Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9c21e696-6bb2-36b2-8fd2-ab6772cf8b7a.roa
File:                     9c21e696-6bb2-36b2-8fd2-ab6772cf8b7a.roa (raw, json)
Hash identifier:          fugEhmj6FtHBlLITqr2GIQ/KkJufPHM/BrOQRuOPWC8=
Subject key identifier:   FD:18:CF:95:9A:AB:84:BC:FA:05:2D:9B:7C:43:21:BC:1C:B6:C0:7A
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583DD7D62BFFADDFED8164136100
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9c21e696-6bb2-36b2-8fd2-ab6772cf8b7a.roa
Signing time:             Sat 07 May 2022 12:00:00 +0000
ROA not before:           Sat 07 May 2022 12:00:00 +0000
ROA not after:            Tue 10 May 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:358::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d7:d6:2b:ff:ad:df:ed:81:64:13:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May  7 12:00:00 2022 GMT
            Not After : May 10 04:00:00 2022 GMT
        Subject: CN=85e1d99f-c0d2-4448-b446-d264e7e1f9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:c5:4e:48:9a:13:25:9a:db:cd:a5:56:70:
                    4d:3a:5e:ff:47:5d:09:42:29:f7:51:0d:39:b8:98:
                    1b:69:3e:bd:df:6f:30:ed:13:85:31:21:07:ed:0a:
                    07:e5:e1:63:d3:cd:23:76:21:04:e2:c6:1c:1b:11:
                    0f:d8:d4:57:ab:fa:3d:ae:fa:05:3b:a1:06:f6:e1:
                    1a:c2:a0:f2:e2:ab:42:e9:9d:b7:57:c0:69:a5:11:
                    1c:b0:c7:a7:9c:67:ad:a8:a8:10:bb:ac:c5:8c:fd:
                    10:ce:61:38:c6:94:6c:38:22:a4:65:3a:f0:7e:ea:
                    a6:51:37:68:6f:78:3c:f7:96:59:3c:01:5f:2c:57:
                    d0:63:94:60:8d:21:2a:9c:2c:1d:b2:d4:ad:09:2c:
                    25:bc:2e:ad:ff:9b:d9:a2:9d:da:8f:2b:a6:5b:3c:
                    04:51:62:b6:f7:9e:cb:06:17:6e:19:d9:4d:43:9a:
                    37:82:b5:da:84:cb:12:01:04:5b:05:1a:28:ef:c0:
                    33:35:5e:8d:fb:69:77:3c:e5:fb:78:93:01:37:99:
                    31:eb:c5:b4:f2:e5:8a:f3:6d:96:50:21:0a:10:21:
                    1f:52:a7:1c:82:79:07:34:51:2b:d5:94:7a:0e:2e:
                    0c:a3:4c:61:52:5d:25:8d:18:10:25:45:c8:6a:8a:
                    e2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:18:CF:95:9A:AB:84:BC:FA:05:2D:9B:7C:43:21:BC:1C:B6:C0:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9c21e696-6bb2-36b2-8fd2-ab6772cf8b7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:358::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:75:64:fd:30:dc:dd:70:f8:01:f9:e9:dc:00:2d:cd:43:90:
         cd:ed:e4:e4:56:a0:e3:e8:78:64:30:43:17:e2:10:81:18:b5:
         ce:7d:b7:6c:a7:76:9a:29:8f:0d:b6:af:ae:22:26:aa:c0:05:
         ec:08:5c:74:60:bf:fe:23:93:de:6d:d6:1b:e5:fd:53:c5:27:
         69:bf:51:38:3b:f0:68:69:62:3a:36:ea:4e:c7:c6:ef:02:cf:
         52:63:47:21:85:6a:a0:cc:e2:c6:31:ba:2b:c5:18:3a:66:4a:
         12:3f:d1:81:43:07:e0:95:ff:99:5b:44:15:b6:53:ff:24:6d:
         78:34:a4:36:cb:b5:33:e8:6c:0e:e0:76:2a:ac:25:9f:66:1d:
         a7:4c:41:f6:b6:1b:d2:f0:14:d4:8f:53:3e:21:d1:9c:30:ed:
         5b:63:6c:d9:66:50:aa:c1:ea:c5:6a:f2:e2:af:20:33:25:07:
         f7:90:18:ad:80:b6:c4:fb:90:53:a3:58:84:a4:e8:9a:f3:93:
         ca:55:bc:d8:ff:93:42:a9:f3:f2:d9:ab:aa:f1:2b:f6:d4:f2:
         9a:6f:36:b9:a1:b2:56:29:3c:02:90:92:fd:1e:d2:d4:13:a7:
         37:3d:ce:a7:1f:a5:99:46:87:f6:74:1b:ea:01:f0:54:05:1d:
         e1:30:07:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----