Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/8e476f3a-197c-3538-9dad-d6ac5c670f6b.roa
File:                     8e476f3a-197c-3538-9dad-d6ac5c670f6b.roa (raw, json)
Hash identifier:          dGQY5b+UKqnmcUUTZAQXHfUgcpH+1XgDDVxLn6625j8=
Subject key identifier:   92:C2:56:A4:93:C7:14:00:B2:E2:55:2D:FE:78:58:D4:EA:1A:DA:C1
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583FF2B27A52A7BC6570AB0CF310
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/8e476f3a-197c-3538-9dad-d6ac5c670f6b.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f2:b2:7a:52:a7:bc:65:70:ab:0c:f3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=ae5c7361-c022-4cb2-a25f-4593e11bdaa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a1:44:d4:8b:a9:eb:ef:42:51:66:47:12:cb:
                    ab:1d:bb:bb:2e:0d:65:24:17:37:30:4f:bc:01:2f:
                    95:c8:1e:93:8c:09:d8:29:98:8e:fe:5d:3c:2c:8b:
                    98:ed:9f:3d:fc:7d:88:af:91:c5:44:fa:b6:77:2f:
                    e5:9f:f1:29:54:2b:e8:75:7d:b8:60:0f:d4:51:d0:
                    d8:65:af:cd:63:11:50:31:ee:4e:74:91:c2:7d:bb:
                    e0:1d:db:6f:32:2e:92:b6:57:0a:93:25:2c:73:f7:
                    dc:80:cd:ae:2b:4a:e6:54:35:eb:2b:c2:18:38:11:
                    3d:97:d3:e4:e1:83:9c:6a:05:a4:86:18:65:26:5a:
                    93:e6:7e:dd:93:8d:67:56:0b:0a:14:52:c2:d6:6d:
                    5d:af:6a:7d:a5:0a:68:ab:e3:1a:cc:13:ea:71:8e:
                    80:c4:f8:e4:76:c3:15:c4:19:de:8c:3e:ca:d4:47:
                    c6:d0:f0:fd:17:a1:ac:ad:c1:cc:23:e9:ff:e6:ed:
                    c8:6a:29:a1:c0:a9:2d:ea:be:12:92:53:3c:07:c0:
                    f0:26:2f:d4:6e:58:10:21:2d:02:29:92:be:50:6f:
                    bf:9b:8b:06:cb:d8:14:bd:38:2e:17:02:7b:10:ac:
                    40:41:64:9e:3b:97:e3:4f:db:52:9e:23:fa:17:20:
                    07:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C2:56:A4:93:C7:14:00:B2:E2:55:2D:FE:78:58:D4:EA:1A:DA:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/8e476f3a-197c-3538-9dad-d6ac5c670f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:fc:bf:0e:8a:08:a8:d5:89:90:7b:7d:45:df:c9:62:1e:58:
         1e:6d:f6:65:74:c1:a0:18:bb:8f:d4:99:50:e2:bf:9e:1d:90:
         3c:bf:17:0b:3f:14:f6:c9:ec:1a:a1:31:44:f0:c3:4c:fe:ea:
         fa:59:44:c0:df:86:11:43:e8:f0:58:d0:71:69:ae:40:56:b2:
         72:42:34:4f:77:01:08:15:d9:6b:1c:68:16:33:34:1c:14:cb:
         f8:3b:20:89:b7:11:b2:9f:04:6c:1d:27:1b:4a:32:9c:08:95:
         bc:31:47:5f:44:5c:89:74:83:35:9c:99:1e:b9:7f:39:47:68:
         ce:41:02:d2:ea:11:31:b5:87:4f:e6:e4:47:ba:87:bd:9e:92:
         cb:80:d9:87:f0:17:d4:2a:ec:06:c0:ad:27:14:be:73:92:a8:
         52:04:1e:37:cb:b9:75:76:64:24:66:ed:6c:99:cf:bf:da:ce:
         fa:42:12:c3:7a:7c:3f:7b:00:15:a8:b2:ea:83:8b:17:2a:f4:
         a6:b5:26:12:bd:0f:9f:79:44:43:42:9a:60:41:e9:08:1a:64:
         fe:89:71:d3:bd:ca:35:ff:d2:b6:56:3b:ca:c5:8c:d9:97:85:
         2f:db:a2:23:e1:71:33:ff:fb:25:e4:66:6e:f0:ac:48:b2:1e:
         6a:7a:54:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----