Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/74f05f57-2fa3-39d3-8c8c-f39871dfdde9.roa
File:                     74f05f57-2fa3-39d3-8c8c-f39871dfdde9.roa (raw, json)
Hash identifier:          n58XoPxCRNq/q0tkF9sVHIss0EtQjiAxRc7pueoDyEk=
Subject key identifier:   6B:08:B2:75:AC:73:48:F5:77:26:F1:59:C1:02:0F:AB:98:A0:FC:EC
Certificate issuer:       /CN=7b7224c0-abb1-4387-9b24-b77e802833d4
Certificate serial:       010D0C9F4328583E93C8712CBC722D68ADD57D30
Authority key identifier: 0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/74f05f57-2fa3-39d3-8c8c-f39871dfdde9.roa
Signing time:             Thu 14 Jul 2022 12:00:00 +0000
ROA not before:           Thu 14 Jul 2022 12:00:00 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     801
IP address blocks:        2606:7b40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:93:c8:71:2c:bc:72:2d:68:ad:d5:7d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7224c0-abb1-4387-9b24-b77e802833d4
        Validity
            Not Before: Jul 14 12:00:00 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=7fb5ece7-64fb-4a01-9ed5-91918fd83699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b5:c9:a9:4d:13:10:f6:34:5b:61:f0:30:1e:
                    ad:2f:75:5d:21:db:b2:81:6d:c4:6e:99:df:1c:1d:
                    54:aa:a9:46:53:40:ed:5c:20:66:1e:16:a4:09:6e:
                    76:fd:6c:b5:28:f2:5b:12:fe:38:2d:8d:45:f1:20:
                    d6:06:1c:11:51:88:7d:2e:52:3d:1b:f6:c7:01:90:
                    d7:2d:c3:00:53:89:43:7c:5a:ee:b2:ee:dd:8f:e7:
                    45:a0:9b:03:7d:50:b5:9e:65:28:15:69:0d:5c:09:
                    e7:aa:76:00:0d:95:4d:cb:ea:72:bf:a6:08:58:8f:
                    3f:2b:85:30:b1:0b:42:f5:07:7e:74:03:b3:cd:8f:
                    49:b6:bf:01:c2:4c:57:a4:c9:ce:f7:49:72:22:5a:
                    cc:53:fb:62:cd:a5:55:c7:2f:0f:df:07:69:8f:ff:
                    af:89:2c:92:4d:1c:92:54:15:ee:63:d1:eb:f4:97:
                    09:33:92:0f:fd:10:4b:c9:f8:00:ed:e5:bf:80:8b:
                    6e:6a:5b:d7:6c:1f:55:75:2c:a5:2e:c3:19:14:42:
                    09:4f:42:ab:ac:e5:a8:7d:fd:2e:06:ca:00:22:6f:
                    2f:f2:2d:39:d0:cb:81:ef:5f:bc:0e:22:a6:24:9e:
                    46:0b:4a:08:78:e3:df:09:60:4d:8b:8b:8a:4f:4a:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:08:B2:75:AC:73:48:F5:77:26:F1:59:C1:02:0F:AB:98:A0:FC:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/74f05f57-2fa3-39d3-8c8c-f39871dfdde9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/7b7224c0-abb1-4387-9b24-b77e802833d4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:6a:53:7b:d1:63:aa:a9:6e:73:29:8c:66:39:be:0f:4c:b2:
         3d:e0:c3:00:b5:8c:bc:eb:92:8b:99:db:5c:3c:05:ae:14:94:
         6a:9d:a4:eb:54:a9:f7:35:54:0d:c5:6b:39:20:17:3a:75:50:
         f4:e0:7a:3e:15:4f:14:26:16:63:5e:cc:45:7f:6f:d5:ec:50:
         91:2e:c3:85:f2:cb:98:21:cc:d7:60:95:e5:cf:25:02:8f:29:
         80:38:f4:9e:4b:a2:24:a3:3a:3b:78:6a:0f:ca:06:61:2a:52:
         38:89:07:bf:1d:6f:7f:4d:06:a7:61:70:3e:20:76:21:bf:3b:
         a6:96:ce:21:39:67:0d:eb:3f:21:d8:c5:d4:bc:de:11:78:40:
         94:d5:04:ef:cd:17:be:6e:82:51:1f:9d:13:b5:11:4a:d5:12:
         2d:d2:a5:f8:97:14:26:8e:b1:0c:ba:e8:17:56:2b:31:c8:cc:
         27:b6:13:60:00:ce:2c:2e:c3:ae:b7:80:c4:34:26:40:de:d8:
         8e:7f:ee:4b:dd:39:78:b6:df:51:84:be:20:97:d2:9e:6d:f0:
         93:a9:c6:35:26:6a:46:96:76:66:cc:e8:8b:dd:61:a1:18:8c:
         db:ee:7e:e2:08:38:e4:92:f9:97:eb:7c:f8:52:5a:d4:54:d8:
         13:cf:e5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----