:
                    f4:b1:23:6f:99:dc:c0:ee:1b:37:e0:d0:64:73:f0:
                    37:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BC:06:ED:09:33:D9:E8:CE:CF:7B:2B:B0:E0:58:D6:1B:47:98:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5644be79-938c-3838-ada6-b2d66d2eff35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:55:aa:9b:33:02:60:d8:3c:84:c3:6b:00:4d:93:73:4c:1f:
         da:8d:bc:2c:20:a1:1e:5a:18:07:5f:35:95:1e:f8:f6:59:bf:
         21:9b:b0:12:77:16:36:91:e2:e2:f6:d3:c8:87:de:e4:ad:7d:
         c3:88:37:67:68:4d:9d:b1:da:c0:51:3e:44:37:bb:11:7b:5d:
         77:39:c3:dd:ad:26:1d:c9:87:ca:23:03:0a:02:f3:48:30:19:
         5c:b0:d8:a2:a4:b7:ba:cc:b0:1e:fb:58:4b:e5:84:ce:2d:dc:
         bb:40:3a:75:ef:76:59:34:10:8c:8b:0a:7b:65:a5:1b:cc:e1:
         ae:f9:6d:9a:4b:e9:26:e0:83:19:ec:16:fb:61:c7:59:1b:65:
         63:96:d8:c9:74:09:8d:25:d3:b0:84:55:0e:d3:7c:fd:f5:6b:
         e3:dc:c0:fc:5e:91:77:21:4d:40:d5:41:8f:21:00:dd:55:31:
         08:7c:85:61:9c:84:a3:14:4e:43:02:26:02:64:a6:ca:3b:91:
         ec:9e:ac:0e:18:83:f2:58:ba:50:03:5c:eb:4c:65:0a:87:ac:
         02:1e:73:67:d3:c0:ab:cd:57:4a:45:f3:7c:45:1f:1d:f0:07:
         02:c3:fc:25:6e:72:19:2c:ef:48:78:9a:cc:26:41:85:3b:51:
         e1:87:b2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----