Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d5b9241a-b6a1-3aad-9a74-380008ab6829.roa
File:                     d5b9241a-b6a1-3aad-9a74-380008ab6829.roa (raw, json)
Hash identifier:          UWAMHM5KwfkeqTPRs6XVhZU24MiomrPvpmK7Q3rO6yM=
Subject key identifier:   A0:F5:E9:7E:D1:E9:93:AF:18:A7:EE:12:65:AB:10:28:68:26:A2:C7
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583DACD4D7B9071C9E3C58A17D40
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d5b9241a-b6a1-3aad-9a74-380008ab6829.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Mon 25 Apr 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ac:d4:d7:b9:07:1c:9e:3c:58:a1:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : Apr 25 04:00:00 2022 GMT
        Subject: CN=ba9eace2-3fb2-4979-b0a3-0c4349d038b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:29:10:90:a1:97:43:e7:ef:13:59:72:93:
                    89:6d:8b:af:8e:b0:5d:25:d1:e7:4e:ef:23:a7:5e:
                    bf:b0:28:b4:38:05:46:1c:75:64:75:b2:b3:e8:00:
                    0f:23:9c:28:37:e4:0b:86:73:67:7a:dc:f5:aa:fd:
                    15:32:83:84:a8:20:f2:d1:61:7b:13:4b:d4:4e:ba:
                    09:ac:91:f9:4c:e3:17:47:ca:5f:d5:fc:41:d1:02:
                    c4:92:70:3a:1f:7e:8a:ba:ad:d7:4d:12:53:da:d0:
                    00:86:0a:35:4d:5f:ff:fc:b9:4f:bb:83:30:b4:0e:
                    af:f9:89:fa:7d:ef:fa:f7:69:22:d3:61:a7:bc:5a:
                    79:e5:3d:31:94:b8:43:d0:17:f0:f2:33:c6:b7:90:
                    9e:71:a3:f5:e3:89:f8:9e:2f:be:59:a8:28:c2:8b:
                    d8:ba:a7:9e:b0:f1:f6:7d:f9:3f:0f:c5:31:4e:7e:
                    85:07:ef:4c:33:16:13:3e:42:27:1d:9c:73:f3:f1:
                    58:84:1a:76:b1:79:93:dc:53:57:8e:0d:6e:cc:b0:
                    0a:aa:b3:2d:b1:df:ec:0b:4d:12:fc:31:9b:54:8f:
                    4c:76:c7:f6:21:2e:92:52:d5:37:00:09:fa:12:98:
                    25:07:40:a6:9c:89:20:30:92:dd:54:06:a1:fd:36:
                    4b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F5:E9:7E:D1:E9:93:AF:18:A7:EE:12:65:AB:10:28:68:26:A2:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d5b9241a-b6a1-3aad-9a74-380008ab6829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:2d:15:95:c1:09:1d:46:28:a9:7c:97:7d:df:36:5c:e2:ce:
         f6:7d:33:30:b4:b8:c8:e4:cb:56:df:30:e8:7e:46:b0:0d:a0:
         3b:f4:7c:11:fa:26:8e:16:ce:87:1b:89:0d:b3:19:41:55:50:
         b1:5c:63:7f:e6:e8:58:23:a9:2d:05:c2:e0:08:dc:9f:bf:ca:
         88:f4:de:81:b4:60:c7:4e:17:13:2a:b6:20:3f:a1:8d:e9:af:
         6e:e8:e4:3c:c0:99:1c:ff:de:c4:bb:79:44:f9:ab:fc:23:f3:
         01:e1:68:09:b4:6c:9e:b0:c5:2c:dc:1a:bc:19:b7:f9:9f:f3:
         fa:5d:28:d7:fe:62:f9:97:fe:78:c5:01:ed:e0:cf:17:91:9e:
         35:b2:b0:0c:cb:7d:60:6d:5f:ab:c8:0b:e6:13:9e:08:88:36:
         69:69:42:d7:3f:bb:f1:bb:23:88:24:76:9c:f2:46:e0:10:91:
         9f:a3:64:89:f2:1b:28:21:9f:e8:2d:dd:15:d2:07:d7:6c:b8:
         d0:22:40:7d:93:e6:08:19:e2:9c:36:9b:b8:5f:98:62:83:c5:
         d9:c1:74:83:a1:1d:4c:1d:ae:a0:45:b6:6f:15:94:32:0d:bd:
         ea:ea:01:57:56:0d:c6:7e:f2:22:f8:72:b6:40:2b:e8:53:96:
         1b:84:82:db
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD2s1Ne5BxyePFihfUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDQyMjEyMDAwMFoXDTIyMDQyNTA0MDAwMFowLzEtMCsGA1UEAxMk
YmE5ZWFjZTItM2ZiMi00OTc5LWIwYTMtMGM0MzQ5ZDAzOGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj8pEJChl0Pn7xNZcpOJbYuvjrBdJdHnTu8j
p16/sCi0OAVGHHVkdbKz6AAPI5woN+QLhnNnetz1qv0VMoOEqCDy0WF7E0vUTroJ
rJH5TOMXR8pf1fxB0QLEknA6H36Kuq3XTRJT2tAAhgo1TV///LlPu4MwtA6v+Yn6
fe/692ki02GnvFp55T0xlLhD0Bfw8jPGt5CecaP144n4ni++WagowovYuqeesPH2
ffk/D8UxTn6FB+9MMxYTPkInHZxz8/FYhBp2sXmT3FNXjg1uzLAKqrMtsd/sC00S
/DGbVI9Mdsf2IS6SUtU3AAn6EpglB0CmnIkgMJLdVAah/TZLYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKD16X7R6ZOvGKfuEmWrEChoJqLHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvZDViOTI0MWEtYjZhMS0z
YWFkLTlhNzQtMzgwMDA4YWI2ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBANstFZXBCR1GKKl8l33fNlzizvZ9MzC0uMjky1bfMOh+RrANoDv0
fBH6Jo4WzocbiQ2zGUFVULFcY3/m6FgjqS0FwuAI3J+/yoj03oG0YMdOFxMqtiA/
oY3pr27o5DzAmRz/3sS7eUT5q/wj8wHhaAm0bJ6wxSzcGrwZt/mf8/pdKNf+YvmX
/njFAe3gzxeRnjWysAzLfWBtX6vIC+YTngiINmlpQtc/u/G7I4gkdpzyRuAQkZ+j
ZInyGyghn+gt3RXSB9dsuNAiQH2T5ggZ4pw2m7hfmGKDxdnBdIOhHUwdrqBFtm8V
lDINverqAVdWDcZ+8iL4crZAK+hTlhuEgts=
-----END CERTIFICATE-----