Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7a067b0a-90c6-3ae2-8a40-b252dcf0c018.roa
File:                     7a067b0a-90c6-3ae2-8a40-b252dcf0c018.roa (raw, json)
Hash identifier:          DMSTY+gHOu0XcziXa6AP60BfO2dLGflXznkgSzgnj68=
Subject key identifier:   1C:43:7C:2B:E2:F2:F7:3A:CE:63:25:70:EA:22:99:FB:CC:B2:1C:36
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F53F12542BCEE400DBEA8BA00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7a067b0a-90c6-3ae2-8a40-b252dcf0c018.roa
Signing time:             Tue 20 Sep 2022 12:00:00 +0000
ROA not before:           Tue 20 Sep 2022 12:00:00 +0000
ROA not after:            Fri 23 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:53:f1:25:42:bc:ee:40:0d:be:a8:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep 20 12:00:00 2022 GMT
            Not After : Sep 23 04:00:00 2022 GMT
        Subject: CN=a703b088-52ef-4c0f-a5fd-302da4c42461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b4:0f:63:6f:77:31:07:5f:7e:42:19:3a:b1:
                    b2:20:c6:9b:d0:8c:1a:e9:53:85:01:5f:dc:76:e8:
                    28:cb:8a:fc:18:a8:b0:96:6d:7e:27:7e:1c:56:35:
                    79:85:dd:df:78:b8:00:70:9b:19:e6:dd:32:0c:41:
                    40:3e:34:1b:81:97:ac:fa:17:ce:74:38:6e:69:b6:
                    87:24:ba:ce:20:cd:8f:57:b5:a6:1c:ea:74:f3:db:
                    71:fb:bf:56:ca:0b:67:f4:0d:36:5a:7c:2c:a3:31:
                    71:8f:6e:bc:5b:57:80:b3:f6:be:e9:4d:ed:e9:ae:
                    7e:08:59:0e:02:74:df:50:1d:40:ae:fe:52:83:76:
                    64:2f:3a:69:25:7e:ce:7b:93:9f:7f:40:49:7b:17:
                    5b:45:f9:d9:de:c0:4b:aa:3f:be:ff:2f:73:66:bc:
                    70:39:d7:2c:41:5c:54:f7:28:5a:1a:8a:90:25:ba:
                    86:f3:ad:d8:1b:8c:66:a1:39:93:da:9c:6d:d9:d6:
                    8e:58:47:c9:86:f1:80:00:d9:97:84:0b:bd:c2:43:
                    6e:ab:78:42:51:8a:16:71:28:3d:57:6e:71:b5:6c:
                    66:8c:30:a0:a7:9f:76:9d:0b:3e:ef:37:81:f1:8a:
                    6b:3c:4a:61:c4:e4:8d:1f:bd:de:1f:67:a8:7a:d3:
                    1a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:43:7C:2B:E2:F2:F7:3A:CE:63:25:70:EA:22:99:FB:CC:B2:1C:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7a067b0a-90c6-3ae2-8a40-b252dcf0c018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:6f:84:29:78:63:d4:ca:70:e1:9b:6a:3f:fa:eb:78:fb:e4:
         d7:59:ec:6f:bd:53:3e:1e:f7:29:96:76:16:32:06:3d:7f:96:
         0d:ba:c6:18:88:f6:25:0b:3a:fc:41:da:6d:fa:5a:ce:40:09:
         a8:9f:8f:97:5d:12:32:d5:5b:3f:8c:85:9a:a7:51:03:6e:5c:
         45:b0:67:15:e1:95:67:55:cb:3f:a1:3b:bc:d4:b5:a5:b4:29:
         9a:12:10:ea:39:6a:5b:56:d5:cc:b7:f4:22:8f:46:8f:14:18:
         a9:87:01:59:8d:6f:d1:b8:d6:56:82:49:97:97:91:2d:4d:01:
         2e:f2:ea:39:2f:2e:d0:21:07:2c:3c:1e:87:73:a2:1c:ab:b8:
         b7:a0:bc:94:98:ef:b0:3a:c5:52:f9:8e:9c:37:54:46:5d:56:
         cd:66:99:60:fc:25:2d:7e:01:bb:76:49:80:ad:60:02:39:82:
         af:2b:4a:4a:bf:0f:a6:5c:99:79:74:48:1f:26:c0:11:ce:9d:
         35:44:0e:4d:11:e3:4e:4a:74:be:ee:fb:16:b8:09:5f:04:b9:
         18:2a:23:19:7f:44:bd:5b:34:9e:77:a5:19:e7:6e:69:68:1f:
         fa:08:09:14:e5:5e:3b:62:94:23:c1:fd:12:5e:d4:84:a8:43:
         31:f5:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----