Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/cb381259-e8c1-3b6e-9855-1421aa789408.roa
File:                     cb381259-e8c1-3b6e-9855-1421aa789408.roa (raw, json)
Hash identifier:          t1jBgAbjtRutCeYZveJI6hLLMfcoGJOe4VdpSyVAUWk=
Subject key identifier:   44:3E:3D:34:66:FB:0E:7E:88:B1:0F:20:8F:AD:E7:1E:BE:5D:4E:64
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583DCEE370E9FAD86FD78A10C580
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/cb381259-e8c1-3b6e-9855-1421aa789408.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Sat 07 May 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ce:e3:70:e9:fa:d8:6f:d7:8a:10:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  7 04:00:00 2022 GMT
        Subject: CN=bd84ca71-a407-46ae-b3e4-f6b2a95a26ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:92:b0:62:bd:c8:16:a8:34:f4:c5:09:7b:fd:
                    7a:2b:4e:47:bc:1e:3e:84:ad:6c:8a:25:a5:5d:01:
                    2d:62:93:a9:82:5d:a2:73:93:22:81:66:aa:17:e0:
                    cc:6c:d7:13:5d:16:71:40:07:c9:a1:47:6e:6a:70:
                    6b:be:d6:80:57:fb:d6:47:60:0e:72:28:7d:38:d7:
                    33:97:37:be:44:9e:4b:69:c9:b4:59:9a:64:49:61:
                    24:99:bb:f9:8f:a5:43:f6:a7:bb:6a:da:fc:14:60:
                    67:8f:36:f2:5f:57:1f:03:1f:ef:45:d2:53:4b:57:
                    ee:de:87:6b:8b:6a:b3:8d:db:ab:87:1c:96:68:30:
                    66:5d:d5:08:55:27:88:5d:c9:c0:cb:71:9e:86:78:
                    35:87:93:ec:f4:16:d4:e5:54:15:f1:b5:ea:7e:85:
                    12:6a:97:18:b0:42:7f:9d:01:b9:b5:d8:d3:79:4e:
                    8c:77:52:d9:70:69:9a:ed:cd:e2:08:6a:0e:59:b1:
                    2e:37:03:53:d0:28:ca:68:8d:4d:54:ed:d5:30:89:
                    20:22:60:2d:03:d4:ba:b7:cd:9a:cf:a2:97:e1:d3:
                    25:f0:e5:83:3c:5a:0b:a0:92:a4:52:49:55:51:1f:
                    e9:1b:78:e6:54:9c:88:83:bb:5c:e6:06:af:c2:07:
                    1a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3E:3D:34:66:FB:0E:7E:88:B1:0F:20:8F:AD:E7:1E:BE:5D:4E:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/cb381259-e8c1-3b6e-9855-1421aa789408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:8b:cc:f3:61:1e:ec:fc:99:5d:77:22:ec:07:06:4a:b2:19:
         ee:c6:27:b7:f3:86:2a:24:dd:5f:6d:e0:c9:51:04:41:84:05:
         7c:8c:eb:a4:3a:07:cc:a9:de:2f:2a:59:27:6e:16:14:41:ef:
         9c:1c:38:f2:3b:8e:e2:10:59:bf:98:72:33:f7:30:95:b3:38:
         f2:26:75:1a:50:4a:52:dc:ad:d6:3c:7d:c2:b2:cf:9b:92:9a:
         b8:ac:c7:e3:78:d2:55:4f:56:b3:40:60:8a:9b:8c:c1:f1:3b:
         b5:5b:9b:27:77:06:aa:60:0a:1c:30:7e:7e:df:33:52:c6:c7:
         35:e1:ac:df:ab:56:57:00:07:98:71:1f:d6:6c:31:06:21:0b:
         16:15:1b:69:2c:ab:2d:cb:c1:ff:d1:fd:a1:5a:d1:27:35:a1:
         87:27:7b:7d:6c:38:3a:34:27:d1:5d:3d:de:ff:19:ea:d6:f6:
         05:4c:c5:28:b8:60:50:a8:79:ad:bc:5b:7b:0d:22:1b:29:b2:
         a7:28:ca:5b:15:b5:87:50:f5:77:8d:21:f9:4b:3c:29:a9:ad:
         1e:48:7b:1d:54:0d:98:ca:9d:33:5a:eb:a8:1c:94:9e:a6:cc:
         63:6e:f1:92:d0:31:59:68:aa:30:af:58:b7:8d:38:7e:72:f0:
         df:6e:bf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----