Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e287a5e2-178a-3fca-a215-c424ef92df7d.roa
File:                     e287a5e2-178a-3fca-a215-c424ef92df7d.roa (raw, json)
Hash identifier:          sH37lnYOeGtdsv5wd53RHUpA/ONm93m8LayblfxTihE=
Subject key identifier:   3D:96:05:FE:26:A5:C0:BC:0F:4C:85:95:6D:46:50:30:FF:2B:75:79
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CE3A15FF8B2AB7EAE2F058380
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e287a5e2-178a-3fca-a215-c424ef92df7d.roa
Signing time:             Wed 09 Feb 2022 05:00:00 +0000
ROA not before:           Wed 09 Feb 2022 05:00:00 +0000
ROA not after:            Fri 11 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e3:a1:5f:f8:b2:ab:7e:ae:2f:05:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb  9 05:00:00 2022 GMT
            Not After : Feb 11 05:00:00 2022 GMT
        Subject: CN=b408abc9-31df-4149-b29f-3e2e6a0458ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d9:39:fb:6e:8e:d1:da:04:67:19:5a:e6:57:
                    2c:5b:35:e9:b0:fc:73:5a:b5:9b:d8:fb:29:06:e5:
                    54:e1:37:cb:31:96:0f:2e:c9:cd:03:de:95:41:0a:
                    76:d1:b0:c1:48:f8:41:52:42:e1:8e:0c:df:b9:af:
                    aa:0d:e5:45:a0:11:2a:50:47:4c:37:59:1e:ad:e4:
                    14:d5:93:20:e7:74:db:93:22:08:e5:6f:f1:4c:cf:
                    4a:c5:45:8a:93:43:26:b7:50:77:d8:bb:a5:89:7c:
                    71:c1:31:3d:a0:50:8a:8d:a9:74:8a:c3:27:f7:d4:
                    4c:35:73:40:6b:7b:fc:09:40:b7:b5:87:b9:23:ac:
                    20:bc:20:07:d4:18:1f:9c:91:e5:69:f0:88:e1:cd:
                    db:55:c9:82:a4:e7:38:82:b6:15:20:03:bd:0a:56:
                    6c:fe:e3:89:71:03:c2:73:4a:9d:4a:81:22:9d:bc:
                    15:38:30:0b:1a:ef:37:b9:3b:d0:f2:c2:c2:6e:9e:
                    cc:62:de:30:eb:3d:04:96:01:b3:53:df:3b:1a:ae:
                    9a:b4:e0:7e:82:2a:37:77:76:37:7d:71:cf:ed:87:
                    50:c6:69:31:0a:09:57:a4:97:a2:98:fc:53:c6:e8:
                    3f:70:48:76:a6:51:95:bf:7b:29:15:7b:37:f2:72:
                    bb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:96:05:FE:26:A5:C0:BC:0F:4C:85:95:6D:46:50:30:FF:2B:75:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e287a5e2-178a-3fca-a215-c424ef92df7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:ce:78:8d:d3:ea:1c:e8:9b:f2:9a:86:5a:23:6a:a9:cc:e0:
         5a:dd:3c:ee:0d:e1:0b:bd:d8:4c:6d:f0:72:e2:c2:ac:b1:49:
         56:1b:e5:6b:ad:c0:5b:6c:5f:ae:d6:41:bc:05:2c:b0:72:23:
         f0:c6:0a:f6:fd:49:67:2f:fb:61:ae:49:da:da:7e:68:e8:2e:
         b8:5c:34:e9:93:a3:ab:79:41:f4:88:5b:40:49:0c:85:78:ce:
         2d:a6:59:e9:b9:1c:a7:7c:4e:01:0e:3f:48:65:4c:6f:cf:71:
         32:2f:e7:1f:19:d1:c0:1e:17:ba:4d:ad:c3:eb:74:28:22:52:
         fa:eb:4c:c2:a2:10:ae:65:68:76:7e:4a:92:c8:13:2f:b9:01:
         34:fd:68:fe:63:09:59:f6:4a:40:f8:38:1f:57:3f:99:12:a7:
         c8:f6:82:0b:2d:50:85:a2:fe:89:be:3b:dd:fb:ab:ed:ad:08:
         5f:93:3b:9c:2b:a8:7b:aa:df:e0:21:ca:d7:12:a7:41:7e:be:
         1d:ec:a6:9b:a2:58:af:b4:f9:44:c4:12:31:b9:78:80:cf:67:
         b5:c3:9e:3a:0b:06:2c:74:d9:32:12:69:01:b0:53:c5:8c:36:
         de:a8:1d:38:5e:d2:e9:9b:b8:4a:c9:fd:9f:d3:9d:02:79:20:
         af:7d:a3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----