Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/71bd7ab9-e6eb-3f23-bb52-ca722a60d06b.roa
File:                     71bd7ab9-e6eb-3f23-bb52-ca722a60d06b.roa (raw, json)
Hash identifier:          CmiEdOOakuwL62rko9qBv01qDTqj2TkqNuQNLzMQJuI=
Subject key identifier:   9F:76:11:CB:6F:1D:D8:2A:4F:C9:B6:D8:7E:82:9B:53:AB:43:56:D0
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D00694B82723543F1815A5680
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/71bd7ab9-e6eb-3f23-bb52-ca722a60d06b.roa
Signing time:             Sun 20 Feb 2022 05:00:00 +0000
ROA not before:           Sun 20 Feb 2022 05:00:00 +0000
ROA not after:            Tue 22 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:00:69:4b:82:72:35:43:f1:81:5a:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb 20 05:00:00 2022 GMT
            Not After : Feb 22 05:00:00 2022 GMT
        Subject: CN=ea4dd82d-3667-44c8-b037-358d0ba7e1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:cd:b8:04:ad:8f:02:13:93:92:5e:d4:13:
                    a5:b4:eb:b9:ef:7e:20:2d:c5:c1:23:f8:53:ee:48:
                    b5:81:dc:42:96:6d:4b:69:dd:44:84:fb:4d:b2:bc:
                    7e:dd:f8:14:dd:2a:0c:51:21:59:08:37:f1:4a:7f:
                    64:e5:be:0b:0f:74:5a:1f:75:b0:20:2d:4d:b3:d7:
                    8c:51:43:56:0a:7d:51:7c:4b:46:93:e0:07:c9:18:
                    83:8c:1f:f7:7b:66:cd:28:b0:37:68:43:b2:00:3d:
                    2c:ed:75:03:33:ba:8e:3e:1e:66:55:b5:27:d9:d0:
                    be:9f:c6:3b:15:6e:fe:ec:b1:01:0f:64:d7:94:f5:
                    85:d7:7f:71:f9:52:6d:53:8a:31:cf:ca:aa:4f:ce:
                    90:63:3a:c9:83:80:cc:6c:5a:9f:83:4e:98:bc:a7:
                    08:6f:a6:96:c2:07:18:3a:b3:85:40:03:a5:c3:06:
                    e4:e0:91:30:67:89:1c:b4:41:d7:27:4e:9d:a3:5e:
                    78:b0:e2:2a:51:24:0b:8c:8b:60:30:1e:82:34:e4:
                    4b:b4:ba:ce:89:30:79:20:2b:fd:0a:31:45:1a:b7:
                    53:a6:7e:cf:25:e2:91:fd:72:3a:4a:ee:73:cc:ae:
                    84:96:a3:bd:da:50:bc:c7:4e:c7:98:fa:b5:4d:a0:
                    65:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:76:11:CB:6F:1D:D8:2A:4F:C9:B6:D8:7E:82:9B:53:AB:43:56:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/71bd7ab9-e6eb-3f23-bb52-ca722a60d06b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:32:e6:1f:76:57:ae:c7:9d:d0:a1:dc:84:e6:be:a5:8f:14:
         14:b8:0c:64:e3:cf:c0:a8:d2:7e:5e:63:ba:dd:3e:e7:12:64:
         5e:48:fb:fa:11:d6:98:20:d7:3d:46:09:24:82:30:21:38:8b:
         d2:28:7b:de:d1:03:99:aa:24:7f:01:18:c7:41:3d:27:47:45:
         1e:ae:a4:c3:7a:fa:54:63:75:29:ea:4f:7d:f5:51:b2:af:95:
         07:da:32:7f:b4:d8:f3:77:6a:af:f1:64:0e:41:81:e2:60:35:
         8c:8e:3d:01:3d:ae:23:f0:10:eb:37:f9:f2:fb:42:58:c8:8b:
         00:2e:d1:8f:3c:8b:e8:3e:36:67:03:9d:c5:b5:c6:30:ac:f6:
         b3:aa:fc:ed:c8:80:71:53:da:ca:72:e1:af:44:d7:c6:19:63:
         01:a8:be:36:0f:cf:88:40:87:49:b5:dc:5a:87:67:97:5f:6e:
         15:f1:c3:e2:c8:aa:d0:59:22:dd:19:12:d5:66:37:4d:cb:74:
         c5:ae:f4:28:32:9c:c2:3c:58:20:95:58:b5:f8:a9:17:e1:1c:
         f6:6e:03:16:d6:b4:6b:88:82:ea:c8:41:fd:2b:38:c5:08:c9:
         41:00:87:72:1d:51:fe:d3:3d:d0:07:66:e7:47:8d:4b:ae:17:
         a2:af:3d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----