Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/bf5bc22b-58b6-3136-966f-4996b1ee7911.roa
File:                     bf5bc22b-58b6-3136-966f-4996b1ee7911.roa (raw, json)
Hash identifier:          +MahR7RMuj8JOv0ggiWSZmknUKemTxUxw8och6nUP3k=
Subject key identifier:   C8:16:DF:23:BC:95:BB:74:AF:76:45:F5:CB:A3:C1:8B:E8:5F:6E:C5
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D3B9FDEA8DEADEE2886D30300
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/bf5bc22b-58b6-3136-966f-4996b1ee7911.roa
Signing time:             Sun 13 Mar 2022 05:00:00 +0000
ROA not before:           Sun 13 Mar 2022 05:00:00 +0000
ROA not after:            Tue 15 Mar 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:3b:9f:de:a8:de:ad:ee:28:86:d3:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar 13 05:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2022 GMT
        Subject: CN=6ff619cc-ff8f-4b40-afbe-656b5c80f3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:41:6a:0b:72:10:49:6c:9c:67:0b:df:cf:ec:
                    9d:5b:4f:a1:b9:27:48:ff:9d:8f:2d:2c:91:3d:bc:
                    ec:79:d8:d8:fd:79:f1:4d:2d:5d:e9:51:ed:79:0e:
                    29:5d:f6:ce:59:de:a7:90:9f:b3:d8:69:67:9f:a8:
                    1e:d7:66:e2:8d:f9:f2:a7:e6:d1:c9:28:e5:a4:0b:
                    01:4c:c3:52:30:67:ad:1e:af:33:5b:78:18:9f:10:
                    ea:56:73:f0:b4:69:83:0d:bf:14:63:1a:ae:01:29:
                    6d:20:f1:c2:28:bc:2c:de:a1:9e:ac:75:1e:87:71:
                    95:b8:0f:cf:97:c5:be:3f:15:c4:1e:dd:03:fe:6e:
                    1c:09:f8:17:ef:bb:66:a2:d0:b4:75:dd:e6:ee:a8:
                    86:34:60:62:a3:b5:cc:ce:4c:42:e3:ce:8f:d1:4b:
                    81:94:56:5f:4b:8e:bf:9e:87:db:a0:2d:35:25:42:
                    be:52:81:ac:28:f2:c5:d3:f5:6d:24:cb:13:f0:be:
                    36:1d:e5:ab:04:e4:ab:eb:9b:1c:47:f6:48:3f:e3:
                    a3:6a:0d:84:52:79:a3:aa:75:4b:87:ff:1e:53:db:
                    5c:95:31:89:f5:cc:d6:a9:74:5c:a3:8f:f6:65:49:
                    8b:f5:0b:73:8c:a2:ac:eb:f2:ae:04:7e:bd:ec:c4:
                    42:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:16:DF:23:BC:95:BB:74:AF:76:45:F5:CB:A3:C1:8B:E8:5F:6E:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/bf5bc22b-58b6-3136-966f-4996b1ee7911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:c4:b0:3d:0c:24:21:87:f5:40:8c:b0:ce:27:40:d8:a4:05:
         85:44:9b:09:0d:5d:35:af:cf:5d:44:b4:97:51:9d:b0:ed:3a:
         cb:5c:45:1f:a6:f7:36:75:16:c9:96:ed:46:2a:b7:45:0b:33:
         af:69:55:97:38:00:d9:49:e5:1d:a6:04:c1:0a:a6:01:a0:f9:
         3a:91:f7:2c:cf:e4:51:e0:80:8c:f1:5a:12:fc:da:43:a8:c3:
         79:7d:da:d4:15:a7:18:12:3b:35:37:bd:ae:fb:93:75:a0:a6:
         1e:cb:57:81:3a:ac:1e:00:8e:5d:70:de:f6:a1:7a:be:42:49:
         f0:75:15:6f:78:7b:65:fc:f9:4e:71:04:59:47:b7:04:0f:97:
         55:d5:f4:75:a0:75:47:51:31:d6:26:6f:1b:6d:f4:1a:3f:ff:
         90:7e:77:c9:be:7f:03:9e:7c:03:24:70:01:1b:96:58:1c:9a:
         39:ca:5b:91:1c:92:b7:a6:1d:fd:76:f7:8e:b5:52:8a:32:3c:
         9e:ca:de:46:fe:e8:50:d0:bb:f6:20:78:75:8c:6f:32:9a:3e:
         3d:62:79:dd:48:81:7c:85:21:af:73:22:e9:d5:96:0f:af:6b:
         b3:f4:29:73:4f:1e:08:d9:0b:53:8f:0e:7b:32:8f:b6:3c:5c:
         73:a9:f2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----