Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a23b0b06-8335-3e40-ab92-5d543f199546.roa
File:                     a23b0b06-8335-3e40-ab92-5d543f199546.roa (raw, json)
Hash identifier:          1Lz97Vuhwn3U0e5Nl4OWdq5hjOmqcOmSPbdmLT2jQvM=
Subject key identifier:   24:BA:B1:5A:A8:EB:25:B9:0C:99:41:92:C3:4E:56:7B:A3:F5:DD:D4
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FD139E7A0342C88D78362BC40
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a23b0b06-8335-3e40-ab92-5d543f199546.roa
Signing time:             Fri 04 Nov 2022 12:00:00 +0000
ROA not before:           Fri 04 Nov 2022 12:00:00 +0000
ROA not after:            Mon 07 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d1:39:e7:a0:34:2c:88:d7:83:62:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  4 12:00:00 2022 GMT
            Not After : Nov  7 05:00:00 2022 GMT
        Subject: CN=6ffaf49e-e3b7-4d17-9704-13aae78f398d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1c:62:8c:7a:3c:75:d6:95:9b:cf:d7:be:d4:
                    68:32:2d:1d:9f:9a:51:a9:3a:d8:6f:42:24:48:1d:
                    90:cb:b2:f5:bf:ca:97:79:82:c5:7f:a9:6f:fc:ad:
                    03:c0:fd:dd:d0:43:23:b3:06:92:e3:d6:e0:8f:db:
                    cd:64:0a:99:ee:3b:4c:75:ff:4b:8a:f0:6d:24:9f:
                    93:7b:bf:87:cb:2d:12:63:01:e3:68:18:98:a5:84:
                    32:b1:8d:ec:cd:87:01:31:8f:55:06:0d:74:be:af:
                    b1:bc:fd:3e:25:70:a6:b2:66:75:03:6d:d9:cc:cd:
                    7c:60:55:e4:42:e4:93:ee:fc:13:7d:cd:40:f3:1e:
                    e8:9b:a1:25:d5:77:20:21:ce:c5:b0:eb:24:40:32:
                    a0:28:00:ce:63:a9:b6:6c:c2:65:37:ce:f8:f9:a4:
                    37:b2:77:80:bd:2e:47:12:50:6b:4f:6e:72:41:7d:
                    39:3a:17:5b:13:d0:73:a2:25:e4:47:06:34:f4:14:
                    96:d5:72:1d:2c:f1:86:8b:9e:21:8f:14:25:04:6b:
                    56:b2:40:06:71:c7:35:d4:07:89:c8:3e:7b:f5:fb:
                    08:55:c9:9c:b2:81:0a:bf:69:0a:a7:a5:15:a6:fb:
                    d2:3d:e4:be:ab:03:54:40:1b:4a:67:7c:50:d7:f1:
                    84:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BA:B1:5A:A8:EB:25:B9:0C:99:41:92:C3:4E:56:7B:A3:F5:DD:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a23b0b06-8335-3e40-ab92-5d543f199546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:32:d6:f1:09:d2:5d:0e:f1:75:71:ae:51:95:fe:68:80:00:
         13:78:0a:13:43:cc:bf:2e:94:51:6a:f0:e3:8f:a4:40:59:7c:
         30:9d:ab:be:ed:6f:dd:2d:46:51:1f:c4:22:42:37:2d:c1:20:
         fd:4f:95:2d:6a:ac:15:da:cf:23:03:15:3d:2c:2c:72:27:3f:
         b3:3e:af:da:21:ee:cb:32:b2:e3:d8:d1:47:44:8c:cb:fb:f4:
         d8:8b:83:73:ea:28:39:06:19:43:c8:2a:1e:a1:59:6a:93:2a:
         5e:ee:dc:ea:ba:ba:66:36:b9:24:8f:a6:34:df:c0:8c:ec:0a:
         2e:b6:73:bb:63:86:24:09:2b:be:ba:f6:20:95:1e:c7:2a:c3:
         ae:0f:69:92:2d:ea:af:ec:a1:ac:9b:3f:e1:4c:42:2a:54:6b:
         41:2f:33:8d:c0:71:9f:1e:83:77:9f:7c:69:5b:69:61:79:8b:
         ec:64:d5:16:71:3a:a1:65:5e:ea:3c:9d:df:c2:be:7b:02:43:
         56:91:11:39:a7:cd:c7:38:a2:cd:a4:93:6f:60:21:ae:50:2e:
         bf:fd:71:b6:44:3b:26:0d:c4:db:7a:36:e5:f5:f2:89:90:97:
         7f:ef:66:ef:d1:7a:a4:a2:17:6c:74:55:79:a9:b2:e2:f3:13:
         ef:91:98:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----