Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ffc0caa9-d41b-3119-b1a6-ef9cc01d3a1b.roa
File:                     ffc0caa9-d41b-3119-b1a6-ef9cc01d3a1b.roa (raw, json)
Hash identifier:          bVeTJ4SOCPKVRzfNWETou2Jd8++TTW9tvoxjmgvEtJk=
Subject key identifier:   E2:B4:81:91:0F:11:C5:56:9E:8B:75:8E:5A:8E:E0:11:E7:B3:F0:DC
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D70567ADE969BAD2957356C00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ffc0caa9-d41b-3119-b1a6-ef9cc01d3a1b.roa
Signing time:             Fri 01 Apr 2022 04:00:00 +0000
ROA not before:           Fri 01 Apr 2022 04:00:00 +0000
ROA not after:            Sun 03 Apr 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:70:56:7a:de:96:9b:ad:29:57:35:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Apr  1 04:00:00 2022 GMT
            Not After : Apr  3 04:00:00 2022 GMT
        Subject: CN=d2747d8b-5675-4f2a-980e-3f82fc59216e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:93:af:89:da:31:4d:7a:d3:6b:82:e9:77:d3:
                    b1:1e:ac:af:73:28:29:6f:94:b0:3c:0b:f5:32:5b:
                    a3:d4:b2:a6:ae:a1:0e:4a:9c:2f:c0:f2:c2:17:3c:
                    01:f3:a3:ee:b1:a4:06:61:d3:62:99:55:58:ba:e8:
                    6e:09:a0:70:5e:db:b8:f8:3c:6b:b1:fb:a5:bb:22:
                    54:17:b9:71:5f:34:47:2a:c9:35:3f:df:80:58:62:
                    92:e6:34:7f:b5:ee:bf:5b:6f:6d:96:52:6c:94:26:
                    62:f0:d3:77:4d:b1:7a:eb:6e:21:1d:a6:3b:53:56:
                    22:a1:cc:83:f5:b9:08:bd:b9:5d:42:84:1c:5b:dd:
                    ae:6c:6b:15:78:6f:34:86:c0:0d:d8:49:78:4b:b7:
                    73:c4:3d:a9:f3:ab:f0:4f:b2:11:fb:f7:a5:f0:06:
                    56:96:cb:d2:0c:fe:4b:c4:05:d2:34:bc:57:b1:28:
                    5b:cb:5a:a0:e1:fb:8a:b3:36:eb:29:13:02:e1:8f:
                    da:26:c3:d3:ed:4f:1e:82:fc:15:7d:19:36:e9:92:
                    81:94:4b:15:27:35:62:c1:03:d0:7c:6e:ea:d7:b5:
                    be:e2:56:fb:ba:f1:f3:9a:98:9e:78:3d:03:37:2b:
                    6a:f1:28:a8:1d:2d:27:86:b0:bf:2f:2a:8e:b6:0f:
                    f6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B4:81:91:0F:11:C5:56:9E:8B:75:8E:5A:8E:E0:11:E7:B3:F0:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ffc0caa9-d41b-3119-b1a6-ef9cc01d3a1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:08:39:1c:07:2c:f7:df:5a:90:19:be:f6:4d:cc:47:78:85:
         53:f5:1f:a0:d1:bd:1e:c6:43:b1:52:1c:ad:ec:ab:44:41:dd:
         e8:cd:1e:88:d7:f9:3b:ad:78:3c:86:53:50:1a:de:a5:7a:58:
         f3:71:62:41:a1:55:a8:96:07:b1:68:04:fa:91:1f:43:1e:e8:
         a4:1b:42:cd:bb:06:32:a6:b7:06:c1:16:d9:5c:1a:97:da:b3:
         ea:64:1d:85:f9:82:e9:70:1e:0c:7d:3d:32:47:0e:1e:47:ca:
         fc:03:d6:d4:1e:3e:6f:6c:e7:89:4a:2b:f1:97:f2:a6:23:ed:
         19:7c:ef:d5:21:70:49:87:32:8e:33:f4:11:ff:d1:48:a5:23:
         f5:f3:a2:06:78:ac:de:67:d2:bf:ef:12:01:6e:da:12:15:98:
         13:80:a2:4e:30:a5:52:98:00:b5:1e:0a:5c:f0:4e:af:25:98:
         df:9e:7e:9d:7b:bb:43:61:2c:2c:c6:0e:31:7b:f6:3e:66:ea:
         3b:2a:a0:d1:54:53:20:7f:c0:f4:6b:6d:26:2f:13:cc:73:71:
         9e:28:5a:1f:c5:2f:51:83:cf:df:c4:d8:e4:1f:86:4e:29:27:
         56:98:3e:c1:02:b4:ea:2c:3f:4a:d1:30:66:30:5b:6c:37:4c:
         d6:28:92:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----