Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6eb66f50-dab5-39a9-9b73-9956adf58dd5.roa
File:                     6eb66f50-dab5-39a9-9b73-9956adf58dd5.roa (raw, json)
Hash identifier:          wuuAktyMpA+1V/amTOce/sHSWAYGXdH2BSBvRVYD7XI=
Subject key identifier:   FF:61:79:97:CA:4F:66:59:48:A0:DE:34:6D:B1:4E:59:A9:54:F0:7A
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F8E289388AC1A2AD6ECF4D700
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6eb66f50-dab5-39a9-9b73-9956adf58dd5.roa
Signing time:             Tue 11 Oct 2022 12:00:00 +0000
ROA not before:           Tue 11 Oct 2022 12:00:00 +0000
ROA not after:            Fri 14 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8e:28:93:88:ac:1a:2a:d6:ec:f4:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 11 12:00:00 2022 GMT
            Not After : Oct 14 04:00:00 2022 GMT
        Subject: CN=35353767-8a53-4c1c-af66-dfc88024e2d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bf:6e:ce:b4:36:78:99:5d:5e:e6:e0:fd:e0:
                    af:af:de:8f:79:b7:0b:f9:2d:98:d8:7e:98:ce:de:
                    af:e7:de:9a:de:b0:0a:8f:17:1b:70:c1:7d:d6:c3:
                    61:e2:53:8f:50:9b:7a:05:21:51:96:82:a7:ad:c8:
                    73:9a:53:a3:29:b9:2e:97:04:31:64:d7:00:e6:94:
                    c6:65:34:13:30:06:db:9a:8a:33:b3:33:c9:41:c6:
                    97:8d:e1:ae:f3:13:30:3b:fc:a7:60:0e:2e:b8:bf:
                    52:f1:36:12:3f:b4:80:d2:95:9d:f9:f1:b8:53:a3:
                    60:3b:a2:ad:97:db:ec:da:b1:af:b3:d2:59:9f:0a:
                    d5:90:2a:02:5c:0d:3b:ec:e5:10:0f:00:c3:ed:8f:
                    bf:97:69:11:09:d7:68:b2:79:9d:4e:63:61:25:77:
                    2c:1d:ec:c6:7c:d7:ff:18:26:c1:39:fb:e0:57:a8:
                    87:10:51:c6:6b:16:eb:fb:8d:c8:93:ac:3f:ca:e9:
                    66:ef:c7:7f:52:81:c6:33:d6:6e:23:ac:f2:c6:b6:
                    c5:3d:cd:db:12:24:63:f6:34:52:99:00:76:46:71:
                    7e:0d:c5:f6:62:17:8b:56:43:4e:04:99:51:ef:27:
                    22:06:34:2a:54:9f:88:5f:f5:9a:ae:bd:d5:bc:d5:
                    bd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:61:79:97:CA:4F:66:59:48:A0:DE:34:6D:B1:4E:59:A9:54:F0:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6eb66f50-dab5-39a9-9b73-9956adf58dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:a8:77:0d:ce:cc:58:38:32:f2:a8:40:8a:33:c4:2a:38:6c:
         01:db:a4:21:39:6f:91:8d:87:75:a6:ad:55:61:75:fb:7c:d4:
         ec:6e:03:1d:10:f2:b0:ee:44:80:23:bd:98:e9:2a:1f:d8:5a:
         9a:df:67:ef:0e:6b:27:dd:3b:fb:7f:47:29:bc:56:e1:12:1d:
         d6:23:0b:a5:6c:2a:14:8d:b6:81:03:f1:15:ed:f4:7c:5c:12:
         07:b8:38:36:cc:ee:6c:7f:68:ac:64:3e:df:8b:46:f9:3d:7c:
         c2:d8:3f:35:b3:3e:e3:75:43:ac:c5:30:1c:75:aa:8f:fe:78:
         e6:30:76:9a:91:37:5a:7b:e4:95:3c:22:b3:60:76:4b:75:5c:
         e3:4a:75:9c:51:6e:bf:b5:8a:d2:de:cd:64:63:d6:ba:ef:73:
         76:e2:3e:e0:1e:54:dd:35:44:76:4c:1e:c9:bd:9f:a2:61:7f:
         cb:fd:03:93:60:92:e0:b4:e4:bc:ff:81:c8:70:ff:40:0d:08:
         12:3f:87:19:8a:89:89:95:98:ef:b2:96:68:84:f4:bb:1c:08:
         7f:3d:e3:2b:04:41:99:34:32:63:0c:a6:0d:be:d9:97:7a:11:
         b0:11:97:fb:b8:18:23:2f:a2:fc:88:aa:a9:ee:03:4f:45:98:
         50:ca:a5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----