Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5e72a4ef-2314-3156-99ea-11bf49fd297d.roa
File:                     5e72a4ef-2314-3156-99ea-11bf49fd297d.roa (raw, json)
Hash identifier:          jaJ+2SiKBvNaAlD3EH7XELyijGThF9VB4XNGS/KYjpc=
Subject key identifier:   AF:9D:19:3D:AD:BB:5E:C6:3D:E7:09:3F:30:1A:FC:35:C8:E3:04:63
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F9E9B702AB62897DFBB418F00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5e72a4ef-2314-3156-99ea-11bf49fd297d.roa
Signing time:             Mon 17 Oct 2022 12:00:00 +0000
ROA not before:           Mon 17 Oct 2022 12:00:00 +0000
ROA not after:            Thu 20 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9e:9b:70:2a:b6:28:97:df:bb:41:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 17 12:00:00 2022 GMT
            Not After : Oct 20 04:00:00 2022 GMT
        Subject: CN=36a7efdd-ce5d-4262-8405-67412a1402da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:89:68:9d:10:a8:34:67:b7:c8:ba:91:8e:
                    5a:52:02:b6:8c:9a:f5:9e:ed:b3:04:b2:e2:0c:aa:
                    cf:62:d3:4c:54:23:2b:42:5b:2e:31:b7:bf:af:6a:
                    6f:ef:71:6b:21:bb:41:e5:bc:a7:97:41:03:cd:52:
                    f1:8c:81:97:a2:b8:24:0a:8d:b5:9a:3d:eb:2f:b9:
                    d4:e3:55:64:dc:19:3d:52:ff:a9:0f:80:cf:f4:fa:
                    77:fb:a8:e7:b8:f6:04:60:3d:f8:9b:6b:cf:f6:54:
                    89:96:f4:be:9b:4d:d9:87:2d:0f:f1:81:a3:6e:e1:
                    f7:c2:bb:e4:f8:3f:1a:8c:9e:65:5b:1c:da:81:f5:
                    ea:19:e2:b7:68:2e:0b:b0:fe:91:7b:d1:4a:a3:fa:
                    bc:fc:01:4e:91:fe:67:0e:7c:f2:79:c9:b9:04:04:
                    34:97:d1:a9:41:a8:32:3e:ed:d3:95:4d:6f:f9:2e:
                    2d:de:57:f9:f9:5b:c3:1f:d4:da:02:5f:91:43:ec:
                    4d:2c:83:90:f3:d5:54:8b:8d:87:27:da:ac:eb:3c:
                    67:25:35:fb:6a:f7:9d:43:75:2f:6f:a8:f4:fb:73:
                    29:af:79:c0:f1:ca:29:88:fc:92:17:a7:52:1a:61:
                    1c:f2:3f:4c:c9:52:dd:0a:dc:45:a5:3d:e2:db:26:
                    a1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9D:19:3D:AD:BB:5E:C6:3D:E7:09:3F:30:1A:FC:35:C8:E3:04:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5e72a4ef-2314-3156-99ea-11bf49fd297d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:02:96:e1:ee:79:4d:ba:f5:d0:72:c5:48:67:d1:43:b1:b3:
         06:ed:0c:39:8c:8b:96:ee:31:8f:c6:6c:2c:2e:a0:74:9d:6a:
         e3:3b:3b:14:c9:9c:c2:fd:71:24:1a:b4:99:d7:b6:5e:a7:b7:
         e3:37:6b:44:7b:20:f0:c5:13:fe:6b:97:49:36:da:c4:52:7e:
         78:a1:25:3e:3f:db:64:76:f2:f9:d1:cf:1e:73:d8:28:31:ec:
         38:98:78:66:f3:47:3b:fa:04:f9:09:e9:0f:e0:75:a8:63:f8:
         2b:0d:c8:c2:2d:21:a4:46:65:38:5e:8c:38:dd:d6:bd:45:1f:
         dd:0a:30:44:76:6b:4f:23:ca:35:4c:81:ba:44:3a:aa:d3:a3:
         02:06:05:4c:b0:ee:20:04:51:ba:b0:42:29:2f:79:9e:85:27:
         a0:ad:e0:c7:50:0d:17:ce:4d:55:60:39:e8:64:93:67:c7:92:
         18:51:83:e7:97:c6:9f:82:37:20:07:80:63:cc:96:44:ca:6d:
         e7:0a:4c:09:8f:a1:2d:d9:e0:b9:07:af:1e:5d:b6:10:e5:ab:
         7d:30:f0:f8:cf:f3:e6:b1:a6:74:4b:26:75:c9:d6:d5:4f:c9:
         f1:bb:4a:13:d3:94:4b:b9:1e:fc:3e:a8:60:72:ee:18:2e:a2:
         3d:18:63:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----