Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6f974ef3-5142-320e-8c42-b6db5ce8ce76.roa
File:                     6f974ef3-5142-320e-8c42-b6db5ce8ce76.roa (raw, json)
Hash identifier:          T6XYl3vnpqJi14hhR6hGOK6MgrQ/E+FUiXvl0XS2zIA=
Subject key identifier:   6F:C3:68:06:CA:58:A2:EF:26:12:BF:DD:13:5B:F9:01:B2:A5:DA:20
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E5D4E8EEDD6D562978704A6C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6f974ef3-5142-320e-8c42-b6db5ce8ce76.roa
Signing time:             Fri 24 Jun 2022 12:00:00 +0000
ROA not before:           Fri 24 Jun 2022 12:00:00 +0000
ROA not after:            Mon 27 Jun 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:5d:4e:8e:ed:d6:d5:62:97:87:04:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jun 24 12:00:00 2022 GMT
            Not After : Jun 27 04:00:00 2022 GMT
        Subject: CN=fa7a5a1f-2fbe-4d48-9689-5ece8f44bf29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:11:da:10:97:5c:f9:49:52:a6:80:9a:68:0a:
                    03:4a:a4:ae:db:1f:e4:cf:17:75:10:e8:ef:b1:57:
                    58:10:23:e9:91:16:7f:91:79:a0:28:54:af:35:65:
                    22:98:73:0e:1f:c9:42:67:89:06:5e:a5:75:68:e0:
                    35:ef:b3:8a:eb:1b:c2:91:d9:21:0d:4c:8a:78:5a:
                    47:10:11:b6:86:a0:ff:25:ae:51:8c:c0:24:2b:2b:
                    fe:88:04:43:88:63:08:15:e3:e4:9f:3d:22:35:69:
                    8d:f0:75:02:db:ba:69:ac:74:bb:c7:73:15:6b:aa:
                    bb:90:30:eb:0e:a3:82:d4:3f:d8:b1:6c:3a:08:5f:
                    fb:b0:59:5f:38:9f:b6:d4:7f:35:32:44:c4:9b:47:
                    d7:f9:ab:d2:44:21:f6:6a:09:b1:2e:5d:dc:13:a1:
                    95:c5:3e:ff:b9:9d:f5:88:7e:71:1a:b1:95:17:6a:
                    24:20:5b:0a:6d:b4:f2:6e:c1:27:4d:da:73:22:26:
                    d6:da:1c:d3:1f:6f:d4:61:2f:3c:19:bd:da:7b:b2:
                    f3:a1:8c:85:54:57:13:de:15:ce:4d:c7:1f:fd:5d:
                    2e:c5:67:aa:38:a2:28:32:73:8c:26:fb:85:fd:8c:
                    00:27:2c:71:1b:44:a7:db:54:a3:4d:0f:ce:04:5d:
                    14:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C3:68:06:CA:58:A2:EF:26:12:BF:DD:13:5B:F9:01:B2:A5:DA:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6f974ef3-5142-320e-8c42-b6db5ce8ce76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:fd:30:da:bd:55:69:58:0a:57:87:8c:48:98:9b:01:99:5e:
         7d:90:85:a1:20:a6:6f:a2:c4:76:d1:a3:5e:d2:ad:ce:a2:dd:
         88:39:a9:7a:bb:3d:6f:dc:b2:05:e6:47:f2:37:b9:07:cf:9f:
         55:f8:1c:1d:3e:66:ab:08:43:3c:63:8c:7e:99:fc:c9:bb:4c:
         c9:b4:12:80:3f:6c:e7:29:50:82:29:fe:c7:c5:a1:d7:f7:3f:
         91:22:f2:33:54:22:61:eb:71:3a:85:57:f5:77:c7:6d:b4:a8:
         39:37:7c:f8:84:d3:b4:7f:71:a7:4f:b1:78:e6:ed:d1:ba:21:
         6b:d3:a7:bc:01:9b:ab:0e:62:df:bc:7c:a2:f8:34:63:35:07:
         4e:14:db:47:24:04:e1:ed:3d:8d:d8:c0:c4:ec:c0:31:ed:17:
         8c:bc:55:c2:87:14:29:79:6a:89:c9:ae:26:02:4e:73:bd:5c:
         39:22:9d:45:9b:d4:7e:c9:df:2c:84:5e:43:ed:f2:3e:6c:37:
         55:df:99:7d:55:10:eb:75:60:1f:87:ff:94:1c:d7:73:d9:2f:
         e9:0d:1b:cd:a0:23:13:8d:b7:fe:8b:58:c0:80:4f:03:5e:7d:
         ba:22:20:8c:de:8c:61:8e:41:be:07:9d:98:7f:34:9d:d3:79:
         76:7f:ee:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----