Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a70522a0-3332-3ce8-9ee0-814d5f192f83.roa
File:                     a70522a0-3332-3ce8-9ee0-814d5f192f83.roa (raw, json)
Hash identifier:          VHgXatqOMKhhR6E2lsvTX2lF2It+WcF0b9KYSahMTpk=
Subject key identifier:   99:02:DD:A6:7D:8D:31:D5:83:B0:FF:54:5E:95:A8:10:53:ED:CA:5F
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CCA8A76177D9B0B1900644680
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a70522a0-3332-3ce8-9ee0-814d5f192f83.roa
Signing time:             Mon 31 Jan 2022 05:00:00 +0000
ROA not before:           Mon 31 Jan 2022 05:00:00 +0000
ROA not after:            Wed 02 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:ca:8a:76:17:7d:9b:0b:19:00:64:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jan 31 05:00:00 2022 GMT
            Not After : Feb  2 05:00:00 2022 GMT
        Subject: CN=f4d251e8-e50a-4f1c-94f7-5037122abde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:44:f3:dd:33:ab:00:bf:0d:25:7d:ef:85:
                    8c:9c:f5:4f:1f:99:ae:19:36:de:a3:d0:37:03:46:
                    b6:6c:d9:be:46:e0:3b:56:c5:0e:29:67:d2:e1:19:
                    5d:71:80:a9:83:90:b5:ef:51:6d:6e:28:6c:32:be:
                    76:0c:e6:2e:0e:cd:9a:25:88:62:b6:82:df:5d:eb:
                    18:8b:b7:3a:27:74:90:1e:c1:16:7d:0e:22:e4:36:
                    6c:9e:a3:3f:5c:ad:33:b3:bd:ff:cc:52:f5:57:50:
                    2e:36:7c:2d:65:08:12:a7:65:8f:45:aa:c1:89:b8:
                    a6:82:0e:27:23:7c:06:ad:8a:45:43:5a:7c:be:8d:
                    62:ef:22:b1:91:d9:7f:82:4f:5c:1d:e2:da:de:c9:
                    ea:ca:29:30:95:60:45:91:2a:72:8b:ae:16:0e:3a:
                    f5:76:1e:35:43:e9:5e:fb:4a:b7:bf:f5:a0:8c:b0:
                    92:86:34:eb:9e:b4:27:fb:e1:ce:28:29:e0:47:d9:
                    46:22:d7:4c:ae:b3:d7:a9:5e:71:08:55:10:b6:52:
                    6d:ac:9f:2a:68:e9:d0:13:4a:88:02:ad:d0:bd:52:
                    8b:74:2d:df:35:6d:97:56:6a:f6:07:51:55:ae:c8:
                    7c:3b:59:34:37:7e:c8:d4:d8:2e:05:e2:37:fd:dd:
                    dc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:02:DD:A6:7D:8D:31:D5:83:B0:FF:54:5E:95:A8:10:53:ED:CA:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a70522a0-3332-3ce8-9ee0-814d5f192f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:aa:f9:d3:5d:6c:c2:56:55:a6:85:4c:db:26:a0:a6:c2:09:
         31:49:47:d2:c4:0b:02:cc:b7:83:a6:e8:86:c9:79:91:45:e5:
         96:88:a8:85:21:e7:51:65:97:f3:cb:c7:82:92:b1:5a:e4:6a:
         c6:d6:92:18:bd:9a:91:56:3b:35:96:c0:fa:d7:5e:22:b6:e8:
         c6:a2:d1:3f:7b:62:72:96:79:8b:f0:69:65:18:c8:6e:97:97:
         ab:30:9c:21:47:59:ce:ac:f4:86:38:0d:42:fb:69:21:05:f2:
         3d:74:6d:a9:df:df:84:f6:a5:f2:51:65:ab:34:85:f3:f3:b6:
         51:ae:ef:57:92:f7:4e:fa:d9:cc:ba:e0:e6:28:78:b4:82:7d:
         31:85:4c:9b:9a:79:5a:df:2d:9a:73:a5:a2:a4:ce:30:77:00:
         2e:f3:0c:dc:d2:5c:26:a5:6f:45:ea:21:a9:99:98:a3:69:d9:
         62:a1:fc:05:7f:38:24:ae:a5:65:61:1f:ca:d7:5d:c4:95:b2:
         a7:66:0a:52:c2:e3:af:9e:ff:a7:ba:f2:cc:6d:b5:2f:99:ce:
         db:df:d4:cd:db:9a:2b:68:31:65:1d:6e:d5:d4:f3:63:c2:a8:
         22:fb:7a:b1:20:02:66:5b:b5:e9:cf:ce:6b:2d:38:78:a4:1d:
         4e:4a:9c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----