Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d5b97287-5156-3575-ad8a-098241d37af0.roa
File:                     d5b97287-5156-3575-ad8a-098241d37af0.roa (raw, json)
Hash identifier:          fgjbyL1wrNVDJ9lgQNypsoxgqlrr3rUFT7HhlSzdzsk=
Subject key identifier:   2D:53:7B:47:7C:C0:39:17:BD:08:34:EB:7B:06:70:97:34:68:5B:F3
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F9FD472B15399E63DE61B92C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d5b97287-5156-3575-ad8a-098241d37af0.roa
Signing time:             Mon 17 Oct 2022 12:00:00 +0000
ROA not before:           Mon 17 Oct 2022 12:00:00 +0000
ROA not after:            Thu 20 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9f:d4:72:b1:53:99:e6:3d:e6:1b:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 17 12:00:00 2022 GMT
            Not After : Oct 20 04:00:00 2022 GMT
        Subject: CN=7e72543c-48ea-4882-b8c2-dcfce2db22d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:f9:e3:37:ab:61:9f:34:98:b2:18:49:d3:
                    30:54:ca:97:fd:a0:1e:08:54:81:87:a5:22:51:00:
                    97:a3:0d:b2:5a:84:c0:ca:20:41:8e:dc:61:e0:7b:
                    08:39:77:b9:50:fe:d5:6e:04:17:d9:d9:c4:94:14:
                    2d:25:1a:2b:1c:db:a5:b6:87:e9:8d:96:d2:2e:77:
                    65:a7:5f:4e:ff:39:6d:c4:e1:46:2e:4d:d3:b0:dc:
                    1f:42:21:8d:33:03:21:31:7a:be:e0:79:ba:24:11:
                    d6:32:99:94:d6:bc:0d:9f:73:56:42:29:c0:16:f1:
                    5f:89:1e:4c:b8:41:65:46:3a:0d:45:c3:49:32:5f:
                    3d:7c:5a:6f:d9:ea:68:8a:22:d2:89:79:ee:a8:dd:
                    3d:b9:cd:c9:d2:04:31:1c:12:dc:1a:4c:54:7a:af:
                    23:0b:7a:66:8c:60:0d:60:78:4d:b7:c7:c4:59:2d:
                    44:f6:53:ee:20:82:c0:f2:24:0c:ca:d0:ea:74:e0:
                    90:ae:90:20:26:c5:fb:42:12:1d:ab:15:68:a5:ac:
                    25:a8:35:a0:cb:9c:ca:f6:4c:74:cc:fe:61:de:92:
                    dd:4c:7c:86:67:c6:ca:98:d1:88:91:16:81:63:ec:
                    87:9a:58:67:a7:38:d1:aa:e0:f9:45:05:f7:70:3e:
                    d4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:53:7B:47:7C:C0:39:17:BD:08:34:EB:7B:06:70:97:34:68:5B:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d5b97287-5156-3575-ad8a-098241d37af0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:09:bb:9c:f0:55:2d:8d:c1:0a:25:48:4b:f9:3f:36:27:99:
         5d:04:18:88:23:b5:60:07:05:82:8e:d4:47:ff:37:8d:32:78:
         1a:b6:c4:47:6c:81:ee:76:02:d2:04:4c:01:46:3b:51:1a:e7:
         0a:a8:1e:36:21:cd:77:d1:d3:cc:a0:44:1b:41:9b:df:65:9a:
         f4:d7:83:c5:37:ab:50:f7:42:cb:fb:e0:af:c7:d7:1a:22:18:
         b3:6c:79:eb:b0:16:f9:cb:57:3d:b4:ff:3d:4d:80:bb:55:28:
         b6:23:92:97:84:0b:e4:4b:0a:23:8b:10:19:d8:6b:fa:49:63:
         19:51:5a:df:43:5f:d2:50:69:20:43:8d:dc:c0:45:83:f1:8d:
         f2:ed:73:da:5d:a6:75:3c:f6:c3:6f:59:7b:b9:18:92:ef:60:
         15:b9:af:05:58:ab:3b:2e:33:2a:6f:50:53:19:14:5b:d7:b4:
         0c:a4:97:4a:c3:69:32:74:50:59:35:05:a6:08:72:f6:d6:cb:
         3a:49:a1:dc:c1:9f:e9:15:86:42:a8:4f:63:9a:f5:d0:e9:58:
         0e:73:8b:8f:06:5c:68:b5:2d:27:db:b6:5a:24:a2:12:bf:a7:
         9e:b7:a0:9e:84:6d:91:04:e9:5b:ec:61:14:eb:13:b8:11:6d:
         ef:c4:90:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----