Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/cea43894-9742-3851-b4e5-59ca29e83748.roa
File:                     cea43894-9742-3851-b4e5-59ca29e83748.roa (raw, json)
Hash identifier:          oYIW7qDLCw9USyg8/4kpHp6lBqp/PXS1jggj5k9brpw=
Subject key identifier:   AB:44:57:C9:DB:FA:90:73:FC:8F:3D:D2:E8:A2:F9:B3:07:27:D6:64
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EFFFC69B2F10D0B7D16ED4E00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/cea43894-9742-3851-b4e5-59ca29e83748.roa
Signing time:             Sun 21 Aug 2022 12:00:00 +0000
ROA not before:           Sun 21 Aug 2022 12:00:00 +0000
ROA not after:            Wed 24 Aug 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ff:fc:69:b2:f1:0d:0b:7d:16:ed:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Aug 21 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2022 GMT
        Subject: CN=6d75dfd1-fa5e-461f-9d86-d2d9bce12b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:35:95:19:59:56:22:8d:f1:3d:9e:03:dc:98:
                    2c:e0:a5:bf:9f:13:a7:2d:9d:91:e5:5a:8b:1f:2c:
                    33:56:8e:ea:b7:96:4b:e0:3e:27:f4:82:f1:a6:e5:
                    70:35:84:95:f1:c2:99:9c:69:44:79:8c:25:6b:57:
                    47:a1:02:b8:d4:14:42:cc:85:f5:49:fd:3c:71:0c:
                    14:a3:71:a2:b9:24:75:47:1e:5f:d8:0f:b5:2b:7b:
                    64:d1:e8:2b:6b:87:55:dc:cd:d1:72:54:a8:31:d4:
                    ae:0b:1b:5a:40:99:99:e4:e9:e2:33:9f:d2:d9:63:
                    e2:9d:0e:52:4e:07:d1:8d:de:7b:0e:20:96:e3:83:
                    c7:e2:42:21:24:63:18:ee:b4:6f:0f:b4:54:ff:15:
                    7c:52:5d:63:88:20:72:13:7b:99:8e:07:2d:6e:cb:
                    12:e4:b8:e9:a8:60:83:3c:72:1c:53:98:14:f7:db:
                    98:82:cd:3b:32:2c:25:07:3c:8e:a7:23:56:35:1c:
                    f5:43:24:02:ac:f7:5f:4e:bf:4d:76:64:ea:48:12:
                    4e:d0:21:c7:97:ee:c0:5b:23:2a:d8:94:2b:e3:15:
                    fb:5e:69:89:6c:81:5d:a7:b1:05:a4:79:a3:e2:da:
                    0f:f9:9a:8a:f0:b1:be:33:84:99:09:e2:58:a9:63:
                    69:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:44:57:C9:DB:FA:90:73:FC:8F:3D:D2:E8:A2:F9:B3:07:27:D6:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/cea43894-9742-3851-b4e5-59ca29e83748.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:16:7b:60:5e:b3:05:c7:f6:3e:df:95:5f:b6:1f:36:0d:8c:
         d3:92:c0:fb:fa:85:bc:14:a6:bf:66:d7:2c:30:58:4d:23:1e:
         fa:ea:85:00:7a:59:ab:7b:2a:8e:ce:5d:f3:24:90:c9:1d:eb:
         22:54:bf:fe:22:9f:ff:d7:95:39:1d:4a:15:b9:ae:8c:e5:ea:
         08:6b:03:4a:7b:65:eb:79:66:50:83:0f:fd:07:b0:e6:9e:69:
         2e:48:31:25:92:5c:c2:31:b7:f8:2a:52:08:59:39:e9:d8:81:
         68:bf:e5:85:e3:10:c8:72:8c:2d:b9:c8:fd:6a:79:ab:fb:50:
         aa:27:1c:aa:5e:de:60:60:76:8d:0c:a9:d7:45:fd:65:b0:ba:
         34:b4:86:fe:6a:f5:f4:39:df:3d:8e:46:8a:60:c8:28:3c:63:
         ad:a0:7c:c5:46:ed:47:bc:d5:4b:c9:a7:a3:e0:28:de:af:37:
         3c:4a:df:a3:83:16:0c:d5:2a:2d:b7:e6:1c:83:35:d6:0c:a1:
         71:e4:57:c0:0a:a6:fc:06:88:96:a4:b3:1a:45:b0:ba:ef:d2:
         43:db:58:ce:e1:94:02:25:a1:31:d2:8c:89:02:f9:9d:d3:b0:
         c2:f8:f4:a7:1e:ff:67:13:09:53:71:21:1a:f5:c1:63:83:c2:
         15:07:10:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----