Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ed557671-f4eb-3a12-bbad-d559bb8c6b06.roa
File:                     ed557671-f4eb-3a12-bbad-d559bb8c6b06.roa (raw, json)
Hash identifier:          zDx/SdAvxm1TftVgI6v0O0veUBPpiqycDAFFwjfNXuE=
Subject key identifier:   27:40:79:A3:E6:D2:B4:0E:58:56:87:E3:AC:90:97:78:76:4D:E0:D4
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FB8EAB35ABA624BA164A7BD00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ed557671-f4eb-3a12-bbad-d559bb8c6b06.roa
Signing time:             Wed 26 Oct 2022 12:00:00 +0000
ROA not before:           Wed 26 Oct 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b8:ea:b3:5a:ba:62:4b:a1:64:a7:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 26 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=435990c9-cfd4-4a2c-8b5c-a4e92d9f9287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:42:3a:24:e6:da:5f:f9:06:f7:1a:99:87:
                    d1:2d:76:ed:b2:a6:0b:31:26:ce:5e:5e:30:78:ad:
                    21:e6:44:49:a6:95:5a:17:08:cb:35:93:75:4f:e4:
                    1b:47:63:cd:99:c4:e5:b5:eb:6b:5c:89:b5:ed:81:
                    3a:2e:f2:1b:87:b4:6b:fe:b9:ed:73:51:c9:dc:a6:
                    23:3c:94:59:f3:0e:d0:6f:66:ed:d3:d7:57:6c:d5:
                    10:51:d2:11:fd:08:0c:69:29:a7:b7:85:17:52:46:
                    84:5e:5c:b0:34:2e:4e:e5:5e:f1:2b:f0:29:2c:1d:
                    55:23:59:c1:f7:6c:9f:2a:37:a3:cc:b2:ce:be:cf:
                    b7:26:10:32:12:99:2a:05:75:b0:37:20:4a:af:28:
                    dc:50:e7:46:35:d8:bc:1f:85:48:68:c2:9c:cd:be:
                    54:58:8e:07:b9:b8:79:17:e5:de:56:ab:fd:ab:a3:
                    0e:bf:18:14:ce:ae:d5:5a:60:7f:7f:3d:3d:5a:db:
                    f4:ba:5e:06:f0:0b:ac:a4:78:16:94:7a:62:ce:bb:
                    c6:91:33:17:17:7b:ba:17:ff:6b:00:71:cf:1f:98:
                    d9:22:3a:5f:5f:5c:2e:1c:4d:7b:82:0b:3b:a8:b5:
                    ac:ab:79:46:8b:07:a5:fc:ac:8b:1a:42:a1:8e:70:
                    fb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:40:79:A3:E6:D2:B4:0E:58:56:87:E3:AC:90:97:78:76:4D:E0:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ed557671-f4eb-3a12-bbad-d559bb8c6b06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:c8:be:a1:b3:39:9a:91:3e:5c:81:7e:86:18:c4:1a:01:9a:
         99:4e:4e:76:ce:31:05:7a:c0:04:47:71:dd:5a:e7:5f:88:fa:
         39:05:c4:72:18:21:67:f4:29:b2:ae:e1:e2:7a:fe:c8:a0:28:
         8a:26:cb:81:b5:46:5f:b3:ae:35:ec:51:7d:9f:ae:c9:b9:df:
         4e:ff:22:91:38:0e:41:c5:bb:77:56:0c:17:94:af:d5:c9:01:
         93:12:fe:cc:5f:8d:c1:bf:24:fa:b1:22:9f:6e:8d:b5:7d:9b:
         41:9b:04:30:2b:76:9a:40:72:a3:05:c3:ee:f8:3a:f3:bc:ba:
         ea:85:64:00:71:3d:29:a9:6b:6d:b8:3f:1d:6e:40:ce:17:9e:
         7a:f6:4b:54:88:1d:9f:86:b4:a0:1c:fb:dd:40:ea:ad:ce:7e:
         6c:72:ab:93:5b:2a:53:6b:87:59:6f:86:5d:f3:d9:dc:70:8d:
         3d:75:9e:5d:d9:3a:52:68:c2:b8:45:02:f1:3b:79:49:d9:15:
         05:f5:79:1a:99:a5:3e:3c:e7:52:4a:58:26:b6:de:1b:9f:cc:
         fa:26:42:67:bf:8b:01:60:19:7a:db:ff:d5:a9:ae:c4:ea:d7:
         24:84:8d:72:f6:94:60:a9:ef:70:d1:39:6d:5d:9d:9e:2a:38:
         29:ac:66:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----