Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c90f21a7-922e-3a90-84c4-b5af31711201.roa
File:                     c90f21a7-922e-3a90-84c4-b5af31711201.roa (raw, json)
Hash identifier:          yQXcSLnbNmOrY6+cGbX5sSFYPkSCLriRbt7TOQuJQuc=
Subject key identifier:   DD:AD:44:C1:5E:E0:4C:E0:4C:6D:85:E3:90:01:75:04:15:CF:57:73
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F2B2FB8157305F2E2F83A1980
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c90f21a7-922e-3a90-84c4-b5af31711201.roa
Signing time:             Tue 06 Sep 2022 12:00:00 +0000
ROA not before:           Tue 06 Sep 2022 12:00:00 +0000
ROA not after:            Fri 09 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2b:2f:b8:15:73:05:f2:e2:f8:3a:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep  6 12:00:00 2022 GMT
            Not After : Sep  9 04:00:00 2022 GMT
        Subject: CN=23a9b4b8-bf94-442e-889b-7d457e998579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a8:c4:08:af:1b:bc:4a:c5:59:54:19:70:c9:
                    b4:dc:68:e9:09:34:91:45:e5:92:0f:ca:fa:38:d5:
                    b3:49:31:5d:e9:fe:c9:09:c1:de:05:1b:9f:c0:b7:
                    2a:cf:16:c4:b2:39:df:8c:9c:c8:c6:8a:a8:37:41:
                    fb:ad:c0:98:4a:7b:ff:31:b3:cb:24:bb:8f:14:5d:
                    e1:51:9d:6a:59:28:fc:5b:d3:9f:7f:e7:3d:d3:8f:
                    a1:2f:db:a6:21:b8:70:bb:f0:8e:33:b5:0e:c6:9b:
                    9f:39:e7:c6:52:9a:4d:47:cf:00:0c:57:f2:b1:33:
                    5d:f7:ff:66:55:f3:b7:81:10:50:35:b5:b0:f0:93:
                    46:0f:d4:2b:85:f6:70:af:12:5c:31:de:28:ae:39:
                    bb:0e:d4:e1:f9:8e:cd:f6:c5:e5:a6:eb:18:c1:74:
                    92:20:e0:2e:a8:d5:d4:69:d7:18:ba:43:1c:d7:bb:
                    97:ca:5d:28:f4:56:4a:70:70:98:9e:a3:3a:76:04:
                    bd:ae:de:82:f4:fd:a2:bf:ce:28:82:4b:1a:49:6b:
                    e4:44:b1:08:a1:b1:b0:3d:1f:1d:7f:3d:a1:cf:31:
                    69:25:52:43:44:a8:34:bd:3b:3f:51:be:1a:ef:70:
                    ef:fd:b8:e2:33:86:b8:f2:13:19:38:5c:4c:3a:97:
                    c8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AD:44:C1:5E:E0:4C:E0:4C:6D:85:E3:90:01:75:04:15:CF:57:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c90f21a7-922e-3a90-84c4-b5af31711201.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:91:85:9e:10:30:32:b5:6d:74:6c:c4:f9:98:e3:74:c3:ea:
         39:47:0a:2c:ad:1a:d9:d1:cc:cf:d0:e4:91:79:8d:b8:eb:5c:
         c9:3e:86:1d:26:6c:ef:8c:a1:ee:1f:9e:f3:8a:cc:77:2d:49:
         be:80:eb:6b:6b:34:26:e3:5b:96:21:9d:ec:c3:b9:f6:ba:78:
         91:81:db:1a:b3:2a:14:e1:a6:86:f5:e4:48:7e:16:42:c9:15:
         59:89:dc:84:09:59:13:4f:58:45:ab:90:2b:c0:0a:02:6e:fb:
         02:f2:33:3f:96:f4:ea:d7:87:62:7f:1f:bc:5a:d2:5f:cf:38:
         23:95:fa:b6:2a:1e:6d:41:76:39:f1:dc:99:7d:7d:f9:de:85:
         b8:25:2c:31:dc:f3:55:2f:91:45:8e:63:00:f7:a0:cd:fd:fb:
         72:2e:b0:de:04:ac:fc:c3:b2:55:71:be:95:49:f4:72:de:53:
         fc:27:eb:31:9f:ad:ee:67:0d:9b:e6:6b:f4:6b:cc:58:06:85:
         09:7e:a4:49:2d:9b:0f:6b:91:bd:2f:cd:ac:4f:d9:de:06:59:
         96:88:06:f5:67:50:e5:9e:2e:1f:e5:86:7f:c0:86:cf:1e:0f:
         50:3f:52:1f:1d:3c:bc:87:79:4f:6b:07:2a:72:dc:a0:09:b2:
         4f:59:6e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----