Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/20d86fd8-a273-351f-905d-db5b3453a766.roa
File:                     20d86fd8-a273-351f-905d-db5b3453a766.roa (raw, json)
Hash identifier:          4+Cc2csBGeaatjdWw8/h+VXlF3OmA60jYiU7AiGMl4w=
Subject key identifier:   0E:99:6D:80:62:E9:FC:B8:23:2F:CD:E4:10:A1:48:FE:B5:99:35:6A
Certificate issuer:       /CN=7b7224c0-abb1-4387-9b24-b77e802833d4
Certificate serial:       010D0C9F4328583E93C82B42C4F49FF6D4FBF000
Authority key identifier: 0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/20d86fd8-a273-351f-905d-db5b3453a766.roa
Signing time:             Thu 14 Jul 2022 12:00:00 +0000
ROA not before:           Thu 14 Jul 2022 12:00:00 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2606:8140::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:93:c8:2b:42:c4:f4:9f:f6:d4:fb:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7224c0-abb1-4387-9b24-b77e802833d4
        Validity
            Not Before: Jul 14 12:00:00 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=5dab07bd-1111-4577-8577-525ab94f7de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:3b:f6:26:43:96:77:5d:ad:ac:6e:1e:54:
                    d4:5e:b3:2b:13:7a:45:20:e1:5c:27:96:a4:f8:c2:
                    0b:77:fc:fc:4f:c7:a7:c6:fd:9b:30:3e:a2:14:f5:
                    92:a2:2b:d5:58:c9:ba:88:bf:52:af:e1:02:d6:6f:
                    24:9c:d3:2a:a3:ac:02:80:3d:4b:d7:b6:62:12:28:
                    48:01:78:2c:73:88:d6:1e:c3:29:0f:96:c2:17:67:
                    8a:48:2a:1f:17:b7:b6:90:3c:2e:94:04:04:40:73:
                    59:2d:18:43:a7:bf:39:57:f0:4f:21:68:bc:37:5e:
                    0b:f3:8e:a7:01:a2:e0:fe:3b:c4:69:38:14:e7:d1:
                    b2:af:e6:dc:4f:7f:32:f0:3b:71:f6:de:ab:51:12:
                    c7:13:d3:ba:5d:73:0e:ef:20:3a:dd:e8:47:b1:3d:
                    ab:7d:fa:1f:69:b1:6f:04:96:80:f2:f5:45:8d:0f:
                    4e:6c:02:64:7e:cd:0f:ad:ca:4a:f0:d8:73:df:ab:
                    0d:f1:7e:be:21:42:db:d1:37:82:cd:33:3e:08:24:
                    5c:0e:de:d5:bb:e1:ec:0e:ae:12:30:05:97:56:d6:
                    e7:1e:9c:d0:65:f7:56:ac:00:49:67:e5:81:f5:5a:
                    79:5e:e8:cb:2a:33:6d:80:2b:ac:df:1b:bd:bb:34:
                    5c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:99:6D:80:62:E9:FC:B8:23:2F:CD:E4:10:A1:48:FE:B5:99:35:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/20d86fd8-a273-351f-905d-db5b3453a766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/7b7224c0-abb1-4387-9b24-b77e802833d4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:11:0b:a7:d8:7d:6a:0a:e1:77:7b:67:3c:27:96:15:03:d9:
         04:64:9c:43:05:3e:0e:65:3e:47:5c:d0:f5:d3:7b:c3:21:2a:
         74:4d:3f:40:cf:3f:1c:6e:77:c8:68:39:98:da:d8:1f:01:a0:
         6d:b5:a9:98:51:cb:12:0d:d7:81:07:5c:16:18:84:2b:99:57:
         8d:b3:97:c8:60:59:c1:70:e7:7d:33:85:6d:42:42:f9:c0:83:
         21:dd:08:bb:40:a4:44:67:cf:27:19:ea:21:21:f1:5d:54:09:
         e9:ec:32:04:51:bd:87:50:f3:cb:90:51:51:2e:e4:ca:f9:c8:
         78:80:22:69:d1:9f:82:52:1b:40:05:10:f0:4c:aa:ab:59:4d:
         00:3a:a4:cb:0e:87:97:19:c8:08:11:c5:04:2c:57:82:da:13:
         d0:1b:d3:48:c0:4d:8b:d0:8e:82:4f:fa:52:f1:54:f3:bb:09:
         72:3b:9b:9e:57:5b:55:26:e7:6e:89:5d:fb:d5:d0:50:d6:c9:
         7d:69:eb:64:6a:1d:ae:9b:e2:f3:f8:a7:42:2d:2c:f9:8e:12:
         fe:f4:e9:2f:a6:b7:69:41:f5:20:be:ae:7f:68:f1:39:af:f3:
         43:73:89:44:ca:99:a7:df:2a:33:ab:9e:24:14:48:b7:39:3f:
         a3:d2:cf:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----