Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/be35d3e3-21dd-31b3-800c-5b9b5872a268.roa
File:                     be35d3e3-21dd-31b3-800c-5b9b5872a268.roa (raw, json)
Hash identifier:          x4nwR93kB9lO/oVWd1YKn9bnrYTWGj5uttk3iCgDQ6I=
Subject key identifier:   F6:7C:80:28:73:41:3F:AB:4A:49:9E:53:EE:A1:A0:60:17:32:BA:F7
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EAD80FB7EFA6DDEBEE1694450
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/be35d3e3-21dd-31b3-800c-5b9b5872a268.roa
Signing time:             Fri 22 Jul 2022 12:00:00 +0000
ROA not before:           Fri 22 Jul 2022 12:00:00 +0000
ROA not after:            Mon 25 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ad:80:fb:7e:fa:6d:de:be:e1:69:44:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul 22 12:00:00 2022 GMT
            Not After : Jul 25 04:00:00 2022 GMT
        Subject: CN=5efc79bc-7106-4d35-8aec-4678c3e8f685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f5:7b:52:8b:98:4a:7f:8e:86:f1:6d:64:f8:
                    f9:07:fe:f2:52:b5:29:1e:3e:f7:7e:5f:be:62:fd:
                    e3:29:8f:8c:e1:a3:42:7c:51:1c:dd:f3:b6:e1:41:
                    06:a6:68:64:c8:a4:11:30:13:b0:c9:c6:fd:66:1a:
                    cc:55:ae:62:4d:22:75:b6:93:36:ea:c8:7a:d9:07:
                    3d:79:bd:ce:f8:e2:a4:14:a6:b0:14:92:92:dc:73:
                    7c:f0:50:fb:26:79:8b:17:b7:3d:63:cf:ed:56:fc:
                    a5:48:82:83:23:fa:0a:1a:2c:8b:4c:33:d0:73:8b:
                    51:ad:e8:87:34:f4:d6:1d:9f:d2:af:60:a2:a4:50:
                    57:29:6b:0e:70:69:4d:a8:34:c6:7b:1b:b0:b2:53:
                    a8:00:96:b2:58:20:d1:2f:d8:8e:96:b6:85:c3:aa:
                    4a:8b:0e:73:79:47:52:3b:94:a5:b3:04:59:0b:a4:
                    8f:79:bb:75:f4:98:6e:a0:93:2c:56:1c:ea:65:d8:
                    6e:05:32:1c:54:21:7f:ee:bd:93:72:e5:3a:8a:dd:
                    94:f9:15:17:a0:fc:05:bd:e8:c0:bf:a8:5f:a2:c3:
                    4a:d6:90:c9:8a:76:0b:8f:e5:4d:da:86:eb:68:66:
                    67:dc:e1:c1:fd:f3:ac:f8:c4:50:30:90:76:3d:74:
                    bb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7C:80:28:73:41:3F:AB:4A:49:9E:53:EE:A1:A0:60:17:32:BA:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/be35d3e3-21dd-31b3-800c-5b9b5872a268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:6f:44:36:63:cd:9b:0a:4c:ee:f8:17:14:d0:b7:39:cb:3b:
         8a:4b:13:62:c3:1c:44:57:de:08:6f:25:5d:3a:93:85:45:09:
         7a:01:1f:e8:e8:89:d0:fb:4f:bd:49:67:f0:0d:da:05:f9:50:
         0a:10:d4:ad:87:75:d8:c0:f4:70:82:ae:e2:d7:ad:02:aa:d7:
         12:23:56:ab:bf:69:a4:fb:76:9b:30:14:4c:8e:a7:07:a5:b8:
         82:c2:88:68:6d:00:26:2b:d6:4d:07:c9:63:b4:80:72:dd:eb:
         99:3e:4e:d5:65:75:92:d6:46:75:c8:15:90:52:ac:fa:f5:22:
         01:2b:16:ce:97:29:03:66:fd:7e:85:ee:db:9e:c2:56:b7:d0:
         48:06:de:78:dd:02:cb:d4:55:1c:3c:41:ee:90:37:2f:00:53:
         1b:5c:c2:39:c2:87:72:1d:66:cd:df:ba:6c:15:eb:43:cb:32:
         ab:77:92:58:e6:40:5b:6e:84:5b:be:80:b9:ff:73:b4:61:45:
         b4:67:ca:b2:e0:29:e7:c6:02:56:c6:49:19:db:ec:ee:73:a4:
         0c:50:fe:21:52:7c:cc:42:1c:53:51:31:7d:98:19:fe:49:cd:
         e9:5b:b8:72:fe:5f:ff:03:e6:6b:ec:c9:76:d1:7e:11:03:73:
         46:2e:6f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----