Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a41e91cb-1f6e-3de9-9a66-4e983e92cfcc.roa
File:                     a41e91cb-1f6e-3de9-9a66-4e983e92cfcc.roa (raw, json)
Hash identifier:          kHE0BudBqa6VhNRXePSGppO/QM1cFIgRJzhAZ3e2j84=
Subject key identifier:   FF:24:B4:0E:1E:88:90:48:DA:FA:D7:8D:23:FC:23:82:45:76:22:6D
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CB6DA50402A5082731C861F40
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a41e91cb-1f6e-3de9-9a66-4e983e92cfcc.roa
Signing time:             Tue 05 Nov 2019 05:00:00 +0000
ROA not before:           Tue 05 Nov 2019 05:00:00 +0000
ROA not after:            Mon 29 Apr 2024 04:00:00 +0000
asID:                     8987
IP address blocks:        2605:9cc0:40c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b6:da:50:40:2a:50:82:73:1c:86:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  5 05:00:00 2019 GMT
            Not After : Apr 29 04:00:00 2024 GMT
        Subject: CN=56244dd2-2ea2-4d3c-add2-5d3a0436f4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4f:8b:e5:c7:78:2d:84:87:57:2d:03:88:80:
                    18:e7:4f:04:ad:4e:a6:13:20:03:f5:5b:6c:69:e5:
                    fa:9b:f8:b8:7e:38:ed:fc:5b:84:50:84:4b:54:9e:
                    58:c5:a0:0f:09:82:35:80:07:a4:62:c4:2f:10:22:
                    76:d9:1c:aa:cb:de:8a:03:d0:bc:c6:03:f4:9b:be:
                    ce:fa:04:c4:09:c5:78:bf:86:22:35:f3:b5:7c:3c:
                    0a:10:13:95:2f:d2:d3:0f:bf:27:27:d8:b6:2e:af:
                    ca:c0:9f:98:94:5c:51:e3:22:32:56:35:0a:53:35:
                    43:73:2b:71:50:48:a3:0b:1c:87:90:ca:ed:06:c8:
                    0a:e6:38:82:c0:b7:aa:1d:34:05:17:f8:41:5e:76:
                    02:c2:ec:80:41:9a:79:9d:70:42:78:04:05:71:27:
                    07:33:1d:60:f0:8d:63:40:84:40:ad:54:1f:bc:4e:
                    d6:a2:6e:7e:dd:4b:3f:03:a3:bd:1d:9a:02:d7:ff:
                    0b:b4:94:ec:0c:95:5e:ee:1a:69:90:84:6b:5d:cf:
                    45:f9:6e:dc:09:4a:74:cc:ec:15:9c:3a:44:8a:d6:
                    9f:59:ae:64:39:6b:96:20:45:9b:44:a7:d8:c2:0f:
                    d3:39:05:c6:4b:ee:64:46:f6:0b:c1:a2:d5:99:6a:
                    f4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:24:B4:0E:1E:88:90:48:DA:FA:D7:8D:23:FC:23:82:45:76:22:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a41e91cb-1f6e-3de9-9a66-4e983e92cfcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:40c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:41:99:83:8a:d5:a2:4c:54:77:21:00:38:57:ac:9a:3d:2c:
         0d:19:a4:00:f5:1e:3e:71:2e:dd:8c:b2:e5:d7:12:2b:5e:40:
         bb:53:2d:72:46:5c:e1:8d:f8:42:2f:8c:e1:4f:34:86:ad:ac:
         01:32:cd:2f:12:18:44:2d:a4:ba:48:ec:7d:11:8c:54:b7:29:
         eb:ba:49:16:66:e0:d0:a7:e5:26:31:2e:49:ab:c3:e5:50:72:
         e6:63:44:81:5d:a7:a6:dd:c2:15:a7:68:cd:45:68:0c:a7:9a:
         ce:23:14:ca:d2:4e:50:82:c6:59:0d:b1:0f:07:f1:97:55:f7:
         ce:de:fb:7b:73:5f:d6:4b:f7:58:cc:dd:cf:7f:9b:75:5d:ec:
         44:9e:8b:5c:3e:fe:31:38:7e:f6:19:72:0b:56:3b:c2:de:a0:
         ea:ec:76:dd:fb:0c:66:90:25:2b:66:4d:5b:dd:df:6d:48:58:
         62:45:e7:b8:c7:6e:02:59:6d:45:32:41:d7:e7:f0:df:d6:0d:
         e7:66:4e:76:c7:01:44:4e:87:04:2d:5a:85:ff:0b:0a:43:51:
         aa:be:1c:84:08:75:2b:57:05:83:98:9e:6a:ac:25:ec:59:fe:
         60:da:2f:88:3f:2f:0f:f3:0a:92:24:8c:6c:be:ac:fc:5a:71:
         bd:db:60:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----