Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/00927219-e778-32b9-afa8-8378b6b317a7.roa
File:                     00927219-e778-32b9-afa8-8378b6b317a7.roa (raw, json)
Hash identifier:          Qh2O37P/6jID/swmw7a4gX/xHe+fqKr8Ors1jlje8+I=
Subject key identifier:   BF:0B:11:85:29:BB:87:5F:DA:01:EB:23:5A:C1:06:25:1E:F0:30:EB
Certificate issuer:       /CN=7b7224c0-abb1-4387-9b24-b77e802833d4
Certificate serial:       010D0C9F4328583EE202380C4857BEBE833BCF40
Authority key identifier: 0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/00927219-e778-32b9-afa8-8378b6b317a7.roa
Signing time:             Thu 11 Aug 2022 12:00:00 +0000
ROA not before:           Thu 11 Aug 2022 12:00:00 +0000
ROA not after:            Fri 16 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2606:8140::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e2:02:38:0c:48:57:be:be:83:3b:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7224c0-abb1-4387-9b24-b77e802833d4
        Validity
            Not Before: Aug 11 12:00:00 2022 GMT
            Not After : Sep 16 04:00:00 2022 GMT
        Subject: CN=3eebdbcd-20d1-4157-8fb3-9f901e119aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:cc:38:e3:0d:e9:32:b0:79:62:f6:26:c1:
                    b0:dd:70:7f:b0:d9:ea:fb:0b:47:c2:f5:3b:a4:8b:
                    80:8f:9f:95:95:1e:95:8e:4a:31:f9:41:cb:1d:66:
                    74:09:4a:15:8a:99:e0:d1:ba:55:5f:ea:a1:bf:04:
                    2e:8f:8c:28:55:5d:ae:bf:dd:ae:8c:fd:23:e4:b2:
                    79:65:22:c6:9d:45:fa:45:31:b4:af:0e:88:ed:05:
                    31:08:da:df:71:ee:ec:10:55:bc:67:45:2b:43:35:
                    69:7f:df:17:17:5c:7a:c7:e6:ee:e7:e4:82:d6:59:
                    f8:5e:43:bc:e6:8c:ce:9d:c6:f3:00:68:f0:ea:fe:
                    ba:52:d1:7c:84:64:da:6f:ce:63:f2:d9:02:0f:13:
                    33:08:9a:0b:c8:d3:ae:58:94:08:86:c7:d4:bf:01:
                    8d:b0:fb:6a:be:49:f3:3b:57:02:8a:c6:ac:22:8c:
                    f1:7d:e8:5e:f6:20:3a:e3:29:e8:14:bc:fe:66:56:
                    21:82:cd:a8:3b:71:ec:9e:ba:02:3d:b4:d9:64:54:
                    2a:df:f7:d6:97:e0:20:a8:61:7d:29:17:34:22:3c:
                    c8:3c:db:8c:c0:52:a5:50:6a:8b:f1:c2:02:46:3c:
                    5b:bc:1b:52:7a:84:7a:71:03:db:78:17:89:26:c1:
                    27:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0B:11:85:29:BB:87:5F:DA:01:EB:23:5A:C1:06:25:1E:F0:30:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/00927219-e778-32b9-afa8-8378b6b317a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/7b7224c0-abb1-4387-9b24-b77e802833d4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c7:a3:4e:5f:ff:a0:da:15:0c:93:2c:59:74:27:e2:02:09:
         07:b4:18:69:88:dd:e0:d1:a8:9f:16:5e:1a:c4:99:88:b4:42:
         34:8e:fe:67:1a:ea:cc:49:05:84:e1:cf:42:87:cc:3d:b4:e7:
         d7:77:c4:0f:e2:ff:9e:71:c4:a9:0c:19:ae:9b:f1:90:de:95:
         a3:9e:dd:6a:4b:c6:d8:cc:da:cc:fc:73:db:02:31:68:e1:64:
         68:39:91:e0:64:08:f7:d6:ff:58:d9:ae:c0:19:b8:3f:69:f4:
         3f:08:bf:df:e0:8d:6b:e2:45:d3:bf:00:ce:7e:01:d4:a9:ff:
         a7:8c:ca:d0:79:06:4e:57:54:75:fa:0a:05:0c:8d:a8:2d:ef:
         b5:2a:6d:34:f8:4e:db:28:a2:ae:42:57:80:45:5d:17:fd:07:
         d9:24:59:32:a5:08:bb:18:63:31:82:1c:c8:f4:7f:45:6d:ec:
         e7:c8:09:3f:fb:d8:d5:ce:e8:37:4c:b7:03:4b:78:87:0e:05:
         e8:14:0a:ff:15:21:80:c8:db:58:da:0b:46:1c:5d:6f:e8:33:
         f4:28:36:39:df:4d:94:f1:94:65:d4:82:ab:c7:2b:9a:9e:50:
         c9:72:ac:6c:e1:8e:30:ee:1b:34:02:17:8e:ea:1e:62:12:5f:
         8f:5f:55:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----