Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6f60ff29-78fb-35bd-bb3f-5ef852497064.roa
File:                     6f60ff29-78fb-35bd-bb3f-5ef852497064.roa (raw, json)
Hash identifier:          SbEh+FPh8cfEGDhajRuYoyEwsz76j+RVtqX/L9HAcXM=
Subject key identifier:   3B:EC:01:7D:D2:3E:98:E2:27:09:5A:5B:B4:33:A9:02:B9:0F:B7:74
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D369CEB43C65E87685E6FEE50
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6f60ff29-78fb-35bd-bb3f-5ef852497064.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Sun 13 Mar 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:36:9c:eb:43:c6:5e:87:68:5e:6f:ee:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Mar 13 05:00:00 2022 GMT
        Subject: CN=905e6fa7-6ba9-4297-9aa9-a2714efd0436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:19:0f:5b:32:a4:2c:8e:98:b2:8a:93:d9:27:
                    df:c2:c9:c4:59:82:7a:74:16:39:25:8a:95:2e:a7:
                    76:75:f1:bf:e3:06:12:fe:ea:9b:71:f7:09:61:b0:
                    9c:89:70:83:9c:d7:eb:5f:60:97:5b:b4:b5:dc:61:
                    a5:a2:82:02:fb:05:23:8c:22:58:15:2d:2f:63:45:
                    92:dc:04:79:d5:ac:56:19:1a:04:dc:3c:7c:0c:bb:
                    10:2d:81:c9:9f:01:91:23:5a:8c:9c:af:67:d8:b6:
                    8e:c5:45:8e:a7:11:b6:19:25:e8:fc:79:f6:29:34:
                    52:6a:7f:f0:85:dd:e2:47:8d:0e:0a:47:33:93:e0:
                    76:f5:d9:bf:8b:43:b8:30:1b:26:f4:17:e0:12:ae:
                    48:c1:9b:76:4f:a2:84:61:9a:f8:75:8a:d5:8e:c7:
                    97:fb:eb:40:b2:af:60:fd:0b:40:36:7a:83:26:33:
                    95:83:20:ab:b5:97:2d:de:b6:ef:c5:77:03:c2:c1:
                    4c:d4:7a:91:81:67:d6:87:b5:1a:e0:a1:ac:9e:62:
                    da:99:50:20:56:59:32:1f:cf:00:9a:bf:b0:3d:f7:
                    b8:31:40:64:7f:72:81:21:a8:94:24:d2:b3:6d:fa:
                    02:75:e9:bd:05:b0:7b:f2:a5:d6:3c:63:da:21:aa:
                    78:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EC:01:7D:D2:3E:98:E2:27:09:5A:5B:B4:33:A9:02:B9:0F:B7:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6f60ff29-78fb-35bd-bb3f-5ef852497064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:9b:0b:25:e6:b0:1f:2a:83:6b:36:80:9e:80:80:5a:cc:f4:
         f2:89:8a:19:ba:e3:a4:eb:e4:c5:60:c0:bb:1a:e3:3a:7a:c4:
         03:fb:f5:1d:75:84:8d:cb:eb:91:d2:a3:1a:30:bd:fe:a8:b3:
         20:f0:45:ff:1d:09:b7:68:43:70:33:fa:57:e4:0d:3c:b1:c0:
         d1:f5:e1:a3:30:ea:1a:45:7f:ee:d0:eb:91:6f:35:ac:c5:03:
         e1:2e:bf:b1:36:ba:0e:97:63:66:2e:80:bd:c1:92:1e:f2:57:
         d7:ff:46:2c:4c:54:03:16:25:a1:f5:37:24:90:16:2e:c8:63:
         48:8c:79:d8:48:35:97:6e:1e:04:87:9d:dd:d0:2a:29:fa:a2:
         f0:95:cd:01:76:6f:1e:2e:07:d8:ef:4c:ba:f2:d9:38:72:58:
         c7:7f:f6:13:81:93:6f:0c:3d:cb:ec:89:ff:59:b2:c6:f7:8a:
         7c:32:3e:76:1a:a9:72:e0:e7:bd:47:99:82:46:97:7a:68:27:
         9b:6c:36:4b:a4:fd:67:ee:b4:99:3e:47:c1:41:08:e5:c0:6a:
         ef:75:2a:d6:6a:25:49:dd:bc:ff:6a:2e:c8:5c:1d:3a:1d:78:
         cd:8e:23:ce:7a:71:20:ab:d2:29:40:28:b0:1e:5b:f7:ec:e6:
         f6:f6:59:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----