Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a67f12b6-99f2-31c8-b447-0ab4cf2bf85e.roa
File:                     a67f12b6-99f2-31c8-b447-0ab4cf2bf85e.roa (raw, json)
Hash identifier:          Ig6FBHgagG6iL4IcSIxK4vD/8fjl4XYzg8Ix6tBKuUA=
Subject key identifier:   53:4E:9C:58:4D:9E:74:1B:D4:01:23:0B:53:BB:E0:A1:0D:4A:30:E1
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FB55480A7E30B7E6639E8C480
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a67f12b6-99f2-31c8-b447-0ab4cf2bf85e.roa
Signing time:             Tue 25 Oct 2022 12:00:00 +0000
ROA not before:           Tue 25 Oct 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b5:54:80:a7:e3:0b:7e:66:39:e8:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 25 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=6249cbfd-321a-477a-a30a-1e620d0aaf3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c6:e9:93:c5:9e:0c:65:cd:0b:fa:1e:a5:4f:
                    c4:06:ff:91:7a:b4:fe:44:a5:7b:8c:bc:e5:f2:35:
                    cb:64:1c:7d:1f:f2:5a:55:c7:d1:91:6c:0b:d3:f7:
                    8a:ff:4b:27:53:b0:21:ac:96:de:43:f2:2c:b0:48:
                    a3:58:0c:71:1f:4d:3d:c2:2b:3e:88:07:b0:af:29:
                    f2:7d:94:d1:38:75:b3:f3:6b:c9:7e:78:0b:ff:e6:
                    df:21:9e:e9:5f:15:3c:69:d3:32:ba:3c:43:b8:2b:
                    83:b5:4f:d6:40:ac:36:76:90:a6:ec:1e:9b:23:16:
                    45:3c:20:ab:7c:7b:9e:f2:05:9c:8a:23:3d:04:17:
                    8c:4e:52:0c:43:0b:f4:c8:21:71:78:50:b7:e1:33:
                    80:89:a2:3e:94:bd:1d:9f:30:dc:8f:fe:f3:9e:ca:
                    d3:90:51:70:60:95:70:86:69:ab:62:b3:a3:69:02:
                    cb:32:55:39:ed:71:d1:72:0f:8f:1a:00:7f:2c:c0:
                    f2:9e:eb:8d:82:2d:6f:9c:22:7f:49:d9:17:ee:3d:
                    8f:47:ae:95:c4:15:c6:79:79:9d:8f:c7:d4:c8:3a:
                    d7:fa:7b:35:b4:0d:9d:01:f7:98:b1:3a:27:94:08:
                    46:02:f4:19:bd:4a:07:4a:19:04:0a:0e:33:17:8c:
                    af:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4E:9C:58:4D:9E:74:1B:D4:01:23:0B:53:BB:E0:A1:0D:4A:30:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a67f12b6-99f2-31c8-b447-0ab4cf2bf85e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:6a:41:cd:12:a6:c2:cb:52:3e:5c:e3:40:7c:6d:30:6e:5f:
         f6:4a:6d:c2:f3:52:8e:c8:e5:fb:0c:97:37:bd:31:12:82:f3:
         1a:43:ad:dc:2a:83:65:85:c8:ad:61:1b:44:bc:f7:84:83:ad:
         34:cb:90:87:05:e3:73:15:35:93:5e:2b:85:28:76:5f:e8:02:
         31:7b:56:17:b4:a2:d3:7c:27:2e:db:b7:1d:91:9e:93:df:53:
         31:24:1a:c9:d8:3c:fa:82:25:01:1b:18:f7:5c:18:a3:4c:b3:
         54:43:e0:52:cb:8c:13:91:56:01:9d:0f:08:a2:96:22:f1:11:
         b9:9e:3b:da:72:6a:69:9d:e4:f4:c4:19:12:b2:2d:50:01:06:
         d6:c8:7d:b8:f4:98:b9:26:04:de:d2:d7:72:f2:ed:22:8c:39:
         4a:81:80:3f:97:14:f7:b8:6b:da:33:61:1a:aa:fa:ec:dc:6d:
         50:a5:8b:f9:2e:41:7a:54:a2:d3:e4:3a:e9:3b:3e:41:bb:24:
         e1:c4:26:1f:96:b4:21:bf:a5:60:83:7e:cb:da:5c:db:92:36:
         d3:19:28:4e:2a:fd:29:46:f7:87:dc:70:ac:5a:60:63:46:3a:
         25:28:9a:70:9b:6a:1a:2c:83:ce:aa:a0:7e:88:e8:bf:93:09:
         a5:f0:40:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----