Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/95682232-50a9-3f16-824c-faedf22c62be.roa
File:                     95682232-50a9-3f16-824c-faedf22c62be.roa (raw, json)
Hash identifier:          TrLnf3/aJsiqE1iw7WX5dyGPH4OsmFzEYWXqmY8TPtY=
Subject key identifier:   00:C1:96:2C:BE:2B:F5:20:71:F1:ED:DF:B0:C0:55:4B:DB:A5:C0:9E
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CEDB7FB8C8BB38BE605E330C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/95682232-50a9-3f16-824c-faedf22c62be.roa
Signing time:             Sun 13 Feb 2022 05:00:00 +0000
ROA not before:           Sun 13 Feb 2022 05:00:00 +0000
ROA not after:            Tue 15 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:ed:b7:fb:8c:8b:b3:8b:e6:05:e3:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb 13 05:00:00 2022 GMT
            Not After : Feb 15 05:00:00 2022 GMT
        Subject: CN=ac7cb7c5-1d52-486d-a178-1c5d60cbaf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2f:ce:7d:b2:83:c8:29:99:6a:69:40:ce:3d:
                    15:d1:70:d2:a3:7d:2f:81:76:8c:14:42:26:bd:36:
                    74:ba:2d:0b:71:a8:a6:65:ed:30:27:c2:eb:07:da:
                    51:b7:c9:b4:00:6f:1d:79:0b:44:52:de:48:94:ea:
                    9f:39:91:5e:5f:6f:1e:b7:bf:8e:e1:ff:27:a9:e6:
                    06:4b:83:0c:fc:1a:84:bf:0a:bc:b1:cf:a3:c7:4c:
                    d8:90:8d:f0:63:95:07:13:3d:08:d6:fc:45:c1:df:
                    5f:4d:86:32:c7:30:4e:37:77:5e:6c:b9:31:a9:46:
                    8d:80:2a:c2:e7:bc:8b:6a:f1:0b:92:67:42:6d:2b:
                    6d:62:b2:5d:16:7f:2c:2e:65:20:3b:79:84:d5:26:
                    28:9a:6c:97:94:d7:d6:7f:77:18:05:ac:1d:25:0a:
                    07:10:40:ac:f9:3e:92:1a:c1:28:e8:cb:26:3c:97:
                    d5:cc:79:ae:35:ad:8d:2b:f3:0c:f0:c2:93:87:00:
                    49:f8:66:66:89:42:5f:ac:55:cb:63:f2:6f:ed:a0:
                    73:59:5e:25:90:82:52:fa:98:cd:ef:75:63:a7:65:
                    cd:42:84:a2:34:8b:23:b6:a5:c1:66:c0:4a:c2:a5:
                    ac:a7:84:37:1d:66:8b:4b:a5:6d:a1:88:c7:bb:60:
                    f5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C1:96:2C:BE:2B:F5:20:71:F1:ED:DF:B0:C0:55:4B:DB:A5:C0:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/95682232-50a9-3f16-824c-faedf22c62be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:a8:8b:6f:01:6d:99:1d:0d:0e:82:6d:ba:bd:c0:ee:35:7f:
         14:85:dd:a2:95:37:cd:b9:43:a0:aa:db:1c:1b:3e:91:32:3a:
         59:48:c3:11:22:a6:a0:87:cb:3a:ac:19:a3:f5:c6:b0:8c:8f:
         ce:c2:04:e8:84:9f:f2:3b:0c:e9:18:bc:cb:99:ff:2c:74:4a:
         e9:14:e1:5f:df:9d:71:fe:9a:2b:fc:eb:77:bd:b5:a3:73:c0:
         1c:67:5d:ba:75:89:9e:ec:6c:d9:07:41:7b:b3:7a:b6:6e:fa:
         4b:e6:9e:31:cb:5b:4a:ab:07:cd:ab:29:4b:90:31:2d:ee:03:
         38:76:e0:c5:28:3f:e5:89:c4:53:56:68:c5:42:02:fe:41:28:
         67:52:cd:e7:c8:64:c3:ef:32:6b:3d:5a:fc:f7:98:ee:cb:e2:
         ed:70:85:67:92:a5:1a:e1:66:9c:8e:d1:62:1b:a0:8c:3e:94:
         c7:82:16:df:84:78:3b:84:bd:a7:fa:4c:20:f9:5d:24:9c:82:
         25:10:b0:59:f2:0e:41:3e:6f:60:d0:e9:48:ea:d2:ec:f9:bb:
         d6:21:c7:99:29:ea:53:72:06:64:62:4e:15:32:bc:c9:ef:67:
         5d:f2:bf:38:71:40:06:ad:8b:08:b3:36:9e:ae:78:31:ea:f8:
         e7:11:0c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----