Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a50bba48-7196-30d7-b6d3-6fde6f1e95c1.roa
File:                     a50bba48-7196-30d7-b6d3-6fde6f1e95c1.roa (raw, json)
Hash identifier:          H/ZXnDKwgJv+vOS8n+sVYpEWZFr0p8ejaAC8+bCnRnI=
Subject key identifier:   58:97:84:56:05:6F:44:53:05:9E:BB:CF:DD:99:07:38:EA:3C:7A:2C
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EFD76A79D6D9F54FCFE2FC140
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a50bba48-7196-30d7-b6d3-6fde6f1e95c1.roa
Signing time:             Sat 20 Aug 2022 12:00:00 +0000
ROA not before:           Sat 20 Aug 2022 12:00:00 +0000
ROA not after:            Tue 23 Aug 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:fd:76:a7:9d:6d:9f:54:fc:fe:2f:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Aug 20 12:00:00 2022 GMT
            Not After : Aug 23 04:00:00 2022 GMT
        Subject: CN=ecb797ea-e9bb-42b7-a184-25c6b23fd66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:5e:f7:7c:f8:9a:22:76:7f:25:1a:6f:e2:
                    79:a2:27:b9:66:fe:31:aa:75:ad:44:8c:fa:78:d5:
                    55:9c:fe:9d:6c:86:68:e8:42:7e:33:ae:37:1a:14:
                    95:f8:d9:aa:2a:24:0d:da:20:48:69:78:86:45:00:
                    5d:9b:e5:87:46:9e:98:b4:ba:c5:75:f8:5d:0c:3e:
                    c6:49:d4:25:93:3f:bf:02:2f:73:ec:cf:dc:b1:5c:
                    99:99:00:f5:4f:bb:c0:d0:28:26:1d:e1:6e:1a:68:
                    3a:9f:d6:54:8c:10:03:a5:da:f6:c1:08:f3:af:5a:
                    aa:b8:a3:f6:c5:9b:67:6f:17:58:d9:63:c3:8d:bf:
                    bc:5b:72:b0:c8:63:49:e3:28:48:41:2d:57:78:f6:
                    12:1b:13:71:d5:e5:ff:9c:82:1c:30:b1:02:08:37:
                    57:95:43:2f:80:1c:87:77:dd:2b:8c:0b:33:cc:46:
                    9c:28:e8:c9:45:6b:52:dc:ff:14:0b:03:c9:5d:bc:
                    a8:48:72:b6:2b:8b:bc:88:b1:4a:a5:cf:ed:f4:d0:
                    ba:4a:39:e7:d7:00:60:1f:fd:77:53:7b:35:ee:0e:
                    cb:be:30:25:c8:29:c1:1f:8c:36:f0:6d:7b:04:f5:
                    3d:66:2b:ef:fb:69:ce:65:10:66:5e:73:66:25:1e:
                    e0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:97:84:56:05:6F:44:53:05:9E:BB:CF:DD:99:07:38:EA:3C:7A:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a50bba48-7196-30d7-b6d3-6fde6f1e95c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:2c:d3:63:36:1c:eb:8c:52:ee:2b:18:81:51:f1:75:22:41:
         e2:d7:cd:b3:36:9a:c7:63:d3:c0:5d:f6:d6:40:ea:74:52:3f:
         44:6a:d5:a9:cd:69:39:00:0d:2b:e3:49:1d:6f:a7:c5:55:47:
         7e:d3:26:06:6a:d0:b7:ed:72:f5:c4:35:2b:a6:bc:32:0d:df:
         ee:63:a8:f2:5e:40:ae:17:d1:b8:ec:ed:84:4d:f3:6d:e0:b0:
         46:ff:51:ff:c6:37:72:ad:1f:2a:5f:d4:ee:6e:ed:b6:b2:f7:
         cb:08:20:36:75:59:69:fd:36:70:bb:8f:a8:11:90:86:d3:1a:
         b6:a9:c5:b0:29:c1:6f:73:cc:b0:07:b1:8e:f6:5d:10:5b:c1:
         86:87:fb:f1:64:c9:91:8a:db:21:40:bb:b9:19:c9:9c:c8:5a:
         ca:e7:ea:85:4f:ff:c3:23:e4:2e:0d:7a:1e:d1:a5:7c:e9:78:
         a6:92:ef:24:61:ef:d9:33:9c:63:70:6d:eb:ae:af:44:b2:9d:
         1e:52:1a:e1:cf:1a:0a:93:f1:2e:5e:0a:93:b8:c8:c6:d0:8b:
         98:39:d2:0c:aa:1b:ce:f3:9d:0b:a3:f1:78:40:73:da:5b:47:
         eb:27:23:76:4c:ca:a3:b5:60:32:84:f0:19:fc:9b:ff:a8:0d:
         10:2f:8b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----