Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e396a318-dfd6-3234-b728-1cce0dc57a67.roa
File:                     e396a318-dfd6-3234-b728-1cce0dc57a67.roa (raw, json)
Hash identifier:          +mw/dqvx3ewi+UuI/q2R86n+vGE9sqSipcS58ebFrHU=
Subject key identifier:   E1:7F:7A:C8:34:E5:D5:69:93:7C:BE:24:DC:84:D4:04:E9:7A:75:D7
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D7CEB866E30DE535DF38A7A00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e396a318-dfd6-3234-b728-1cce0dc57a67.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Thu 07 Apr 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:7c:eb:86:6e:30:de:53:5d:f3:8a:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Apr  7 04:00:00 2022 GMT
        Subject: CN=07e99f5a-6e64-41d2-8b28-2505a9c64af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1c:fd:1c:be:e0:de:f8:51:30:a9:a8:8f:c3:
                    28:6e:70:48:25:26:c7:0e:df:14:a8:00:10:0a:53:
                    e5:d4:ea:27:f2:e6:58:e5:67:ca:07:98:2a:d6:92:
                    8a:63:ac:1e:07:80:7a:22:38:12:09:e7:7f:01:55:
                    6a:42:cb:94:3a:2f:da:f0:9b:7f:1b:b0:a0:6b:37:
                    05:33:88:ef:86:b0:78:03:ee:ba:8b:12:63:46:b9:
                    30:d7:93:5b:60:b2:71:e8:6d:f0:3f:d9:b9:60:70:
                    2d:18:28:33:a4:df:7b:c6:d1:75:4a:93:55:5c:eb:
                    9d:32:36:41:ba:6f:93:2d:cf:1f:89:1a:ef:15:cb:
                    4a:f5:9b:5f:b4:c5:0a:f2:3b:38:e0:cc:82:11:c7:
                    f5:8e:ef:a0:6f:91:81:8c:f4:1f:6d:df:7a:6b:9a:
                    29:39:fe:e9:b4:84:bf:3a:dc:55:99:e1:6f:2b:fb:
                    08:e6:5a:8c:71:47:b9:12:97:d6:32:8e:1c:4a:d8:
                    92:bc:2e:6c:d0:c0:41:1b:64:cc:49:8b:05:8f:1d:
                    6c:6f:4a:d0:7d:fc:79:89:d7:f5:99:f4:87:45:b4:
                    e1:7c:cd:d4:66:6b:f1:5f:1b:c6:c5:75:87:d9:56:
                    70:5a:c1:5b:31:8c:5f:5b:73:6f:ac:7c:c3:57:ef:
                    58:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7F:7A:C8:34:E5:D5:69:93:7C:BE:24:DC:84:D4:04:E9:7A:75:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e396a318-dfd6-3234-b728-1cce0dc57a67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:74:17:89:20:01:ad:f3:dc:8a:07:c4:34:47:2f:0d:c6:dd:
         4e:13:a2:e9:d1:7a:a6:89:cc:90:d5:c5:88:2e:c6:a0:f9:e0:
         3b:03:0b:f3:d3:01:75:b5:dc:6b:9a:32:b7:95:68:02:5a:5e:
         10:69:16:cd:9c:2f:15:a5:37:78:13:4b:1e:c3:df:e4:6d:b3:
         64:d3:e4:e3:fe:b1:33:21:ac:6e:82:fd:79:da:d7:bb:a8:d5:
         4f:b1:f5:d6:8d:c4:a2:5b:14:f2:56:62:3b:dc:6d:24:68:bb:
         c1:20:6a:ed:74:c8:e7:aa:35:7f:1f:f9:26:f8:c5:89:52:4f:
         33:6e:43:f1:be:0a:e4:24:fc:84:61:18:1f:27:73:d7:27:65:
         97:3a:95:29:36:c7:d6:f1:35:c7:dd:48:90:0a:af:5f:df:4b:
         0b:14:8b:3d:a6:ff:a3:a7:a6:59:5e:49:3f:3c:60:3b:59:e7:
         82:8d:96:83:81:c6:d5:91:b5:f7:7a:e7:17:b9:46:dc:db:b4:
         7b:fc:bf:f7:23:15:04:bc:d5:3f:88:c1:68:63:11:b9:e3:ea:
         02:50:09:20:a5:9a:65:e9:46:98:ba:a4:20:b1:ef:5c:0f:31:
         22:e3:88:a4:46:5b:d3:d6:f8:8d:c8:3b:d5:8a:e8:ff:87:09:
         54:66:05:1e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD1864ZuMN5TXfOKegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0NDZiZWMtNjc3My00N2ZiLTliZjYtYjI2MGRlNGI2
OTY4MB4XDTIyMDQwNTA0MDAwMFoXDTIyMDQwNzA0MDAwMFowLzEtMCsGA1UEAxMk
MDdlOTlmNWEtNmU2NC00MWQyLThiMjgtMjUwNWE5YzY0YWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghz9HL7g3vhRMKmoj8MobnBIJSbHDt8UqAAQ
ClPl1Oon8uZY5WfKB5gq1pKKY6weB4B6IjgSCed/AVVqQsuUOi/a8Jt/G7CgazcF
M4jvhrB4A+66ixJjRrkw15NbYLJx6G3wP9m5YHAtGCgzpN97xtF1SpNVXOudMjZB
um+TLc8fiRrvFctK9ZtftMUK8js44MyCEcf1ju+gb5GBjPQfbd96a5opOf7ptIS/
OtxVmeFvK/sI5lqMcUe5EpfWMo4cStiSvC5s0MBBG2TMSYsFjx1sb0rQffx5idf1
mfSHRbThfM3UZmvxXxvGxXWH2VZwWsFbMYxfW3NvrHzDV+9Y2QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOF/esg05dVpk3y+JNyE1ATpenXXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0
NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYwZGU0YjY5NjgvZTM5NmEzMTgtZGZkNi0z
MjM0LWI3MjgtMWNjZTBkYzU3YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTE0NDZiZWMtNjc3My00N2ZiLTli
ZjYtYjI2MGRlNGI2OTY4LzUxNDQ2YmVjLTY3NzMtNDdmYi05YmY2LWIyNjBkZTRi
Njk2OC5jcmwwHwYDVR0jBBgwFoAUPjMaA4rlqNqwL/l4U5FMwsylh3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MTQ0NmJlYy02NzczLTQ3ZmItOWJmNi1iMjYw
ZGU0YjY5NjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWcwAOC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALJ0F4kgAa3z3IoHxDRHLw3G3U4TounReqaJzJDVxYguxqD54DsD
C/PTAXW13GuaMreVaAJaXhBpFs2cLxWlN3gTSx7D3+Rts2TT5OP+sTMhrG6C/Xna
17uo1U+x9daNxKJbFPJWYjvcbSRou8Egau10yOeqNX8f+Sb4xYlSTzNuQ/G+CuQk
/IRhGB8nc9cnZZc6lSk2x9bxNcfdSJAKr1/fSwsUiz2m/6OnplleST88YDtZ54KN
loOBxtWRtfd65xe5RtzbtHv8v/cjFQS81T+IwWhjEbnj6gJQCSClmmXpRpi6pCCx
71wPMSLjiKRGW9PW+I3IO9WK6P+HCVRmBR4=
-----END CERTIFICATE-----