Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ad6d22e3-a02c-3288-b38b-8cf272a7e145.roa
File:                     ad6d22e3-a02c-3288-b38b-8cf272a7e145.roa (raw, json)
Hash identifier:          PVK+8Mfifowj7GrIeQxJcTK7IfYh/2Yro2xStVyNOIM=
Subject key identifier:   F1:B9:7B:CA:AD:01:1F:FD:A5:F8:03:D8:8C:E6:8F:EB:46:43:39:6F
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F432858402184853FB9EC6BF98318F400
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ad6d22e3-a02c-3288-b38b-8cf272a7e145.roa
Signing time:             Sat 03 Dec 2022 12:00:00 +0000
ROA not before:           Sat 03 Dec 2022 12:00:00 +0000
ROA not after:            Tue 06 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:21:84:85:3f:b9:ec:6b:f9:83:18:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Dec  3 12:00:00 2022 GMT
            Not After : Dec  6 05:00:00 2022 GMT
        Subject: CN=2dd2871c-e0aa-43b6-aae4-e81699df98f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:da:28:ce:59:3a:d3:26:dc:b9:12:ec:97:
                    29:6c:9d:36:ec:9c:45:64:2c:d0:a3:4e:99:f7:78:
                    16:53:52:2b:2e:71:ef:33:b4:82:c9:1d:e7:56:f4:
                    69:d3:07:a1:96:4c:99:7d:b3:96:d9:26:9c:1b:40:
                    f4:3c:a3:b9:33:c0:49:ac:53:6f:9a:fc:2e:fd:3f:
                    f3:a8:ca:03:fe:7a:2a:12:b3:7b:eb:b5:f6:4c:48:
                    1e:d5:91:ab:9a:6c:32:fa:1c:40:4e:d1:5b:0e:25:
                    90:bd:c6:ca:38:bc:f8:37:d3:81:1b:2d:24:1f:f2:
                    e9:b5:03:27:2b:60:85:41:f5:e6:ab:af:ff:7c:d3:
                    10:04:64:20:f6:c5:ac:1d:b5:69:1a:df:fa:12:56:
                    2e:8b:bb:a9:4e:b4:dd:8b:e1:d4:1a:c9:f6:98:29:
                    74:e5:23:9d:dc:bc:40:dc:09:63:14:a1:47:17:dd:
                    39:9c:87:2a:dc:44:bc:89:13:90:7c:88:83:03:16:
                    d4:44:e4:08:63:e7:fa:cf:72:d4:54:b1:0e:92:66:
                    eb:85:09:7e:f3:90:d4:0a:79:98:22:b6:a7:b0:fb:
                    f4:cc:2c:98:2d:1a:da:31:84:5a:55:c8:d2:49:e2:
                    06:9e:bb:00:48:56:c9:e9:07:b6:a7:d8:a3:02:5b:
                    09:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B9:7B:CA:AD:01:1F:FD:A5:F8:03:D8:8C:E6:8F:EB:46:43:39:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ad6d22e3-a02c-3288-b38b-8cf272a7e145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:8e:8d:71:83:4d:ab:71:df:8f:d7:6f:db:3c:c4:cf:68:29:
         f0:01:71:e4:0d:4b:fa:79:a7:d1:5e:62:f5:6e:19:f7:f0:19:
         bc:1d:bb:80:2f:22:ac:f2:9a:a9:c9:b2:73:7f:c7:c2:03:b2:
         c0:00:1b:8c:13:66:c1:9d:42:08:a2:50:cb:f9:c6:ae:1a:8a:
         dc:8f:f5:fa:24:77:83:5c:6a:22:dc:1d:3e:eb:4a:82:74:62:
         7f:ad:cf:35:0b:41:e4:44:b5:c5:c9:0d:59:bf:39:5c:ce:b5:
         7f:e8:62:61:ff:b8:07:82:09:79:58:2e:4e:a9:0e:ad:56:ef:
         aa:9e:ec:77:a3:4a:07:ab:27:b4:59:a5:68:d1:0a:5b:99:18:
         dd:70:bc:14:c5:d1:01:90:8a:2e:01:52:da:74:05:48:99:2b:
         b3:5f:ed:1c:c0:2d:8f:82:83:e9:c1:5c:46:96:c1:ee:02:30:
         5e:e5:d0:33:0f:4d:5e:e5:5c:81:a3:66:33:7c:7c:6d:8c:65:
         8c:b3:ac:8a:1f:d5:b2:5d:0f:8d:73:91:6b:1d:a3:66:5a:0e:
         5f:1a:07:39:39:20:4a:ee:3b:c3:f7:cc:de:0b:50:dc:de:99:
         fe:c4:1d:c2:7d:13:df:e1:c3:40:ff:b8:a2:26:02:ae:3b:70:
         80:de:6f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----