Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/bcd4f0f4-c74a-389a-b7c0-b54542589ace.roa
File:                     bcd4f0f4-c74a-389a-b7c0-b54542589ace.roa (raw, json)
Hash identifier:          NM8oYEToYhcUpgIrly2v2ZZwtNzF/r0fnMRz9JvaSeM=
Subject key identifier:   A1:76:54:D4:76:FE:CB:85:89:3E:F9:89:69:2F:0C:01:ED:68:73:F2
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D5A376DED12AEB065E7611980
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/bcd4f0f4-c74a-389a-b7c0-b54542589ace.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Sat 26 Mar 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:37:6d:ed:12:ae:b0:65:e7:61:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Mar 26 04:00:00 2022 GMT
        Subject: CN=8ed04d88-85ee-41d6-b45a-8c6a288a39de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:44:72:db:69:fd:b5:19:e9:ab:9b:dd:fb:d7:
                    49:7d:24:f0:20:f8:b6:76:ea:ec:fa:df:4a:86:61:
                    84:e0:0b:08:2d:c5:7d:2d:c3:64:16:df:cc:70:6f:
                    c0:72:1a:c7:52:26:69:f4:ab:44:2a:bb:0b:1f:42:
                    d2:fe:18:46:22:b0:9e:8c:75:0c:a1:e9:5e:22:49:
                    8e:6b:d7:38:ec:81:fc:14:af:34:ff:7e:8b:9e:ef:
                    fd:da:5c:6f:23:eb:54:da:4b:02:f9:8e:e3:b7:23:
                    c1:64:74:fc:8e:15:c2:60:df:4a:31:5b:0b:6d:24:
                    e3:b5:df:73:18:3f:43:b4:3f:a8:da:42:7b:4c:0f:
                    0f:bc:e9:12:1a:3b:c5:8b:b6:75:39:23:d6:10:e9:
                    08:9e:1c:ba:8c:59:01:91:5d:86:ae:9d:48:09:50:
                    bb:d2:7b:2d:e5:45:67:57:e8:26:24:1c:1a:e3:5d:
                    81:1a:19:75:c0:84:12:88:49:07:fc:75:11:c1:b3:
                    b3:4d:14:c8:a7:83:0f:53:17:7c:d4:cd:86:2e:d1:
                    ba:0c:9f:31:21:f1:df:60:43:7d:3c:4b:b1:17:c1:
                    7e:f0:88:e1:aa:5c:ac:c4:9b:d3:b5:ce:dd:83:74:
                    44:95:4a:f3:bc:53:be:d4:69:74:0b:ce:8b:c5:2e:
                    01:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:76:54:D4:76:FE:CB:85:89:3E:F9:89:69:2F:0C:01:ED:68:73:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/bcd4f0f4-c74a-389a-b7c0-b54542589ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:51:47:ab:41:3b:95:96:b7:98:3d:be:45:1a:fd:9b:36:f3:
         95:51:9a:0e:5d:24:13:eb:51:17:7e:23:f6:31:f5:87:b0:47:
         8e:48:46:4e:2e:19:d6:f5:1b:50:25:77:78:57:a2:a7:08:1e:
         18:c0:45:64:65:f0:aa:53:45:a9:6b:88:5b:4b:d9:6b:05:c2:
         b6:24:34:ea:2f:a6:32:e8:81:4e:3e:3e:f8:ca:16:2a:ca:77:
         3a:a5:d7:4a:bb:8e:2b:64:10:27:31:42:0b:ff:5a:d0:4f:15:
         29:50:1b:12:36:bd:d1:9f:38:36:48:88:29:72:b9:68:60:54:
         6b:2f:a5:4d:6a:0b:43:db:b6:3c:66:7a:30:ed:48:de:f4:e8:
         34:cb:f9:e7:8d:10:26:aa:12:37:88:98:f8:9c:a8:ad:67:f0:
         8a:ec:1e:03:8b:3f:c3:05:55:74:6a:8b:48:4d:2a:e5:39:37:
         5f:e6:61:80:6f:33:b3:af:f1:60:00:a7:fe:25:bb:f2:3d:f5:
         34:17:fb:63:55:97:e3:8c:c0:7c:dc:c3:3d:28:1f:b8:93:fe:
         c3:f1:1a:dd:d5:fe:2e:d2:19:92:df:bc:e0:73:d5:9e:91:f0:
         50:00:e9:50:08:19:ab:19:74:ec:fe:ce:3c:70:f3:aa:74:f3:
         eb:78:25:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----