Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6886e141-423a-3883-8d9a-6e966ea94f95.roa
File:                     6886e141-423a-3883-8d9a-6e966ea94f95.roa (raw, json)
Hash identifier:          AS4xCbIKlHPQanlgYfhrj3l2QI26BZG1riUtqOqYLLU=
Subject key identifier:   4D:3B:6E:B4:1B:7A:63:C5:87:78:84:44:7D:B7:01:CA:EB:25:76:E8
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583DF686789A3731E8E8B0615660
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6886e141-423a-3883-8d9a-6e966ea94f95.roa
Signing time:             Wed 18 May 2022 12:00:00 +0000
ROA not before:           Wed 18 May 2022 12:00:00 +0000
ROA not after:            Sat 21 May 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f6:86:78:9a:37:31:e8:e8:b0:61:56:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May 18 12:00:00 2022 GMT
            Not After : May 21 04:00:00 2022 GMT
        Subject: CN=82e8a895-a44b-447b-8fc0-10eab28ecc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:27:f5:70:76:e2:db:db:bd:10:03:4c:79:95:
                    35:a8:68:d9:8c:eb:07:3e:69:5d:c2:ba:ea:6e:59:
                    f3:68:58:de:b8:fb:0b:00:40:cf:45:41:9e:56:d3:
                    24:3d:08:9e:96:a3:42:3f:98:5a:10:82:f3:23:22:
                    48:aa:ec:87:bb:b0:84:06:53:db:ab:b7:db:1f:89:
                    a3:b9:d8:7f:f1:d3:9d:1f:9a:09:29:1c:ef:05:58:
                    5f:83:e6:bd:7f:6e:fa:6b:c4:9e:3b:1f:45:30:8c:
                    40:30:c6:cc:bd:0c:cd:fc:4c:03:90:34:10:59:c9:
                    dc:4a:f1:03:02:99:4d:4a:9d:2d:f7:66:00:5a:02:
                    1c:18:db:90:86:18:e2:65:0d:20:2a:13:f2:66:d5:
                    d9:bd:3b:8d:fa:a2:cd:4a:8c:37:b8:8d:5b:18:b2:
                    ec:24:ff:7e:15:e2:f8:70:a7:4a:a5:51:ff:5f:cc:
                    df:c0:5b:59:d8:ff:96:86:d7:82:65:46:30:f9:3b:
                    26:16:02:a6:e2:e2:97:46:f0:ca:73:01:a3:15:74:
                    3a:b4:31:92:15:10:4b:f4:71:f2:a8:25:30:00:05:
                    3b:e2:ae:22:c0:b8:91:8f:32:43:fe:0f:39:39:fb:
                    ea:58:7b:a9:c2:60:e5:91:b1:e6:8c:5d:8d:2e:ac:
                    74:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3B:6E:B4:1B:7A:63:C5:87:78:84:44:7D:B7:01:CA:EB:25:76:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6886e141-423a-3883-8d9a-6e966ea94f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:e0:f5:ff:24:6f:05:79:32:6a:5a:35:3f:1a:37:e2:b9:53:
         7d:fb:1f:5f:b4:96:92:cf:c0:ac:c2:03:f5:c0:74:4b:2f:87:
         56:82:ff:bb:f2:27:b6:22:07:41:1e:8d:45:94:02:a2:f8:cd:
         a4:31:f5:ae:48:e9:d9:83:a3:8b:5f:61:1e:44:18:20:62:cb:
         4e:16:dc:cf:da:3a:33:80:88:a3:d3:f3:16:c8:92:e2:6a:d7:
         d1:59:ae:c5:de:8b:4c:a6:46:35:d7:d3:79:20:02:c0:93:5d:
         bc:2e:f1:2b:84:fb:30:09:a0:99:5e:e8:74:f7:2b:f2:97:af:
         04:bb:86:8f:1a:51:26:11:5f:0f:5f:65:32:ac:02:89:34:47:
         b7:63:86:13:52:96:24:d8:fa:6f:09:fd:7e:24:ef:9e:6b:62:
         a7:e3:8c:a3:2f:33:13:2f:f4:ba:e3:c9:ce:d0:dc:d2:c5:86:
         0f:88:f0:78:f4:ee:a2:1a:82:6e:ed:29:bc:42:ba:a3:ce:1b:
         1e:fd:2c:02:0e:cd:c6:5c:9f:ce:f6:b2:e2:d2:e4:c0:2e:0f:
         ec:99:48:91:63:cc:a9:e1:09:20:18:38:4a:32:2b:37:70:a2:
         65:7e:01:32:58:f9:cb:3f:cb:34:21:65:24:1a:f1:82:d7:0e:
         54:27:d3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----