Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b0dbfb81-af5d-3ee3-936c-07a74737733f.roa
File:                     b0dbfb81-af5d-3ee3-936c-07a74737733f.roa (raw, json)
Hash identifier:          A97ggg3RxaqKF48Ao2Ka+M5vX7XpqxQ8fbbZNNVyc/A=
Subject key identifier:   01:7D:D1:B7:62:9F:F5:12:9E:0D:5B:3C:C7:0C:DD:B0:B6:A0:E8:29
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583DE1380BDCD610646351B84500
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b0dbfb81-af5d-3ee3-936c-07a74737733f.roa
Signing time:             Tue 10 May 2022 12:00:00 +0000
ROA not before:           Tue 10 May 2022 12:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:e1:38:0b:dc:d6:10:64:63:51:b8:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May 10 12:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=cc3bed1e-0931-4b98-82dd-395e02739451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:99:b8:6d:98:12:67:c8:6e:69:30:33:80:0b:
                    bc:46:ff:e3:2c:f4:4b:d4:f3:0a:0f:95:72:d1:3e:
                    b5:a3:7e:8c:90:dd:b7:b0:a4:9e:b7:96:c0:0c:1b:
                    3c:3c:8d:cc:1a:79:15:74:a0:3b:db:7e:dc:37:99:
                    8c:5b:c2:ac:40:7f:0a:4f:87:0c:29:f1:c6:30:3a:
                    6e:19:8a:e8:6c:b5:3f:98:08:3f:b3:b9:5e:e8:54:
                    12:28:3e:8f:00:33:f3:a2:d9:6d:62:6e:45:ea:b0:
                    df:5b:7c:8d:83:d7:ab:6c:71:ac:82:16:1e:59:05:
                    7c:b9:f3:d7:fb:ba:64:94:25:e8:88:da:23:ea:31:
                    a8:9d:fb:ac:29:9a:c2:fd:20:c5:c2:19:8f:40:19:
                    d1:76:b9:9e:d2:f6:ca:5a:cc:ce:ac:78:5b:05:8a:
                    9c:a1:ae:de:0a:bf:c9:64:27:02:6c:07:b7:42:72:
                    15:c3:b3:eb:28:d1:73:ae:70:d2:93:18:d0:a2:33:
                    a6:23:f6:08:5f:3c:91:9e:90:21:6a:3d:0d:6a:9e:
                    17:96:99:a9:b8:2d:95:59:ea:e0:33:60:37:44:56:
                    47:06:d4:2b:4a:54:50:65:e1:d7:59:ef:56:ac:89:
                    8f:74:64:38:bc:64:de:1f:51:4b:20:fd:a1:86:f4:
                    2d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7D:D1:B7:62:9F:F5:12:9E:0D:5B:3C:C7:0C:DD:B0:B6:A0:E8:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b0dbfb81-af5d-3ee3-936c-07a74737733f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:63:a2:27:2b:e3:1d:1d:38:10:cd:cb:d6:55:e2:f8:78:a1:
         11:fd:16:ee:67:fe:e8:15:d6:82:75:fb:c9:c9:85:4e:62:98:
         aa:71:0d:f6:7a:7c:0a:17:4a:74:f7:65:f5:5b:90:5d:a9:89:
         f9:6b:08:94:0f:00:63:9e:75:93:43:69:15:75:92:d0:4f:3a:
         29:03:3c:d0:ea:a3:d0:3b:b7:7a:97:0a:67:f6:1d:fa:74:54:
         87:0c:86:c7:a7:a3:87:20:e3:98:a4:57:69:6d:74:46:71:ac:
         67:76:68:63:6c:2c:9b:bd:30:8c:7d:de:21:bb:0d:38:f3:db:
         34:48:bd:6f:f5:03:49:34:34:f6:0d:eb:8d:e6:87:fe:01:5f:
         49:13:dd:11:e9:60:a8:de:33:64:1d:cd:0e:a9:fa:42:ba:55:
         ed:d8:bf:e1:31:8e:a4:01:e2:d7:5b:d0:92:3f:8e:b8:ee:34:
         e5:a0:d4:ca:e3:a6:27:ab:88:31:c7:67:a5:76:74:8e:f7:86:
         29:0d:bb:27:b0:ab:a0:cd:ab:be:be:03:40:c1:4e:0e:31:ce:
         47:8c:8f:be:2d:9c:3f:79:3a:42:5a:9e:54:78:c5:82:28:92:
         66:28:c0:51:c1:6f:96:bb:9b:1e:38:05:c3:1b:4f:d3:59:81:
         7a:fb:16:5f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD3hOAvc1hBkY1G4RQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDUxMDEyMDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
Y2MzYmVkMWUtMDkzMS00Yjk4LTgyZGQtMzk1ZTAyNzM5NDUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJm4bZgSZ8huaTAzgAu8Rv/jLPRL1PMKD5Vy
0T61o36MkN23sKSet5bADBs8PI3MGnkVdKA7237cN5mMW8KsQH8KT4cMKfHGMDpu
GYrobLU/mAg/s7le6FQSKD6PADPzotltYm5F6rDfW3yNg9erbHGsghYeWQV8ufPX
+7pklCXoiNoj6jGonfusKZrC/SDFwhmPQBnRdrme0vbKWszOrHhbBYqcoa7eCr/J
ZCcCbAe3QnIVw7PrKNFzrnDSkxjQojOmI/YIXzyRnpAhaj0Nap4XlpmpuC2VWerg
M2A3RFZHBtQrSlRQZeHXWe9WrImPdGQ4vGTeH1FLIP2hhvQt+wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAF90bdin/USng1bPMcM3bC2oOgpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvYjBkYmZiODEtYWY1ZC0z
ZWUzLTkzNmMtMDdhNzQ3Mzc3MzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFBjoicr4x0dOBDNy9ZV4vh4oRH9Fu5n/ugV1oJ1+8nJhU5imKpx
DfZ6fAoXSnT3ZfVbkF2piflrCJQPAGOedZNDaRV1ktBPOikDPNDqo9A7t3qXCmf2
Hfp0VIcMhseno4cg45ikV2ltdEZxrGd2aGNsLJu9MIx93iG7DTjz2zRIvW/1A0k0
NPYN643mh/4BX0kT3RHpYKjeM2QdzQ6p+kK6Ve3Yv+ExjqQB4tdb0JI/jrjuNOWg
1MrjpieriDHHZ6V2dI73hikNuyewq6DNq76+A0DBTg4xzkeMj74tnD95OkJanlR4
xYIokmYowFHBb5a7mx44BcMbT9NZgXr7Fl8=
-----END CERTIFICATE-----