Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/74e98d0c-d529-31a5-b14e-3813fd0941f7.roa
File:                     74e98d0c-d529-31a5-b14e-3813fd0941f7.roa (raw, json)
Hash identifier:          pZDoeu3cUaMmIh6ivML+GyvVAwxLQfSIqz7maYjAbRU=
Subject key identifier:   DA:04:32:1E:50:19:12:CD:AC:44:7F:3B:E3:86:FA:F1:62:3E:00:D2
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EA4D35C7445735AFC73FE8800
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/74e98d0c-d529-31a5-b14e-3813fd0941f7.roa
Signing time:             Tue 19 Jul 2022 12:00:00 +0000
ROA not before:           Tue 19 Jul 2022 12:00:00 +0000
ROA not after:            Fri 22 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a4:d3:5c:74:45:73:5a:fc:73:fe:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul 19 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2022 GMT
        Subject: CN=6b0dc7da-1fdb-4f62-b86f-9df16aecb30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cd:c6:7e:cb:82:67:c0:7c:ed:2e:bd:14:a3:
                    8a:3a:55:24:71:fd:a0:56:02:a2:1a:58:70:78:76:
                    9e:86:6f:23:c7:1d:78:73:5b:b8:0b:1a:77:4d:eb:
                    2f:e8:3e:24:3d:3b:91:9d:85:2a:50:c3:e6:2e:41:
                    6e:46:58:a5:fc:8d:8e:81:74:4b:10:b9:8f:0c:99:
                    ac:17:81:fb:3a:cf:1a:81:87:1c:35:43:7f:d0:81:
                    3e:b6:e7:fc:d3:de:44:27:5a:bd:b6:97:60:4f:84:
                    35:1c:cb:0c:b2:0c:80:65:1d:a9:cf:90:c8:7c:69:
                    3c:5a:4f:3e:91:e4:36:40:0d:b0:71:c5:70:73:43:
                    1e:00:7f:6d:e8:0f:52:8d:26:91:57:15:32:51:d5:
                    60:e3:8f:34:7d:bb:ae:7f:45:9b:8e:b8:4c:34:eb:
                    7d:3f:8c:a5:5f:3e:ea:4b:56:b4:52:8a:7b:e8:bd:
                    c3:41:7b:de:64:6d:23:1d:da:7e:3e:d5:7a:95:5d:
                    55:a3:c8:20:ac:e5:c7:7d:c9:da:0f:10:a7:96:ac:
                    6c:09:7e:6b:f2:df:3a:03:c5:9a:56:17:30:87:ed:
                    6d:73:df:e9:da:bf:37:1e:7c:4d:29:5f:42:1d:80:
                    5b:21:eb:28:d0:a9:51:63:e1:ca:47:78:98:3b:77:
                    1f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:04:32:1E:50:19:12:CD:AC:44:7F:3B:E3:86:FA:F1:62:3E:00:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/74e98d0c-d529-31a5-b14e-3813fd0941f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e9:32:e8:46:8e:b1:85:62:11:a3:da:f3:3a:c0:d5:45:ac:
         b3:e2:7c:1f:8f:2a:bc:9d:2e:67:6e:22:b2:60:14:e3:e6:48:
         f9:03:c7:2c:20:85:71:ea:c6:26:d8:88:88:f4:c6:2b:b5:a9:
         40:f1:4e:81:e1:7f:7b:ed:4e:da:7f:ef:13:e8:3c:51:af:73:
         e0:71:38:6c:f8:8f:f9:fc:d7:e7:67:30:ba:28:e7:63:ca:51:
         6b:6d:34:19:b6:e6:c3:6a:0a:d5:27:b1:36:2a:0f:be:43:1a:
         56:1e:b6:1e:37:1a:8b:c8:42:96:05:1b:e2:17:37:b0:6f:bb:
         ba:21:21:7b:5c:4d:6e:6e:46:99:d6:7d:51:d9:a3:b0:0e:e8:
         41:db:b1:23:0c:92:28:8b:09:1a:66:fe:87:ac:0b:d6:3c:38:
         e7:ed:10:6d:b4:3e:15:16:83:9b:d4:a9:c8:61:e0:89:a3:2f:
         a7:0f:2f:ce:33:88:f7:7f:e2:34:68:91:bb:b7:13:1e:f7:57:
         a0:3b:48:d5:ac:0d:17:d0:52:1a:8d:87:a6:b0:57:3a:8b:96:
         ad:cf:3c:1b:2a:a6:84:80:73:88:22:00:94:21:01:ed:e6:ec:
         89:9c:07:e2:7b:24:4c:2d:b7:89:79:81:f5:de:8c:c2:08:97:
         ae:21:37:07
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD6k01x0RXNa/HP+iAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDcxOTEyMDAwMFoXDTIyMDcyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NmIwZGM3ZGEtMWZkYi00ZjYyLWI4NmYtOWRmMTZhZWNiMzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm83GfsuCZ8B87S69FKOKOlUkcf2gVgKiGlhw
eHaehm8jxx14c1u4Cxp3Tesv6D4kPTuRnYUqUMPmLkFuRlil/I2OgXRLELmPDJms
F4H7Os8agYccNUN/0IE+tuf8095EJ1q9tpdgT4Q1HMsMsgyAZR2pz5DIfGk8Wk8+
keQ2QA2wccVwc0MeAH9t6A9SjSaRVxUyUdVg4480fbuuf0WbjrhMNOt9P4ylXz7q
S1a0Uop76L3DQXveZG0jHdp+PtV6lV1Vo8ggrOXHfcnaDxCnlqxsCX5r8t86A8Wa
Vhcwh+1tc9/p2r83HnxNKV9CHYBbIeso0KlRY+HKR3iYO3cfKwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNoEMh5QGRLNrER/O+OG+vFiPgDSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvNzRlOThkMGMtZDUyOS0z
MWE1LWIxNGUtMzgxM2ZkMDk0MWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAzpMuhGjrGFYhGj2vM6wNVFrLPifB+PKrydLmduIrJgFOPmSPkD
xywghXHqxibYiIj0xiu1qUDxToHhf3vtTtp/7xPoPFGvc+BxOGz4j/n81+dnMLoo
52PKUWttNBm25sNqCtUnsTYqD75DGlYeth43GovIQpYFG+IXN7Bvu7ohIXtcTW5u
RpnWfVHZo7AO6EHbsSMMkiiLCRpm/oesC9Y8OOftEG20PhUWg5vUqchh4ImjL6cP
L84ziPd/4jRokbu3Ex73V6A7SNWsDRfQUhqNh6awVzqLlq3PPBsqpoSAc4giAJQh
Ae3m7ImcB+J7JEwtt4l5gfXejMIIl64hNwc=
-----END CERTIFICATE-----