Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d175d965-3b36-3d75-b7cc-05d1ef6e3e1e.roa
File:                     d175d965-3b36-3d75-b7cc-05d1ef6e3e1e.roa (raw, json)
Hash identifier:          BvtTs/AzY5fYG9h5jlqIkfSlUzKiWoBbtwzNcq2wI5E=
Subject key identifier:   57:06:95:E1:3E:43:BC:12:DA:95:92:1D:40:AB:EE:C8:45:80:7F:29
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E4A4C3CEBD199B1DB19C7AD00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d175d965-3b36-3d75-b7cc-05d1ef6e3e1e.roa
Signing time:             Fri 17 Jun 2022 12:00:00 +0000
ROA not before:           Fri 17 Jun 2022 12:00:00 +0000
ROA not after:            Mon 20 Jun 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:358::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:4a:4c:3c:eb:d1:99:b1:db:19:c7:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jun 17 12:00:00 2022 GMT
            Not After : Jun 20 04:00:00 2022 GMT
        Subject: CN=e841c3f1-c9b2-499f-89b4-2ecefd5d7b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:15:31:69:b2:2c:7a:58:8c:31:e6:e3:a9:
                    b3:d2:66:3d:fa:4d:b3:eb:fd:da:17:91:d9:33:a5:
                    70:75:aa:89:9b:14:86:84:94:25:e6:54:9a:ee:ea:
                    ef:c3:18:44:fc:6f:6b:5b:1c:04:8c:03:3f:93:88:
                    97:33:6a:9f:3d:4a:dd:21:fa:f1:45:cd:19:57:19:
                    f6:06:ac:ab:24:01:b9:8f:78:ae:f0:c9:78:22:7e:
                    7d:78:7f:61:7a:8d:b9:51:f9:fb:30:cb:04:b7:c2:
                    4e:25:63:ea:1e:05:82:9a:87:62:9a:12:19:7b:cb:
                    b0:0c:a7:85:cb:8b:0e:ce:6e:47:14:57:40:cd:e9:
                    ed:69:1c:11:1a:fe:c9:05:05:2e:51:be:76:a2:c0:
                    3b:19:2f:d6:0f:5b:7b:79:48:a6:8a:5f:5f:26:d5:
                    2e:d0:44:d5:09:c0:d0:0a:80:00:24:a5:7d:ee:81:
                    5b:33:21:0c:f8:d4:1a:aa:d2:42:9a:38:97:3b:f3:
                    84:ab:42:9a:4c:ef:3f:cb:87:37:c6:79:6a:7c:e5:
                    b8:f0:ad:28:ba:ba:fd:24:29:55:c0:3e:75:1b:2a:
                    f8:a0:f0:af:af:4b:92:19:a0:2b:cc:8a:d9:74:0b:
                    9b:e8:95:e8:52:85:a1:11:fd:26:4b:7d:58:f5:58:
                    1e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:06:95:E1:3E:43:BC:12:DA:95:92:1D:40:AB:EE:C8:45:80:7F:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d175d965-3b36-3d75-b7cc-05d1ef6e3e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:358::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:5e:85:e7:6d:0b:60:41:c9:db:56:c8:5a:99:14:8d:bd:f1:
         20:c4:af:90:4a:23:1d:52:ad:ad:8e:b6:9b:d6:60:f3:f8:da:
         e7:b3:17:25:59:94:2d:2c:91:fc:5d:a9:2d:2a:e1:ad:4a:77:
         f8:96:31:dd:54:14:56:d1:82:cb:d2:62:e0:6c:f4:43:8c:a1:
         78:b4:9f:09:ea:da:73:49:06:d1:f4:e9:5d:ab:fa:b0:04:26:
         c2:51:42:25:c1:e9:11:5d:14:d4:35:f5:87:36:bc:76:28:87:
         42:85:47:68:61:ea:02:16:23:db:94:01:34:4f:dd:af:ca:20:
         c9:e5:ba:5a:8b:49:61:c2:8c:c4:31:0f:8b:3f:1c:16:65:78:
         99:76:30:9c:af:ed:7b:dd:d2:a9:7c:33:fc:50:f6:37:20:d1:
         2b:8a:74:ec:ef:95:1d:76:60:22:85:2a:5b:80:ad:41:0c:66:
         0f:4a:59:db:cf:00:6d:28:b8:a3:8d:f9:e8:d1:9c:c4:c2:6b:
         97:04:63:22:c2:8f:7a:dc:67:78:08:4d:46:c0:d6:0c:72:9f:
         c7:3e:5c:14:0e:d4:f1:cb:c8:fd:f8:24:5f:80:38:e6:16:51:
         75:93:48:25:6b:17:ab:86:db:de:79:7f:38:7a:8a:5a:ac:98:
         8a:d1:31:32
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD5KTDzr0Zmx2xnHrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDYxNzEyMDAwMFoXDTIyMDYyMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZTg0MWMzZjEtYzliMi00OTlmLTg5YjQtMmVjZWZkNWQ3YjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCAVMWmyLHpYjDHm46mz0mY9+k2z6/3aF5HZ
M6VwdaqJmxSGhJQl5lSa7urvwxhE/G9rWxwEjAM/k4iXM2qfPUrdIfrxRc0ZVxn2
BqyrJAG5j3iu8Ml4In59eH9heo25Ufn7MMsEt8JOJWPqHgWCmodimhIZe8uwDKeF
y4sOzm5HFFdAzentaRwRGv7JBQUuUb52osA7GS/WD1t7eUimil9fJtUu0ETVCcDQ
CoAAJKV97oFbMyEM+NQaqtJCmjiXO/OEq0KaTO8/y4c3xnlqfOW48K0ourr9JClV
wD51Gyr4oPCvr0uSGaArzIrZdAub6JXoUoWhEf0mS31Y9VgeWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFcGleE+Q7wS2pWSHUCr7shFgH8pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvZDE3NWQ5NjUtM2IzNi0z
ZDc1LWI3Y2MtMDVkMWVmNmUzZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwANY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMdehedtC2BBydtWyFqZFI298SDEr5BKIx1Sra2OtpvWYPP42uez
FyVZlC0skfxdqS0q4a1Kd/iWMd1UFFbRgsvSYuBs9EOMoXi0nwnq2nNJBtH06V2r
+rAEJsJRQiXB6RFdFNQ19Yc2vHYoh0KFR2hh6gIWI9uUATRP3a/KIMnlulqLSWHC
jMQxD4s/HBZleJl2MJyv7Xvd0ql8M/xQ9jcg0SuKdOzvlR12YCKFKluArUEMZg9K
WdvPAG0ouKON+ejRnMTCa5cEYyLCj3rcZ3gITUbA1gxyn8c+XBQO1PHLyP34JF+A
OOYWUXWTSCVrF6uG2955fzh6ilqsmIrRMTI=
-----END CERTIFICATE-----