Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6faa91f7-64cd-3b1d-8d21-c69ea065f995.roa
File:                     6faa91f7-64cd-3b1d-8d21-c69ea065f995.roa (raw, json)
Hash identifier:          Y3al8DscDlzpzogGJl67l4YO4g3iJFgkLpdq5CwVJac=
Subject key identifier:   75:C1:02:89:54:D8:DB:95:A1:58:BA:99:35:E2:B7:7A:DF:42:A9:97
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F5F40D4B36ADFE8F6D37F9500
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6faa91f7-64cd-3b1d-8d21-c69ea065f995.roa
Signing time:             Sat 24 Sep 2022 12:00:00 +0000
ROA not before:           Sat 24 Sep 2022 12:00:00 +0000
ROA not after:            Tue 27 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:391::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5f:40:d4:b3:6a:df:e8:f6:d3:7f:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep 24 12:00:00 2022 GMT
            Not After : Sep 27 04:00:00 2022 GMT
        Subject: CN=ecfc9a39-ad6f-4b61-98b4-d54a887c67ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:a5:24:5e:25:2b:fc:90:1a:93:48:96:53:
                    ba:83:89:fc:79:48:e0:b0:1f:a5:cd:f7:9b:4e:64:
                    90:30:69:bd:55:39:85:fb:dd:95:01:88:f8:ce:e1:
                    9b:db:49:16:44:3f:8d:78:cf:b7:f3:8e:ff:04:3c:
                    6f:12:75:7d:cf:79:6e:f0:59:77:d4:df:35:5d:8f:
                    31:43:ea:62:4c:41:44:30:bd:f6:e2:cf:2a:10:78:
                    51:c1:e3:08:dd:47:13:b4:0b:db:8e:7c:c5:eb:5d:
                    b1:bf:66:b6:1e:03:08:ac:d5:56:0a:df:ff:e1:e0:
                    c3:eb:12:43:e5:92:59:dd:8a:30:45:6f:d1:33:61:
                    cf:c7:11:39:4a:ac:9e:8b:cd:52:6e:c8:0d:73:01:
                    b4:13:ff:d8:f9:bd:cb:26:4a:50:fb:4b:54:27:c8:
                    70:05:63:9d:60:1a:c2:06:1e:ab:fd:d6:8e:63:a0:
                    e5:72:ba:19:92:29:b2:e4:d1:50:03:3f:e5:ca:42:
                    d2:38:f8:aa:63:1e:25:43:4f:5e:1b:2e:58:d8:4b:
                    99:3c:10:20:fa:70:fc:7b:d6:f6:4c:d1:49:00:bd:
                    37:87:ab:40:98:40:3b:e1:8b:4a:51:4a:47:8d:2c:
                    9d:75:1c:88:a7:43:58:04:a3:de:14:55:2b:97:fa:
                    81:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C1:02:89:54:D8:DB:95:A1:58:BA:99:35:E2:B7:7A:DF:42:A9:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6faa91f7-64cd-3b1d-8d21-c69ea065f995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c1:e1:4b:d4:8e:7d:03:ae:39:17:58:74:45:64:04:6f:6a:
         b3:77:b5:1f:f1:7d:f4:d2:14:6b:63:72:d1:e9:a7:f1:06:cf:
         6a:78:92:17:fd:3a:d3:07:19:60:ba:9a:5b:03:e6:1a:be:b7:
         ec:73:be:b9:e8:e2:ec:59:1d:e4:f0:6f:aa:06:00:64:a3:56:
         56:86:0c:94:cf:16:51:c5:eb:a4:f6:12:3e:9d:bf:21:f2:67:
         e1:0e:35:4e:7e:2e:e8:25:9d:fa:74:5f:ec:2b:f4:61:95:2a:
         12:58:c1:48:7b:85:42:71:2b:9f:2d:2b:80:76:18:c5:30:82:
         bf:51:0c:a1:a5:64:c2:0b:4c:5a:a0:7b:d5:ca:af:00:2e:d4:
         b5:8b:bd:db:84:d8:da:89:6e:c6:60:5c:5b:2e:df:8f:7d:27:
         81:0c:35:71:e9:f6:db:8e:3d:26:e9:92:6d:e2:70:31:c2:c1:
         4d:0a:0b:b3:8e:70:75:47:68:ea:7a:30:2a:a1:f5:4c:d5:04:
         f2:61:67:4e:4b:67:20:98:41:b1:fe:9d:ff:ee:21:c4:fe:4f:
         78:b4:66:8c:0a:03:3c:64:bc:9a:32:02:40:84:61:4d:c8:56:
         8b:77:0a:94:36:1f:49:e8:4a:49:ba:79:bc:52:c1:62:38:8c:
         1b:1f:07:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----