Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/aefbe1d3-eb1c-34d1-abb4-9d4e8021bfef.roa
File:                     aefbe1d3-eb1c-34d1-abb4-9d4e8021bfef.roa (raw, json)
Hash identifier:          sTssRGRuT3DAM5sRxcQQmg1C/reQkhbdUHqTNLlRhVk=
Subject key identifier:   7E:16:93:54:26:F7:02:0C:95:62:5B:0E:FB:78:95:31:32:06:6F:26
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F5BE343DCD1CF52DECF4BB600
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/aefbe1d3-eb1c-34d1-abb4-9d4e8021bfef.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Mon 26 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:358::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5b:e3:43:dc:d1:cf:52:de:cf:4b:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Sep 26 04:00:00 2022 GMT
        Subject: CN=c727b6e4-1b53-4c42-b640-7c3163014e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:33:55:3e:e3:f5:e9:80:54:e7:cc:bd:a0:96:
                    46:ba:04:9f:65:31:87:ce:6b:09:c1:96:83:09:7e:
                    f3:16:29:48:b2:b6:79:4b:4e:cf:2d:06:87:af:3f:
                    ea:ed:b2:63:2c:9e:b6:01:14:22:91:f9:37:a4:2c:
                    eb:f4:75:7e:53:50:ba:fc:f0:1f:fa:f4:b7:29:71:
                    3a:fb:5d:36:7d:83:ec:79:4e:dc:ae:c6:e7:5b:a2:
                    fd:5f:2f:62:49:bf:61:17:73:de:1e:92:58:52:67:
                    6c:75:0f:0d:52:66:00:12:3c:30:9c:7e:28:45:85:
                    7f:65:aa:2f:8c:23:e4:c4:c2:aa:f8:35:30:bc:51:
                    b5:bf:7c:89:ed:26:08:a8:bb:84:64:14:2b:57:5e:
                    1f:17:9f:b1:69:f0:da:d7:f4:23:a0:4d:3f:e3:28:
                    cc:75:29:cd:20:65:c5:af:c3:b3:43:3e:4e:f4:a5:
                    a8:e1:0a:8b:70:c7:56:ae:b9:95:7d:6a:4d:6f:ca:
                    30:e2:ae:2e:30:b3:aa:85:68:0c:97:0c:2b:db:96:
                    58:b1:ca:0f:44:ae:6e:af:61:bc:3f:00:60:da:11:
                    58:3e:e0:5b:f7:ae:a2:91:a5:fb:01:f9:c9:ec:21:
                    91:05:c0:2e:cd:a2:c5:9b:6a:d4:ec:8f:ba:02:a0:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:16:93:54:26:F7:02:0C:95:62:5B:0E:FB:78:95:31:32:06:6F:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/aefbe1d3-eb1c-34d1-abb4-9d4e8021bfef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:358::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:3f:5e:e2:1a:ba:be:bd:44:c6:05:36:c5:87:ee:1a:42:bd:
         3b:82:3b:5b:a5:9f:c9:86:cb:39:19:17:98:2d:89:19:c8:34:
         0f:bf:3a:0e:89:82:1f:23:8a:5f:eb:5b:3a:55:cd:d2:fd:57:
         6c:e7:45:ae:ca:02:bf:f1:04:ab:39:fb:ad:8e:db:73:51:d8:
         08:67:5f:f9:d6:a4:d6:cd:b0:57:b7:98:9b:8b:14:8e:27:34:
         7d:20:dc:11:18:14:23:ff:26:ad:2e:dd:5c:e6:73:64:b7:80:
         57:78:c7:a5:f7:db:d9:25:f2:dd:50:19:b0:f7:e4:68:75:5e:
         32:fe:8e:f6:c4:67:38:66:9f:2c:a3:cd:31:8e:b0:0e:45:1f:
         f0:7a:78:03:b1:0c:61:f9:a9:6b:8f:de:ab:cb:fd:c5:e2:03:
         68:f9:2c:3d:e8:99:57:24:0c:66:8a:23:14:41:7e:d2:d5:fa:
         9e:1a:08:34:53:e6:33:6f:5c:a2:64:2e:a9:5a:ec:d8:d1:cd:
         bc:31:f5:0e:db:2d:66:82:2a:36:a5:42:75:8c:dc:06:51:1f:
         66:a2:6d:e7:37:30:00:38:73:00:8e:c4:ed:7d:9e:22:71:79:
         59:66:e7:9e:7d:2a:4c:01:ba:7a:72:f4:78:b9:8b:98:26:9a:
         c8:ef:ef:97
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD9b40Pc0c9S3s9LtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDkyMzEyMDAwMFoXDTIyMDkyNjA0MDAwMFowLzEtMCsGA1UEAxMk
YzcyN2I2ZTQtMWI1My00YzQyLWI2NDAtN2MzMTYzMDE0ZTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDNVPuP16YBU58y9oJZGugSfZTGHzmsJwZaD
CX7zFilIsrZ5S07PLQaHrz/q7bJjLJ62ARQikfk3pCzr9HV+U1C6/PAf+vS3KXE6
+102fYPseU7crsbnW6L9Xy9iSb9hF3PeHpJYUmdsdQ8NUmYAEjwwnH4oRYV/Zaov
jCPkxMKq+DUwvFG1v3yJ7SYIqLuEZBQrV14fF5+xafDa1/QjoE0/4yjMdSnNIGXF
r8OzQz5O9KWo4QqLcMdWrrmVfWpNb8ow4q4uMLOqhWgMlwwr25ZYscoPRK5ur2G8
PwBg2hFYPuBb966ikaX7AfnJ7CGRBcAuzaLFm2rU7I+6AqAzhwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH4Wk1Qm9wIMlWJbDvt4lTEyBm8mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvYWVmYmUxZDMtZWIxYy0z
NGQxLWFiYjQtOWQ0ZTgwMjFiZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHQ/XuIaur69RMYFNsWH7hpCvTuCO1uln8mGyzkZF5gtiRnINA+/
Og6Jgh8jil/rWzpVzdL9V2znRa7KAr/xBKs5+62O23NR2AhnX/nWpNbNsFe3mJuL
FI4nNH0g3BEYFCP/Jq0u3Vzmc2S3gFd4x6X329kl8t1QGbD35Gh1XjL+jvbEZzhm
nyyjzTGOsA5FH/B6eAOxDGH5qWuP3qvL/cXiA2j5LD3omVckDGaKIxRBftLV+p4a
CDRT5jNvXKJkLqla7NjRzbwx9Q7bLWaCKjalQnWM3AZRH2aibec3MAA4cwCOxO19
niJxeVlm5559KkwBunpy9Hi5i5gmmsjv75c=
-----END CERTIFICATE-----