Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5ea30468-cd15-3ae3-920d-6b9683adc305.roa
File:                     5ea30468-cd15-3ae3-920d-6b9683adc305.roa (raw, json)
Hash identifier:          TQqMsjuXCWPsYgjmdGn2VJX7U55BAorvxoto6vaeP3g=
Subject key identifier:   67:7B:16:6D:C8:7B:22:6E:5C:1A:44:14:34:FD:0D:4C:34:53:E4:08
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F432858400AF1E570BDF9527D94B37800
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5ea30468-cd15-3ae3-920d-6b9683adc305.roa
Signing time:             Fri 25 Nov 2022 12:00:00 +0000
ROA not before:           Fri 25 Nov 2022 12:00:00 +0000
ROA not after:            Mon 28 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:391::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:0a:f1:e5:70:bd:f9:52:7d:94:b3:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 25 12:00:00 2022 GMT
            Not After : Nov 28 05:00:00 2022 GMT
        Subject: CN=d0073dd7-f72f-4621-92ad-519f71024f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:03:84:54:4f:a9:ce:95:35:4b:b4:7d:c9:c6:
                    af:8d:01:85:1e:fc:f1:95:d4:e3:9e:5e:5c:6b:50:
                    b5:b4:7a:33:70:b4:2e:83:2f:d1:dc:1b:5d:aa:38:
                    c3:fb:52:56:fc:b5:34:7a:e1:89:bf:de:ae:8d:25:
                    25:93:e8:ab:0c:f8:17:02:10:d0:f3:eb:c2:0c:94:
                    0b:5f:3b:6f:78:f4:1e:df:2c:2b:77:0a:78:46:d0:
                    d9:b6:fc:b8:1c:56:8d:3c:bf:ed:79:84:2a:a4:98:
                    03:9e:38:45:8d:a9:56:0b:b3:7b:34:57:8f:8c:99:
                    a3:b0:be:7e:8d:16:e2:1c:ef:82:cd:28:2f:34:2c:
                    6d:bf:f0:2a:93:7b:60:e1:7b:67:87:31:92:dd:d5:
                    3e:b7:85:3f:29:95:59:aa:2a:c9:8b:d7:b9:1a:ec:
                    0b:89:dd:86:5a:7e:89:f3:b6:6d:9d:11:60:a2:94:
                    e9:f3:ef:f1:cb:82:ab:20:c7:07:88:f8:b7:12:65:
                    78:e5:3d:06:dc:e9:ee:e6:0c:92:41:7d:bd:6e:e3:
                    81:e4:0e:40:74:0a:49:a7:a5:e2:b6:d2:2a:33:f7:
                    1d:45:ef:c6:b1:e9:39:e0:30:2d:09:50:13:9e:31:
                    9c:53:de:ac:af:30:d8:ca:43:7a:da:a4:4a:95:30:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7B:16:6D:C8:7B:22:6E:5C:1A:44:14:34:FD:0D:4C:34:53:E4:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5ea30468-cd15-3ae3-920d-6b9683adc305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:b7:37:08:46:8d:bd:91:97:3c:33:ff:fc:66:69:42:53:95:
         45:0c:70:40:20:91:fb:60:b0:bf:65:db:fa:e3:d8:b0:33:f5:
         2a:66:ba:b5:4b:b4:b7:e5:05:9e:5e:cf:93:da:4e:7c:43:84:
         8e:b1:37:14:3d:96:54:27:e8:a8:96:6c:e6:fc:ef:f0:c3:23:
         9e:b5:3c:28:d5:cf:f2:74:8b:f4:56:fd:e9:d0:ce:de:85:66:
         18:af:38:89:93:94:f9:f8:4b:29:c3:5a:b4:29:f2:4f:08:9a:
         f0:f0:04:83:02:19:f5:5c:a3:f3:e4:2b:e2:03:c9:51:7d:20:
         63:74:00:b9:01:62:d3:38:bd:fd:9c:b8:7f:bb:61:41:7b:32:
         fd:97:61:70:60:69:da:fb:fb:f2:12:cd:af:7f:8e:cf:bf:d8:
         d6:5b:c3:ae:f8:c9:ff:ac:0f:31:dd:cf:72:f0:1d:c0:32:83:
         f7:16:de:10:7d:52:18:46:b4:8c:0b:32:14:16:6f:f0:76:fb:
         82:d3:10:fd:e2:cf:54:ee:1f:00:f0:c3:ed:33:62:d9:49:86:
         53:3a:81:fb:12:83:a6:38:bb:f2:f4:7c:82:9b:8d:62:f6:8e:
         46:24:cf:8c:18:52:cf:d9:8d:a1:08:57:29:5f:56:b4:e5:cf:
         be:1b:58:72
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEAK8eVwvflSfZSzeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMTEyNTEyMDAwMFoXDTIyMTEyODA1MDAwMFowLzEtMCsGA1UEAxMk
ZDAwNzNkZDctZjcyZi00NjIxLTkyYWQtNTE5ZjcxMDI0ZjdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowOEVE+pzpU1S7R9ycavjQGFHvzxldTjnl5c
a1C1tHozcLQugy/R3BtdqjjD+1JW/LU0euGJv96ujSUlk+irDPgXAhDQ8+vCDJQL
XztvePQe3ywrdwp4RtDZtvy4HFaNPL/teYQqpJgDnjhFjalWC7N7NFePjJmjsL5+
jRbiHO+CzSgvNCxtv/Aqk3tg4XtnhzGS3dU+t4U/KZVZqirJi9e5GuwLid2GWn6J
87ZtnRFgopTp8+/xy4KrIMcHiPi3EmV45T0G3Onu5gySQX29buOB5A5AdApJp6Xi
ttIqM/cdRe/Gsek54DAtCVATnjGcU96srzDYykN62qRKlTCHcwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGd7Fm3IeyJuXBpEFDT9DUw0U+QIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvNWVhMzA0NjgtY2QxNS0z
YWUzLTkyMGQtNmI5NjgzYWRjMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKu3NwhGjb2Rlzwz//xmaUJTlUUMcEAgkftgsL9l2/rj2LAz9Spm
urVLtLflBZ5ez5PaTnxDhI6xNxQ9llQn6KiWbOb87/DDI561PCjVz/J0i/RW/enQ
zt6FZhivOImTlPn4SynDWrQp8k8ImvDwBIMCGfVco/PkK+IDyVF9IGN0ALkBYtM4
vf2cuH+7YUF7Mv2XYXBgadr7+/ISza9/js+/2NZbw674yf+sDzHdz3LwHcAyg/cW
3hB9UhhGtIwLMhQWb/B2+4LTEP3iz1TuHwDww+0zYtlJhlM6gfsSg6Y4u/L0fIKb
jWL2jkYkz4wYUs/ZjaEIVylfVrTlz74bWHI=
-----END CERTIFICATE-----