Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/bd8dce00-6034-33bc-bd21-8128f5081999.roa
File:                     bd8dce00-6034-33bc-bd21-8128f5081999.roa (raw, json)
Hash identifier:          W5mC05HCGzpNistIvZiVxy55FpD7VTiZjplAw3qMI2I=
Subject key identifier:   D5:A7:A6:D3:C7:03:4C:C3:7F:9B:08:61:C5:80:95:B6:20:98:EF:A6
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F53A698334818D66EF35C6580
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/bd8dce00-6034-33bc-bd21-8128f5081999.roa
Signing time:             Tue 20 Sep 2022 12:00:00 +0000
ROA not before:           Tue 20 Sep 2022 12:00:00 +0000
ROA not after:            Fri 23 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:53:a6:98:33:48:18:d6:6e:f3:5c:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep 20 12:00:00 2022 GMT
            Not After : Sep 23 04:00:00 2022 GMT
        Subject: CN=01f438b2-15e0-4f7c-b5e7-4b1e5ca69c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c7:0e:91:60:3b:0f:90:34:f6:a3:fa:9d:ff:
                    06:42:00:84:fb:2f:96:59:a5:d1:c7:bb:6e:78:47:
                    ea:95:53:fe:db:e3:eb:73:07:7d:1f:2f:d0:27:ed:
                    a3:2a:da:be:d2:8b:8b:94:e5:47:52:35:b0:d6:71:
                    38:89:0f:04:ac:bb:d5:81:aa:93:10:f4:b9:e0:b1:
                    a3:ee:32:e4:39:31:32:b4:81:53:ad:62:66:aa:9d:
                    c8:50:9e:3e:b5:5e:7e:0f:d6:16:c3:90:2a:15:76:
                    a8:67:2c:f1:c8:46:b0:ed:cc:2b:96:97:96:34:09:
                    44:4d:4d:04:b6:9a:06:15:d7:d5:99:29:d0:73:b6:
                    a6:1c:28:b0:c5:ef:8b:48:84:b4:28:db:05:48:73:
                    a3:f5:72:1d:ba:0e:b8:84:68:6e:5e:19:5f:b1:a6:
                    48:4a:d7:0b:f5:52:03:1e:6c:55:4e:65:64:04:d5:
                    44:c2:3f:40:e0:1b:58:1a:a0:f1:bf:e8:0b:af:fe:
                    ed:2d:d8:56:11:18:f5:fe:23:5a:44:68:c7:2e:dc:
                    90:03:ff:0f:5b:f4:67:65:b6:9f:4e:d3:af:26:c2:
                    1f:0c:fd:d5:50:45:2e:28:26:fa:41:23:63:fc:af:
                    87:53:26:85:28:b3:16:3c:e2:39:35:eb:f5:84:c8:
                    ce:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A7:A6:D3:C7:03:4C:C3:7F:9B:08:61:C5:80:95:B6:20:98:EF:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/bd8dce00-6034-33bc-bd21-8128f5081999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:d2:9b:7b:b2:b1:a2:46:85:02:79:5c:6b:16:cb:58:e9:85:
         f7:1e:33:8b:7a:cd:bc:a1:17:94:b6:e6:4a:2c:11:25:42:f6:
         b2:42:9e:c7:e5:fc:51:65:6f:ed:ff:b5:53:b2:8c:29:6a:f4:
         83:b6:5c:e3:b2:32:73:a6:80:ee:c6:a5:f2:22:64:75:34:99:
         a8:8e:4d:b5:7e:46:dd:e1:fb:8e:32:d1:dc:d0:12:d0:32:ed:
         f0:8c:60:11:ff:8a:d1:fe:c1:37:d5:81:00:de:3c:ae:23:ae:
         83:7b:7a:f0:84:fa:d1:64:93:e9:20:1e:4b:38:a4:cb:2a:b9:
         38:0f:e4:d1:d2:60:ab:2b:1f:32:06:09:93:8e:1c:3e:42:0a:
         cd:2d:65:ae:bc:00:80:99:f2:ca:48:f4:0b:0c:7b:df:d9:fc:
         ae:f1:9c:39:d5:77:9f:e1:10:fc:7f:17:4d:8a:c4:0e:0c:f6:
         b2:be:45:6e:b9:62:ac:0e:45:2d:db:47:84:69:46:65:e7:67:
         c1:68:7e:03:13:a9:e5:7e:a5:96:1e:aa:f5:18:5d:7b:be:74:
         97:10:0f:8f:15:7b:f8:d5:e4:d8:1d:ee:4a:e9:d8:d2:18:b0:
         d7:be:ff:45:19:7b:af:e1:9e:c0:8d:39:eb:69:40:b8:b3:43:
         46:e6:36:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----