Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7051a663-ac44-34a2-89c4-281916d20d3e.roa
File:                     7051a663-ac44-34a2-89c4-281916d20d3e.roa (raw, json)
Hash identifier:          O1zSyYEC3hmjWask7Bm+BteOrobLMs7jK19hRzffDwE=
Subject key identifier:   8E:8B:61:A4:E7:D5:44:8E:14:B3:6F:0D:98:E4:EB:C9:47:12:59:FC
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328584026E8653263CCB77E4838A640
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7051a663-ac44-34a2-89c4-281916d20d3e.roa
Signing time:             Mon 05 Dec 2022 12:00:00 +0000
ROA not before:           Mon 05 Dec 2022 12:00:00 +0000
ROA not after:            Thu 08 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:26:e8:65:32:63:cc:b7:7e:48:38:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Dec  5 12:00:00 2022 GMT
            Not After : Dec  8 05:00:00 2022 GMT
        Subject: CN=8284a3cc-cf1d-4f32-856b-cbf95619ec85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4f:33:57:42:6b:61:21:22:a8:84:20:bc:bc:
                    65:35:ec:52:88:a3:10:e4:0b:5f:f6:64:b5:80:34:
                    bd:5e:02:41:35:84:5b:37:f3:25:b8:25:dd:15:32:
                    a3:dd:df:da:f6:f9:a9:4a:59:38:ec:af:ed:0b:8a:
                    0c:f2:02:11:d8:4d:77:6f:83:fb:ed:41:8b:ed:1c:
                    af:c0:30:9b:42:44:58:bd:7e:d6:07:3c:a7:91:8e:
                    5b:db:52:a6:8f:eb:e9:d5:2c:ea:2d:40:88:92:38:
                    0b:7a:fe:db:e4:cb:7f:e2:27:23:8c:a0:58:37:e3:
                    04:21:e8:cf:d7:85:8a:64:65:52:d1:66:d0:f5:71:
                    4e:e3:1e:0c:ce:1e:9b:f5:09:55:c5:d3:3a:f4:2a:
                    a0:e9:ab:b4:7d:9f:73:ee:a3:b9:ae:4c:28:71:10:
                    c4:05:03:d9:ae:76:4d:41:f1:4a:42:d7:6f:c8:71:
                    af:53:78:fd:94:1c:b0:b7:b4:94:bb:60:5a:db:48:
                    07:ec:6a:82:1b:f2:01:2d:77:dd:50:f0:53:04:90:
                    11:72:a3:ae:90:4e:ef:1d:a6:f3:ee:30:bf:5a:05:
                    3b:b4:f1:24:e8:f0:8f:fb:83:a0:d5:e8:dd:ef:62:
                    b2:2a:35:01:a7:1d:e6:6e:37:e5:61:5c:db:63:0d:
                    39:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8B:61:A4:E7:D5:44:8E:14:B3:6F:0D:98:E4:EB:C9:47:12:59:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7051a663-ac44-34a2-89c4-281916d20d3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:b4:9d:54:8c:cb:cf:f5:57:d9:2d:2b:85:4c:de:01:f3:33:
         6f:d6:75:81:3d:34:c8:d1:01:13:57:bb:c6:8a:ef:6e:d2:2c:
         77:3a:4a:bb:a9:66:d4:4e:67:ad:b3:32:bd:62:55:ae:4f:35:
         4e:eb:bf:7b:f1:83:68:1f:ef:71:dc:c4:26:7e:25:d4:62:d7:
         f6:f7:5b:d5:45:97:db:18:ae:e7:82:51:b8:ca:3d:9e:8b:d3:
         4a:5f:12:bc:98:99:22:8e:84:e3:77:9a:f2:15:70:c7:2c:8e:
         38:0b:21:4e:4b:22:14:19:0f:12:95:d3:72:d8:88:eb:12:6d:
         83:e6:97:dc:e6:f2:23:39:b2:ba:57:53:c5:ef:1c:7a:ac:bb:
         6f:ec:31:dd:eb:1f:c0:1e:b6:50:3d:80:01:ea:02:17:18:85:
         c7:65:4b:72:c3:4c:de:63:eb:16:06:00:e1:97:c2:a1:11:c6:
         8a:2a:e2:37:31:1b:4e:45:6e:1d:8b:6e:af:29:b1:f3:5a:4f:
         4c:07:e8:b1:81:fc:9f:1f:02:a2:0d:32:e0:27:d6:4a:ef:2b:
         b5:10:50:0b:e5:50:1d:85:a8:b4:43:ed:72:46:b2:83:0a:53:
         c0:3a:8b:7f:f9:23:94:7b:d1:af:0b:03:31:a7:d8:12:99:7a:
         c9:57:51:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----