Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/15f0c153-d2ab-3b86-9ab1-cbe1b95cc8be.roa
File:                     15f0c153-d2ab-3b86-9ab1-cbe1b95cc8be.roa (raw, json)
Hash identifier:          ZNAIN3dNnGPySDiLUCF1j30NVhSeapJEMFG51khegxU=
Subject key identifier:   7D:2B:25:AB:F8:60:74:58:11:9E:E6:C4:A2:A1:65:E0:2B:8F:7C:40
Certificate issuer:       /CN=7b7224c0-abb1-4387-9b24-b77e802833d4
Certificate serial:       010D0C9F4328583E93C86473CF3CDF592EE44EC0
Authority key identifier: 0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/15f0c153-d2ab-3b86-9ab1-cbe1b95cc8be.roa
Signing time:             Thu 14 Jul 2022 12:00:00 +0000
ROA not before:           Thu 14 Jul 2022 12:00:00 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2606:7b40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:93:c8:64:73:cf:3c:df:59:2e:e4:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7224c0-abb1-4387-9b24-b77e802833d4
        Validity
            Not Before: Jul 14 12:00:00 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=2d96704f-a201-4bb5-b490-276c9eb40f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cd:cb:d6:07:c2:8f:19:b4:c8:82:db:b0:6e:
                    6a:77:40:6e:66:ee:e1:c5:c1:a2:57:0f:06:b0:fe:
                    ed:5b:ac:85:16:a6:1b:f4:5f:8d:41:d1:ee:65:e3:
                    61:b6:2f:97:79:8a:2f:24:28:1b:01:c6:29:a9:c3:
                    df:39:a2:04:fd:76:8f:02:bb:fb:35:b5:c0:ff:a6:
                    31:58:0b:fc:93:a7:23:1e:8e:2c:1c:30:ec:08:a3:
                    eb:66:68:41:d0:c7:d9:c5:a3:7f:db:f1:a9:dd:37:
                    94:26:3b:af:58:5d:62:94:d5:0c:cf:e6:22:f3:4d:
                    0b:8c:34:73:53:f7:7b:88:60:85:ea:29:38:98:8f:
                    ff:05:d3:c7:4c:74:27:35:48:9f:36:ef:ff:51:99:
                    76:a4:b1:85:59:0e:97:2b:14:9e:7a:c7:d5:c7:53:
                    f6:b3:0f:7c:bd:d9:56:49:0b:f2:23:45:14:2a:93:
                    0a:01:e9:96:c2:f1:38:5a:f1:7c:e9:7d:97:e4:91:
                    e7:34:26:6a:1a:e9:0a:30:2a:da:bc:37:32:e9:84:
                    52:55:9a:fe:a2:3d:e0:8f:80:25:d1:82:08:c6:6a:
                    b9:96:f9:f7:44:f1:30:39:31:51:b2:cf:5d:da:c6:
                    a6:0d:47:05:d6:0e:61:9b:69:65:c9:2e:80:9b:a0:
                    0a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2B:25:AB:F8:60:74:58:11:9E:E6:C4:A2:A1:65:E0:2B:8F:7C:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/15f0c153-d2ab-3b86-9ab1-cbe1b95cc8be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/7b7224c0-abb1-4387-9b24-b77e802833d4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:31:05:49:4b:2e:ea:f5:d3:a2:97:26:5f:0c:51:08:6e:73:
         46:4d:4b:6f:e1:c9:96:ff:53:d9:1c:d3:aa:11:a7:96:c0:91:
         c6:3e:8a:d1:37:13:4d:aa:af:15:d3:ae:f2:96:1c:f6:00:c2:
         fd:c8:48:de:45:1f:b3:bd:fa:d8:80:04:9c:de:b7:f6:77:45:
         0d:3a:ae:e1:79:bc:3c:d7:6c:47:36:b2:59:25:09:76:1e:f2:
         1f:1f:6d:47:c1:10:6c:53:a7:0e:0a:c9:d8:ca:69:3d:e2:d0:
         97:7a:b5:5b:9b:b5:a9:61:cf:48:28:4d:c5:73:62:38:46:6a:
         cd:b7:4c:56:16:cd:b8:b1:69:70:70:bb:05:fe:0a:b9:23:79:
         c0:73:6a:85:88:d7:dc:50:08:4a:f6:60:25:6e:77:fd:e5:e3:
         2a:92:5e:ee:40:14:4c:c9:29:95:74:46:ba:fc:11:c2:b8:5a:
         39:ca:9c:d4:25:07:bb:2f:f5:24:42:84:25:ee:3b:23:43:eb:
         93:62:f9:3d:9b:1e:84:8a:79:ff:49:b6:ef:63:e2:13:f5:e6:
         12:ad:44:0b:75:8e:d0:dd:e6:95:53:c3:89:84:e9:69:80:b1:
         89:5c:39:ba:06:8e:4f:6a:0d:0f:2b:ad:91:75:e7:32:ba:5c:
         ac:2f:60:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----