Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9dd637c9-106e-3584-b009-f41669402649.roa
File:                     9dd637c9-106e-3584-b009-f41669402649.roa (raw, json)
Hash identifier:          Z9N5LPwgafv8xNy1Xw/P2QFQxIagOR+0mtPHxoNIIyc=
Subject key identifier:   BA:05:6A:63:98:34:A3:67:67:27:47:D4:FF:F2:A6:F6:F4:56:E9:19
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EB00D002F8405B2F08638CFC0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9dd637c9-106e-3584-b009-f41669402649.roa
Signing time:             Sat 23 Jul 2022 12:00:00 +0000
ROA not before:           Sat 23 Jul 2022 12:00:00 +0000
ROA not after:            Tue 26 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b0:0d:00:2f:84:05:b2:f0:86:38:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul 23 12:00:00 2022 GMT
            Not After : Jul 26 04:00:00 2022 GMT
        Subject: CN=daf0a691-79b9-4999-905b-91564c1fc6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:9c:03:35:a2:43:6c:86:9f:ae:60:79:c4:
                    f8:ef:19:4b:49:2c:d5:f1:ea:68:ce:5b:b5:00:69:
                    21:8a:37:22:67:55:93:ad:1c:38:bd:ac:22:0a:30:
                    26:6c:ac:6b:89:6a:1e:87:57:2f:d1:9a:81:cd:c3:
                    68:aa:4b:70:fe:59:6d:19:88:c3:e5:fc:81:01:30:
                    8c:cd:0c:b4:20:15:62:5e:f8:c7:85:40:f2:f9:e5:
                    86:c3:96:f0:fa:2d:8e:cc:df:d0:3a:32:dd:74:2e:
                    48:c4:16:6c:71:9b:ad:c2:bd:24:0f:a8:87:e5:68:
                    22:f7:cd:1f:a9:21:1b:d3:ff:d5:e3:ce:47:29:b3:
                    ef:23:e7:5c:22:90:4c:93:15:d8:25:ad:92:57:e0:
                    ea:1d:c9:73:53:2a:b5:b9:75:6e:18:82:48:9d:e2:
                    53:54:21:b5:94:0f:ae:2c:e2:4e:1a:96:45:74:ba:
                    bf:75:06:b7:53:fa:8d:c8:f1:fc:55:2c:8b:ad:e5:
                    90:ce:fa:1d:f5:b7:1f:46:59:51:47:9f:5c:de:af:
                    ad:2e:8f:5b:73:0a:75:8a:c8:da:a4:c7:b0:33:65:
                    e9:c4:ad:84:c8:5c:16:7b:59:80:3a:fc:d8:04:dd:
                    9f:e0:a3:3c:b2:d9:b0:7e:e7:2e:f7:a3:53:e8:6c:
                    28:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:05:6A:63:98:34:A3:67:67:27:47:D4:FF:F2:A6:F6:F4:56:E9:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9dd637c9-106e-3584-b009-f41669402649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:e2:37:42:81:55:ca:78:d1:2e:cf:a5:90:88:7c:32:6a:ff:
         7b:4d:73:71:9d:d0:f4:ae:b9:eb:24:67:16:ea:c6:7a:8c:43:
         3a:f3:47:0a:94:5d:13:dc:a3:97:98:39:af:01:17:bb:10:7a:
         12:1f:44:e2:aa:11:54:8b:aa:3d:cd:6c:a7:de:87:f5:22:44:
         f0:6f:99:4d:6b:dd:9b:96:8b:9f:3b:9a:de:16:9b:7a:de:6d:
         05:88:ef:08:17:44:48:62:38:2e:97:89:09:d0:99:a1:69:4f:
         82:5d:21:53:5d:f6:50:2c:ee:2a:39:ac:dd:fb:7f:cc:78:95:
         74:7d:ee:1d:45:47:d9:72:44:ed:37:bf:36:dc:fb:26:74:50:
         f0:0b:99:7f:36:0f:c8:ad:5b:9a:0b:6a:36:f1:cd:69:8d:8f:
         a5:f9:aa:34:93:ad:1f:c8:c5:5b:26:6c:de:ad:ea:cf:76:f2:
         3e:ea:ab:40:5d:1c:e4:24:9d:bb:39:bf:0d:2a:c8:4e:2d:5b:
         3e:bc:0a:11:b6:9c:c5:b2:80:ae:60:a5:97:34:60:07:3f:47:
         f6:d4:41:aa:ef:68:8d:b5:f4:8a:fb:db:4d:31:61:c1:d8:48:
         58:85:79:aa:f1:b9:69:4a:28:45:74:99:60:b8:6e:53:18:4c:
         9f:57:7f:93
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD6wDQAvhAWy8IY4z8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDcyMzEyMDAwMFoXDTIyMDcyNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZGFmMGE2OTEtNzliOS00OTk5LTkwNWItOTE1NjRjMWZjNmQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp+cAzWiQ2yGn65gecT47xlLSSzV8epozlu1
AGkhijciZ1WTrRw4vawiCjAmbKxriWoeh1cv0ZqBzcNoqktw/lltGYjD5fyBATCM
zQy0IBViXvjHhUDy+eWGw5bw+i2OzN/QOjLddC5IxBZscZutwr0kD6iH5Wgi980f
qSEb0//V485HKbPvI+dcIpBMkxXYJa2SV+DqHclzUyq1uXVuGIJIneJTVCG1lA+u
LOJOGpZFdLq/dQa3U/qNyPH8VSyLreWQzvod9bcfRllRR59c3q+tLo9bcwp1isja
pMewM2XpxK2EyFwWe1mAOvzYBN2f4KM8stmwfucu96NT6GwoBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLoFamOYNKNnZydH1P/ypvb0VukZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvOWRkNjM3YzktMTA2ZS0z
NTg0LWIwMDktZjQxNjY5NDAyNjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHHiN0KBVcp40S7PpZCIfDJq/3tNc3Gd0PSuueskZxbqxnqMQzrz
RwqUXRPco5eYOa8BF7sQehIfROKqEVSLqj3NbKfeh/UiRPBvmU1r3ZuWi587mt4W
m3rebQWI7wgXREhiOC6XiQnQmaFpT4JdIVNd9lAs7io5rN37f8x4lXR97h1FR9ly
RO03vzbc+yZ0UPALmX82D8itW5oLajbxzWmNj6X5qjSTrR/IxVsmbN6t6s928j7q
q0BdHOQknbs5vw0qyE4tWz68ChG2nMWygK5gpZc0YAc/R/bUQarvaI219Ir7200x
YcHYSFiFearxuWlKKEV0mWC4blMYTJ9Xf5M=
-----END CERTIFICATE-----