Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1de40b3d-6b9b-4cc0-b5dd-8bd6935648cf/aa6d39db-3282-324a-bd28-2b65ab58d8ff.roa
File:                     aa6d39db-3282-324a-bd28-2b65ab58d8ff.roa (raw, json)
Hash identifier:          aKi9SDHkweZXqeLCPDMAAGZpALv9dLjItlBrU+Fy++Y=
Subject key identifier:   DB:82:D9:48:CB:12:44:B8:14:05:8C:C8:60:C5:9E:22:C9:E7:92:5E
Certificate issuer:       /CN=1de40b3d-6b9b-4cc0-b5dd-8bd6935648cf
Certificate serial:       010D0C9F4328583859D0DEE1D67988A38F1A3450
Authority key identifier: C9:A5:4C:C3:0A:58:F5:2E:88:6B:33:EC:FE:21:83:9B:63:FF:27:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1de40b3d-6b9b-4cc0-b5dd-8bd6935648cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1de40b3d-6b9b-4cc0-b5dd-8bd6935648cf/aa6d39db-3282-324a-bd28-2b65ab58d8ff.roa
Signing time:             Mon 21 Dec 2020 05:00:00 +0000
ROA not before:           Mon 21 Dec 2020 05:00:00 +0000
ROA not after:            Sun 26 Mar 2023 04:00:00 +0000
asID:                     800
IP address blocks:        207.32.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:59:d0:de:e1:d6:79:88:a3:8f:1a:34:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1de40b3d-6b9b-4cc0-b5dd-8bd6935648cf
        Validity
            Not Before: Dec 21 05:00:00 2020 GMT
            Not After : Mar 26 04:00:00 2023 GMT
        Subject: CN=cd662c80-8851-4b47-a307-49bbb10742e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:3c:23:3d:e4:ab:40:23:19:1b:27:a5:74:
                    50:9a:1f:4b:4d:85:ab:ad:ac:65:52:54:d5:94:c6:
                    fe:23:23:ba:27:87:71:9f:3f:44:35:32:c6:c1:15:
                    73:38:1c:8e:84:68:e9:a3:3e:f9:98:3a:fd:0d:f2:
                    d0:28:5c:05:77:95:ef:bc:23:84:00:9c:41:c5:57:
                    4a:ea:38:90:39:41:0f:4b:c1:f3:ab:45:3c:bf:c5:
                    49:bd:45:2c:8e:de:21:d4:8a:38:6f:ec:c0:00:e7:
                    d3:cd:d6:2f:3c:94:0d:08:ba:aa:fb:0c:7e:90:8d:
                    26:b6:88:be:30:16:d4:33:7b:45:a2:af:23:94:e9:
                    3d:54:fe:a8:39:44:9b:cf:94:08:9d:a7:4e:f7:11:
                    a8:29:4c:5f:c8:c3:b3:2d:dc:84:3e:dd:7b:dd:26:
                    cf:b6:df:09:67:90:df:a3:38:fe:dc:93:29:d9:cf:
                    50:c1:35:d7:1b:b7:f5:dc:0a:99:f6:0e:ee:7e:d4:
                    0d:92:46:c1:8e:2b:70:67:a7:13:15:8f:91:b0:fa:
                    d3:1d:9b:38:f1:fb:15:ec:23:71:13:2f:24:ce:ee:
                    37:a3:d0:19:be:7c:52:d9:20:d9:5b:99:81:1b:a3:
                    d1:62:ef:b2:ed:19:d2:c1:7c:62:f2:f6:80:1c:b6:
                    8f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:82:D9:48:CB:12:44:B8:14:05:8C:C8:60:C5:9E:22:C9:E7:92:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1de40b3d-6b9b-4cc0-b5dd-8bd6935648cf/aa6d39db-3282-324a-bd28-2b65ab58d8ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1de40b3d-6b9b-4cc0-b5dd-8bd6935648cf/1de40b3d-6b9b-4cc0-b5dd-8bd6935648cf.crl

            X509v3 Authority Key Identifier:
                keyid:C9:A5:4C:C3:0A:58:F5:2E:88:6B:33:EC:FE:21:83:9B:63:FF:27:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1de40b3d-6b9b-4cc0-b5dd-8bd6935648cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.32.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e6:20:3d:03:86:83:c8:13:37:8d:81:de:3a:48:bc:18:61:
         eb:df:20:44:90:af:30:c4:b4:08:24:d8:7c:d4:18:43:6a:05:
         03:ac:b0:6a:94:90:41:ca:c4:e7:1b:22:72:44:09:28:eb:f1:
         a1:09:0b:ad:bc:03:bf:52:63:6a:db:43:26:8c:ab:5f:0c:7c:
         a0:af:5b:56:60:02:ce:1b:a0:7f:8b:90:9b:50:6e:9b:8f:67:
         02:6f:88:6e:12:35:4f:a7:f0:06:86:0b:65:14:3b:f3:f2:57:
         e3:5b:f5:b9:34:19:bb:c9:78:5a:f5:43:60:80:5c:4e:fd:0f:
         d7:cf:91:35:66:c5:93:95:fc:f2:b0:16:00:85:1a:8a:27:55:
         d7:cf:02:50:dd:1a:f9:bb:9b:10:98:9a:ce:2b:3a:eb:fe:f7:
         12:9e:e2:5a:d0:6b:ff:a9:66:14:62:2a:0e:19:58:19:c1:07:
         7c:4f:10:a2:37:cf:29:ef:42:5f:9f:b4:6a:0f:97:67:77:41:
         00:a2:bb:2e:bc:b7:38:e0:dd:1a:b9:46:c1:98:51:f9:44:f1:
         fe:0b:f3:74:89:ff:c5:57:68:eb:59:1d:b3:0f:e8:28:e1:99:
         67:db:e9:6f:ee:94:63:56:17:9a:ac:fc:4a:9f:e2:42:ca:a7:
         64:a5:71:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----