Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f719fbbb-a948-3cb0-8f73-fe4d36acedd6.roa
File:                     f719fbbb-a948-3cb0-8f73-fe4d36acedd6.roa (raw, json)
Hash identifier:          KpXSky/pFhAWGX0l0ejfe6OHO2GXhGv5rIv/xmUahkc=
Subject key identifier:   DB:2C:96:F9:CD:E0:0B:BD:3A:5E:2C:F0:9A:72:A2:DB:9C:45:AD:30
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E1BEA2714A7FA442EDAFFF0A0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f719fbbb-a948-3cb0-8f73-fe4d36acedd6.roa
Signing time:             Tue 31 May 2022 12:00:00 +0000
ROA not before:           Tue 31 May 2022 12:00:00 +0000
ROA not after:            Fri 03 Jun 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1b:ea:27:14:a7:fa:44:2e:da:ff:f0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May 31 12:00:00 2022 GMT
            Not After : Jun  3 04:00:00 2022 GMT
        Subject: CN=81f400ba-d30c-4bd4-b314-5ce4de987882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:4e:d4:fe:0e:15:bd:40:43:78:82:07:a1:
                    57:5e:6d:0d:ee:9d:4a:8e:48:78:a2:eb:8b:c0:49:
                    06:8d:4c:50:6b:78:7e:a0:bc:0f:72:43:7e:8a:0c:
                    90:7c:42:74:14:21:11:90:df:38:ed:85:a6:01:92:
                    31:96:b6:aa:a2:3c:56:1f:11:e5:40:9a:db:41:4c:
                    fa:8c:29:36:88:f1:05:3b:ed:6d:62:a1:61:1d:fb:
                    76:6c:d2:3b:24:7b:dd:d1:79:05:a2:cc:e9:a2:54:
                    23:9b:0c:85:1d:c2:ad:76:c3:ac:b5:25:8e:47:4d:
                    75:23:96:c9:b7:5d:b9:c6:fb:a1:fd:13:82:33:29:
                    c9:25:25:d1:6f:8f:94:9d:6a:b4:eb:fc:fa:49:d6:
                    0c:a7:20:97:db:83:95:91:8c:fd:d8:fd:33:b2:fc:
                    0c:8f:76:d1:8a:71:63:1a:51:5b:c7:f0:c1:bf:21:
                    7d:5b:1c:82:35:40:03:99:18:20:8a:8f:90:88:3d:
                    df:f9:d4:14:88:71:a5:57:b5:06:65:b8:2d:7c:4c:
                    b8:92:1a:00:92:4a:db:1f:f6:95:24:6a:ff:be:35:
                    8c:67:fc:a7:50:09:94:92:ab:ec:5d:01:99:1e:e7:
                    8f:17:91:b8:f2:1f:67:45:7b:fc:77:d2:9c:04:43:
                    99:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2C:96:F9:CD:E0:0B:BD:3A:5E:2C:F0:9A:72:A2:DB:9C:45:AD:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f719fbbb-a948-3cb0-8f73-fe4d36acedd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:72:70:60:8b:f4:fc:f6:4a:72:94:66:76:f6:64:e1:3d:e5:
         f1:5c:dc:59:be:35:42:1b:3b:b0:ca:4a:92:f0:40:0b:49:d9:
         01:95:f7:bd:8a:f7:4c:9b:ab:02:28:a8:de:fe:9b:b7:a4:ff:
         c9:a0:18:a2:87:02:c9:1b:c0:2f:38:b5:72:c4:b1:88:20:68:
         8d:9b:e6:c9:e5:de:e9:05:6a:45:ce:36:9a:99:f8:fd:c0:13:
         3d:65:4a:0b:be:00:80:e5:4b:06:96:33:f8:9e:1c:b5:d7:ca:
         08:6d:ae:79:83:2d:23:3e:d5:73:83:74:7d:f7:39:10:fe:90:
         3c:9a:db:00:e2:ea:e4:5f:76:39:f7:7f:24:a4:1c:08:6a:58:
         ca:3b:a6:88:c0:29:61:9a:60:c0:cd:18:79:eb:1d:7d:e3:90:
         13:59:9a:1b:78:99:86:6c:e8:8e:f7:36:2c:1d:44:1b:11:5a:
         2a:dc:00:92:39:6a:29:f5:c9:de:01:88:48:e2:f1:4e:fd:73:
         9d:ab:25:2a:47:49:8b:78:b4:44:eb:e6:a4:48:3b:5e:ff:22:
         86:87:ef:d7:ca:1c:79:0d:ea:c7:89:2b:31:25:73:e5:4f:45:
         12:70:72:b9:ea:d3:d5:69:5e:e9:02:64:df:9d:61:05:06:75:
         98:1d:6b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----