Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/77c866f5-fa23-373c-80e4-a46932a0e047.roa
File:                     77c866f5-fa23-373c-80e4-a46932a0e047.roa (raw, json)
Hash identifier:          WkZ/yUmq25JmqUIprcU1NPq/KX6WpbtcrfZ0qSBUWYI=
Subject key identifier:   27:CF:E4:2D:D0:14:0E:E7:A9:B9:4F:BB:8A:4F:41:8C:EF:86:C9:EC
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CDC33D96540661B27DFBB59A0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/77c866f5-fa23-373c-80e4-a46932a0e047.roa
Signing time:             Mon 07 Feb 2022 05:00:00 +0000
ROA not before:           Mon 07 Feb 2022 05:00:00 +0000
ROA not after:            Wed 09 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:dc:33:d9:65:40:66:1b:27:df:bb:59:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb  7 05:00:00 2022 GMT
            Not After : Feb  9 05:00:00 2022 GMT
        Subject: CN=4423dd3e-b267-4a48-826f-093c650d1065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7a:5a:99:2b:92:76:e3:d1:fd:88:6f:62:b5:
                    de:1a:a3:47:b4:12:08:e2:96:68:cf:f9:6e:8a:7c:
                    ce:39:ce:4c:66:8a:b7:34:64:c4:a4:e4:63:9a:31:
                    31:44:b7:06:00:f5:b3:b5:ec:38:01:46:7d:b5:bd:
                    40:b8:f3:32:16:91:9c:42:33:b7:69:16:ca:f7:08:
                    49:9d:78:4d:c5:6b:c7:63:04:fd:b3:97:b9:4e:a7:
                    00:3e:40:34:27:b6:09:4b:84:4f:ee:17:c6:07:17:
                    83:bb:5d:d4:04:ae:f5:6b:79:b0:32:3f:e0:15:d2:
                    b5:66:34:1f:a5:fd:67:bc:ec:66:cd:ba:3b:0a:90:
                    bd:7d:ad:0c:2b:c5:22:d7:ab:8a:41:c0:a6:e9:41:
                    d5:1d:66:7b:d1:e3:19:f1:8e:8a:6b:d5:2e:d2:71:
                    c6:23:09:a9:ed:ea:c6:cc:ab:e8:4f:c1:cc:3e:0b:
                    8a:88:9c:0b:c1:e7:88:5a:2c:8d:90:cf:27:13:a4:
                    4d:c1:8f:6f:b0:e4:a8:e1:c0:a8:b7:cf:78:97:f0:
                    f0:87:1f:32:d3:0c:d4:56:29:c0:0e:29:04:6b:31:
                    45:af:49:04:b8:f0:60:2a:f5:60:f0:ce:d5:ee:97:
                    fa:3a:db:49:eb:d0:03:57:db:61:12:97:44:db:93:
                    70:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CF:E4:2D:D0:14:0E:E7:A9:B9:4F:BB:8A:4F:41:8C:EF:86:C9:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/77c866f5-fa23-373c-80e4-a46932a0e047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ea:12:74:7f:29:4a:fa:05:dc:b8:83:2e:97:27:14:42:4b:
         57:34:87:75:8a:fa:f2:6f:92:f6:a7:6f:ed:1b:7a:77:2b:c7:
         94:63:24:64:67:33:b1:9d:d0:74:4d:e2:fd:45:a4:1a:91:07:
         e4:15:a9:49:f1:b1:fb:5a:ba:3a:0a:10:8f:09:14:56:cd:d4:
         21:02:23:48:bf:5e:97:1b:2f:cc:02:8c:e7:2d:59:c7:fd:a0:
         b1:99:d2:e3:6e:b7:48:99:e9:aa:8f:ee:07:4a:c9:ce:04:4c:
         b7:34:00:fc:5d:ea:c8:6c:c5:09:5b:de:46:34:96:1b:d5:46:
         80:00:c9:15:1e:3d:9f:34:53:74:a3:8b:9a:4d:c8:59:0d:0a:
         40:d9:1b:82:0a:12:fc:57:78:17:f3:27:83:1e:6e:4d:bc:6b:
         f3:92:ae:99:c5:5d:ed:96:e9:68:df:c2:a8:91:bc:85:e3:79:
         ec:d7:7f:b7:81:d3:14:ae:fd:67:bd:85:68:2d:f6:11:8e:4e:
         e0:75:d9:40:95:98:27:89:36:fe:ed:63:d0:7b:b6:80:11:4a:
         51:9e:1d:91:7c:e7:7f:7e:83:3a:da:44:4b:a3:e2:f0:48:0e:
         6a:82:d0:8a:ae:80:7e:8c:2a:6a:e7:c2:47:3f:d3:8c:3b:d1:
         27:e1:d1:f7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDzcM9llQGYbJ9+7WaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDIwNzA1MDAwMFoXDTIyMDIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
NDQyM2RkM2UtYjI2Ny00YTQ4LTgyNmYtMDkzYzY1MGQxMDY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXpamSuSduPR/YhvYrXeGqNHtBII4pZoz/lu
inzOOc5MZoq3NGTEpORjmjExRLcGAPWztew4AUZ9tb1AuPMyFpGcQjO3aRbK9whJ
nXhNxWvHYwT9s5e5TqcAPkA0J7YJS4RP7hfGBxeDu13UBK71a3mwMj/gFdK1ZjQf
pf1nvOxmzbo7CpC9fa0MK8Ui16uKQcCm6UHVHWZ70eMZ8Y6Ka9Uu0nHGIwmp7erG
zKvoT8HMPguKiJwLweeIWiyNkM8nE6RNwY9vsOSo4cCot894l/Dwhx8y0wzUVinA
DikEazFFr0kEuPBgKvVg8M7V7pf6OttJ69ADV9thEpdE25NwGwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCfP5C3QFA7nqblPu4pPQYzvhsnsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvNzdjODY2ZjUtZmEyMy0z
NzNjLTgwZTQtYTQ2OTMyYTBlMDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAILqEnR/KUr6Bdy4gy6XJxRCS1c0h3WK+vJvkvanb+0bencrx5Rj
JGRnM7Gd0HRN4v1FpBqRB+QVqUnxsftaujoKEI8JFFbN1CECI0i/XpcbL8wCjOct
Wcf9oLGZ0uNut0iZ6aqP7gdKyc4ETLc0APxd6shsxQlb3kY0lhvVRoAAyRUePZ80
U3Sji5pNyFkNCkDZG4IKEvxXeBfzJ4Mebk28a/OSrpnFXe2W6WjfwqiRvIXjeezX
f7eB0xSu/We9hWgt9hGOTuB12UCVmCeJNv7tY9B7toARSlGeHZF8539+gzraREuj
4vBIDmqC0IqugH6MKmrnwkc/04w70Sfh0fc=
-----END CERTIFICATE-----