Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/422d27b3-bc7c-306c-80c7-d35ada08eaa9.roa
File:                     422d27b3-bc7c-306c-80c7-d35ada08eaa9.roa (raw, json)
Hash identifier:          QNf3PA7NLVGjxFzWHrXZT5P0bubyoCntybg6AXyw6do=
Subject key identifier:   CB:7C:62:D6:A7:64:36:E8:04:B8:8A:0B:88:C7:55:B1:50:F4:27:E8
Certificate issuer:       /CN=7b7224c0-abb1-4387-9b24-b77e802833d4
Certificate serial:       010D0C9F4328583F303C3C8EC7AA2D9BE7EB3740
Authority key identifier: 0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/422d27b3-bc7c-306c-80c7-d35ada08eaa9.roa
Signing time:             Thu 08 Sep 2022 12:00:00 +0000
ROA not before:           Thu 08 Sep 2022 12:00:00 +0000
ROA not after:            Fri 14 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2606:8140::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:30:3c:3c:8e:c7:aa:2d:9b:e7:eb:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7224c0-abb1-4387-9b24-b77e802833d4
        Validity
            Not Before: Sep  8 12:00:00 2022 GMT
            Not After : Oct 14 04:00:00 2022 GMT
        Subject: CN=c8b2bcec-3a13-434e-99e1-bd6e3cbc2911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:a5:75:39:bd:c3:98:c5:b2:7c:26:1c:5a:
                    b0:e1:cd:28:91:1f:af:16:9e:ac:68:2b:b1:46:21:
                    7e:54:a8:8d:34:b9:10:cd:1c:36:cd:0f:e0:70:bc:
                    6f:a2:83:7e:5d:4d:8b:70:12:f3:a6:2e:9d:2f:c7:
                    8f:15:fd:02:ce:df:9c:69:90:c4:0e:db:3f:0a:40:
                    e8:c1:3b:67:76:63:45:85:cf:52:1a:1a:10:09:60:
                    b8:d3:4f:9a:c0:e6:f1:15:42:e5:0a:fe:c7:4a:1c:
                    68:f1:ac:d0:78:16:dc:9d:1c:ca:9c:e7:e2:ed:47:
                    43:36:27:41:14:ae:d9:a9:2b:48:87:52:d8:a3:0e:
                    66:ad:1b:b9:c9:0c:38:aa:d5:4d:0b:fa:61:8d:13:
                    5a:da:46:26:10:7a:45:0f:ac:09:36:12:47:c1:3e:
                    75:23:3d:a9:f3:e2:b6:61:7f:67:94:ee:b4:1a:e8:
                    d3:fc:4a:49:30:84:8c:13:d1:d5:b2:cb:49:d9:63:
                    5d:87:52:56:f6:16:e1:83:10:91:47:e3:25:4d:31:
                    6a:42:57:2b:c1:2f:83:ef:61:15:48:b8:2d:07:dd:
                    31:93:a2:2b:17:f6:d1:01:69:f1:a0:a9:cb:df:e5:
                    d2:00:dc:28:bb:28:57:30:64:dd:2d:24:48:9c:c6:
                    cd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7C:62:D6:A7:64:36:E8:04:B8:8A:0B:88:C7:55:B1:50:F4:27:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/422d27b3-bc7c-306c-80c7-d35ada08eaa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/7b7224c0-abb1-4387-9b24-b77e802833d4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:fe:18:74:1e:78:2f:64:4d:a5:82:6c:c5:ae:9b:47:68:4c:
         31:e7:c3:47:84:00:1a:2a:cf:2a:4d:fe:8b:6e:8b:99:7f:bb:
         19:87:ca:cf:e5:d0:db:15:b9:ff:19:f9:de:73:6b:09:b8:99:
         1d:9a:60:27:10:70:0f:61:e0:cc:79:86:a9:e3:ca:65:a6:53:
         63:02:ee:b1:c2:66:0b:00:95:5c:97:ee:22:15:8e:bf:32:c1:
         71:2c:15:86:95:60:8b:c6:8b:da:f8:c1:80:d4:6a:41:29:50:
         70:92:c2:c6:ae:38:3e:a7:c6:f6:85:d6:44:d1:d8:a2:f3:e8:
         9b:3d:8b:86:86:d1:53:81:ac:96:67:94:3c:ff:40:ec:21:15:
         ef:07:08:98:dd:fd:bd:a6:e0:74:af:35:3c:70:50:2b:a7:5e:
         b4:c1:1b:a2:84:c1:de:14:61:fe:ff:a2:3a:64:3e:9b:e0:44:
         e5:c9:45:ad:cb:2a:79:1a:e7:22:c2:f1:be:15:7c:35:10:41:
         aa:44:9f:c3:22:1e:14:97:22:98:87:50:c4:5c:53:15:06:da:
         c2:b4:d9:49:f3:7b:12:9c:62:c5:82:5f:4c:01:93:45:75:4b:
         56:91:9f:f8:ba:53:d4:8e:e0:41:03:7d:03:23:d8:1d:7f:07:
         64:bf:43:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----