Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e9f52629-03c4-3fdf-a30e-7e4c7d2674bb.roa
File:                     e9f52629-03c4-3fdf-a30e-7e4c7d2674bb.roa (raw, json)
Hash identifier:          Ld+fJRaVSTDMk5AzeCdrwEIqVvq59DHtLKVOTfdVhVE=
Subject key identifier:   36:57:8A:E1:70:A2:67:E2:A0:FB:2F:5B:1A:2F:BA:C9:36:EE:FF:3D
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E485E3EDC9CDE4D1A947E9600
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e9f52629-03c4-3fdf-a30e-7e4c7d2674bb.roa
Signing time:             Thu 16 Jun 2022 12:00:00 +0000
ROA not before:           Thu 16 Jun 2022 12:00:00 +0000
ROA not after:            Sun 19 Jun 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:48:5e:3e:dc:9c:de:4d:1a:94:7e:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jun 16 12:00:00 2022 GMT
            Not After : Jun 19 04:00:00 2022 GMT
        Subject: CN=61d5d106-f603-41e2-b1c4-1bbb5ba6b9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c0:c5:43:67:ac:34:58:7d:9f:be:c5:c4:6b:
                    13:14:86:e5:ab:f7:99:51:38:a6:62:c4:f4:d9:1e:
                    43:96:83:34:6a:24:99:50:07:09:7e:08:d0:a6:1b:
                    9c:5f:24:b5:ac:71:ca:c4:30:0c:5b:54:9f:ee:dc:
                    fb:a7:be:0d:fc:1b:de:86:8e:58:55:71:5e:52:67:
                    df:e4:a7:a9:82:7b:17:80:a5:50:ab:37:ad:4f:bc:
                    5d:60:6e:3f:64:34:81:dd:ec:f8:bc:f4:41:67:6f:
                    f7:4b:33:c5:5f:53:87:55:e1:73:f0:f1:ac:ef:e3:
                    78:05:63:97:33:f8:03:0c:6e:50:c8:07:43:3b:e4:
                    58:79:b6:4b:d9:48:ab:8f:cc:5d:7f:17:f2:bf:1f:
                    77:8d:24:f6:c2:b5:90:c1:82:0a:0e:a8:ed:a3:15:
                    5e:00:8f:17:02:1a:d5:0f:da:3a:a0:ac:7b:84:b0:
                    73:94:b3:67:0a:02:8e:1e:85:44:67:25:88:05:be:
                    1e:e6:ca:ba:08:6c:3d:a5:e4:67:90:05:3a:93:a1:
                    f3:83:d7:f0:52:39:b3:d9:63:26:b4:db:44:5f:20:
                    fe:6b:2b:28:f6:fb:8c:9a:61:e8:c8:66:3b:a7:28:
                    8c:a0:b4:9e:9c:43:c0:df:5c:16:d4:88:f5:81:df:
                    5e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:57:8A:E1:70:A2:67:E2:A0:FB:2F:5B:1A:2F:BA:C9:36:EE:FF:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e9f52629-03c4-3fdf-a30e-7e4c7d2674bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:71:b5:3d:df:13:29:90:47:cb:c6:1f:c8:76:a3:c2:06:23:
         13:1c:bc:ab:f5:09:51:d5:13:7d:63:c7:23:10:4a:38:b1:23:
         bf:65:88:69:10:a5:ad:ab:55:fd:d2:2b:23:66:a0:5b:f9:ef:
         36:39:41:cb:f1:c6:58:7b:cf:9c:c3:2c:ab:80:1a:0c:e5:29:
         ee:96:2c:8a:64:55:98:e0:26:f3:e3:fa:bf:28:15:83:1d:6a:
         82:85:b9:43:8f:13:6a:08:d0:73:0f:8f:13:cf:36:2f:f4:24:
         04:fc:96:63:55:f7:a3:40:7b:68:e3:44:21:e3:17:0c:a4:29:
         d1:58:ad:e4:f7:51:2a:a3:fa:81:88:65:5e:fc:dc:31:86:02:
         22:3a:3e:a1:30:bb:3f:9e:d7:14:d3:b9:ad:1c:f3:78:54:54:
         e0:59:63:41:64:7d:23:60:61:58:bc:a5:1b:ec:9b:a4:c6:56:
         ad:d4:68:72:e3:78:65:16:90:ac:07:70:ad:33:d1:cc:68:f9:
         79:59:aa:90:1d:d8:a4:a3:5d:c5:53:0a:01:c4:9b:b0:04:84:
         9f:53:a0:26:57:3d:af:a4:33:7c:05:81:25:97:a9:3a:ac:d9:
         4d:4f:3d:d6:b5:65:00:a0:7c:37:69:7d:05:94:95:78:75:60:
         8b:aa:2c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----