Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7c0dbdc9-93b0-3b5b-b35b-fb5d5ecb4668.roa
File:                     7c0dbdc9-93b0-3b5b-b35b-fb5d5ecb4668.roa (raw, json)
Hash identifier:          kSck08PH+7AdgXVyU8w91EU/90SrFGjd6OT7qdmwHFg=
Subject key identifier:   19:FB:73:10:1E:8C:91:91:6C:FE:FE:1A:1A:DD:D9:3D:2E:1C:70:15
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328584025599CD387570686AAD0AC80
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7c0dbdc9-93b0-3b5b-b35b-fb5d5ecb4668.roa
Signing time:             Sun 04 Dec 2022 12:00:00 +0000
ROA not before:           Sun 04 Dec 2022 12:00:00 +0000
ROA not after:            Wed 07 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:391::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:25:59:9c:d3:87:57:06:86:aa:d0:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Dec  4 12:00:00 2022 GMT
            Not After : Dec  7 05:00:00 2022 GMT
        Subject: CN=58d7fcd3-2142-41a4-87eb-8a002aa2e926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:55:87:75:23:e5:2f:ef:0f:f5:34:94:c0:6e:
                    08:4c:1a:06:f4:70:1f:a3:0d:28:2d:9f:6c:6f:27:
                    c5:88:02:94:e5:d9:0a:76:a8:e2:3b:bf:4d:1a:df:
                    b5:35:60:80:ca:48:c0:03:73:a2:e0:af:25:07:d6:
                    54:ad:1b:a2:3b:d7:68:c2:2e:b5:37:80:a8:ad:f9:
                    83:24:56:8b:da:d3:1e:58:26:ec:a8:c4:8f:0d:5d:
                    fc:cb:31:1b:d2:c6:d6:14:43:0e:8d:91:a7:56:92:
                    f8:32:50:c4:e4:c5:a1:ac:59:83:f6:61:01:27:1c:
                    f1:3f:d2:e9:d4:3f:52:d7:81:36:d5:73:87:fc:89:
                    a1:ea:7b:18:63:b6:d0:b3:83:a8:ad:e9:b3:3c:00:
                    99:86:75:98:31:9d:82:16:6e:f7:ca:0d:8a:b4:82:
                    d2:3e:be:2c:43:0f:dc:a8:2b:9c:80:ea:75:24:38:
                    dc:00:bb:04:37:e3:f3:b5:02:3c:04:81:06:df:d2:
                    90:71:0e:8f:bf:ab:14:43:04:a8:0a:0d:cd:16:83:
                    f1:d9:fa:31:08:7d:08:02:0c:df:35:8d:60:88:90:
                    55:55:d7:95:24:a6:7d:c1:5c:4b:1c:5d:39:50:b8:
                    a7:bb:b4:05:6f:46:73:b9:be:36:b2:30:74:90:5d:
                    48:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FB:73:10:1E:8C:91:91:6C:FE:FE:1A:1A:DD:D9:3D:2E:1C:70:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7c0dbdc9-93b0-3b5b-b35b-fb5d5ecb4668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:b0:b9:7e:f2:c5:e2:de:e2:4e:11:24:86:54:9d:5e:48:3d:
         24:19:7e:ad:07:6d:3a:9d:17:d0:df:5e:f7:e4:b2:38:e9:3e:
         36:63:5f:4c:98:4a:93:30:db:96:32:88:bb:23:44:84:3b:3b:
         54:49:4f:44:3a:bb:da:f7:af:c4:18:48:d6:60:dd:11:c8:0c:
         0d:14:0a:0e:4a:b1:18:c5:03:7d:21:ab:42:bf:62:cc:60:db:
         b6:63:78:56:6f:1e:f0:3c:09:ac:4c:4f:9d:82:b0:81:92:4e:
         bb:19:66:aa:2f:ff:b1:80:6b:94:e3:6d:49:50:ce:59:e8:55:
         51:16:cc:e4:b9:c7:f6:3b:d5:41:ea:64:6b:87:c6:2f:59:d2:
         6a:13:42:f5:82:35:d6:a8:ea:2e:6d:bd:89:84:00:91:6d:fe:
         68:e4:c9:3a:b5:a3:4e:6f:69:11:54:0e:7f:3a:ee:0a:95:93:
         10:04:78:e5:25:22:e9:f5:bc:d9:19:bc:ad:e9:3c:50:af:03:
         30:9f:6b:66:9f:0f:67:39:05:ea:40:60:8c:90:03:1c:3f:c5:
         12:44:a1:cf:20:78:80:72:52:f0:ff:ab:02:55:81:59:cf:0d:
         9e:35:7b:06:16:93:4e:9d:03:8d:b5:36:44:29:92:d3:ed:29:
         f7:b7:c1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----