Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/863fd9c6-7c9b-32c8-90ad-dee84b39e59d.roa
File:                     863fd9c6-7c9b-32c8-90ad-dee84b39e59d.roa (raw, json)
Hash identifier:          Ciwvspzyj55KcxLeiYLckzZJCdZEKo8lEGyWtRn8WYA=
Subject key identifier:   03:74:C8:C4:02:6C:E0:E4:B3:BF:1A:C6:F2:29:31:B3:3E:31:02:A7
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F3D260380FC8FD41FD272FE00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/863fd9c6-7c9b-32c8-90ad-dee84b39e59d.roa
Signing time:             Mon 12 Sep 2022 12:00:00 +0000
ROA not before:           Mon 12 Sep 2022 12:00:00 +0000
ROA not after:            Thu 15 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3d:26:03:80:fc:8f:d4:1f:d2:72:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep 12 12:00:00 2022 GMT
            Not After : Sep 15 04:00:00 2022 GMT
        Subject: CN=aa5859ee-ddd4-4095-861d-d259f7e7ce05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0d:bb:94:03:2b:ec:49:51:02:33:59:3e:b3:
                    cf:61:11:f4:c1:55:c8:f9:01:27:a0:b4:c7:94:05:
                    f0:70:01:bc:e5:67:0e:af:ad:c8:98:a1:ef:92:a7:
                    92:eb:2c:b8:88:0a:c4:db:5b:b9:d9:41:cb:66:2c:
                    49:0b:01:be:9d:39:60:c5:80:34:a3:05:12:5c:ea:
                    6d:c1:28:ed:91:c9:bc:ed:dd:fe:d2:cb:6f:a0:b0:
                    ff:5c:0b:f3:fe:17:e4:8d:63:0a:05:27:34:18:45:
                    1c:65:98:6e:cc:f3:6a:64:94:84:ab:01:e1:44:62:
                    d1:c2:04:d7:35:db:f6:d7:24:71:70:9d:60:8c:0a:
                    f8:09:f5:6e:fa:fc:56:c9:3c:2d:94:93:16:32:b4:
                    5c:7c:6c:86:d0:1f:5b:9e:1e:80:7f:c5:1d:18:29:
                    51:40:b7:78:3f:3d:92:07:a3:07:fa:81:35:c0:d3:
                    30:ec:37:f6:cb:66:de:76:a6:22:39:5f:bc:20:3c:
                    59:d8:c4:ad:93:7f:be:b7:73:bd:2f:98:a1:da:49:
                    5d:0b:6c:66:a1:fb:59:2a:9e:66:55:9b:fd:be:db:
                    a5:93:74:98:13:7d:0e:64:35:de:07:15:9d:ed:26:
                    9e:9a:9f:28:02:ce:68:a3:6d:ca:a9:45:0e:d6:d7:
                    3e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:74:C8:C4:02:6C:E0:E4:B3:BF:1A:C6:F2:29:31:B3:3E:31:02:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/863fd9c6-7c9b-32c8-90ad-dee84b39e59d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:65:81:35:cc:cb:88:ab:8f:d5:32:88:f1:89:db:59:db:a2:
         b5:07:19:cd:cf:52:c5:58:ab:cf:35:f9:88:3f:70:7a:1e:23:
         a3:39:11:b7:21:ba:45:36:c8:86:3a:18:a5:d2:07:d7:f3:f7:
         2b:cd:18:1e:4c:15:42:f0:86:6f:d5:ad:ca:c9:4e:cb:7f:1c:
         3d:57:3c:2d:39:ed:33:f4:5d:ab:e6:76:33:42:37:d9:51:6d:
         c3:a0:24:20:40:a0:7c:db:87:5f:97:f3:e0:b8:ed:7a:f1:ba:
         74:e6:da:17:d3:3f:52:88:5f:ee:79:e1:9b:bd:c4:39:2d:d5:
         a6:23:e1:84:94:f7:51:de:40:e5:d1:55:f6:43:b5:82:f6:d2:
         cc:89:08:30:99:c6:a6:49:42:8a:c4:13:9f:ae:53:06:c3:eb:
         2d:b0:74:ea:43:75:dc:3a:36:87:14:76:a8:63:dd:ce:46:9c:
         ec:aa:29:40:3c:7e:16:4f:71:9b:3d:bf:ef:d3:6f:4d:75:7b:
         e9:05:25:d8:a5:c7:39:f3:fa:fa:a3:84:d8:6e:2c:f8:2d:d0:
         3b:f3:f0:a8:d9:60:5a:57:ff:5d:ed:7f:7a:10:11:9b:b8:9a:
         bf:f2:cf:d9:b9:7d:ce:13:85:11:66:f0:09:06:f9:31:6b:a0:
         99:6d:b9:47
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD89JgOA/I/UH9Jy/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDkxMjEyMDAwMFoXDTIyMDkxNTA0MDAwMFowLzEtMCsGA1UEAxMk
YWE1ODU5ZWUtZGRkNC00MDk1LTg2MWQtZDI1OWY3ZTdjZTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ27lAMr7ElRAjNZPrPPYRH0wVXI+QEnoLTH
lAXwcAG85WcOr63ImKHvkqeS6yy4iArE21u52UHLZixJCwG+nTlgxYA0owUSXOpt
wSjtkcm87d3+0stvoLD/XAvz/hfkjWMKBSc0GEUcZZhuzPNqZJSEqwHhRGLRwgTX
Ndv21yRxcJ1gjAr4CfVu+vxWyTwtlJMWMrRcfGyG0B9bnh6Af8UdGClRQLd4Pz2S
B6MH+oE1wNMw7Df2y2bedqYiOV+8IDxZ2MStk3++t3O9L5ih2kldC2xmoftZKp5m
VZv9vtulk3SYE30OZDXeBxWd7Saemp8oAs5oo23KqUUO1tc+MQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAN0yMQCbODks78axvIpMbM+MQKnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvODYzZmQ5YzYtN2M5Yi0z
MmM4LTkwYWQtZGVlODRiMzllNTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE9lgTXMy4irj9UyiPGJ21nborUHGc3PUsVYq881+Yg/cHoeI6M5
EbchukU2yIY6GKXSB9fz9yvNGB5MFULwhm/VrcrJTst/HD1XPC057TP0XavmdjNC
N9lRbcOgJCBAoHzbh1+X8+C47XrxunTm2hfTP1KIX+554Zu9xDkt1aYj4YSU91He
QOXRVfZDtYL20syJCDCZxqZJQorEE5+uUwbD6y2wdOpDddw6NocUdqhj3c5GnOyq
KUA8fhZPcZs9v+/Tb011e+kFJdilxznz+vqjhNhuLPgt0Dvz8KjZYFpX/13tf3oQ
EZu4mr/yz9m5fc4ThRFm8AkG+TFroJltuUc=
-----END CERTIFICATE-----