Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/7789c60e-7c25-353c-80a7-54db12abf19c.roa
File:                     7789c60e-7c25-353c-80a7-54db12abf19c.roa (raw, json)
Hash identifier:          N4ZqVA3En/ypN3kgcR2aVlP6f7RbxAwQMoe3S0N5FXQ=
Subject key identifier:   EE:7A:86:B9:AF:60:56:A3:24:83:36:20:4F:4F:37:64:22:52:D2:E1
Certificate issuer:       /CN=7b7224c0-abb1-4387-9b24-b77e802833d4
Certificate serial:       010D0C9F4328583FCC661FB2B003C04A8921C200
Authority key identifier: 0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/7789c60e-7c25-353c-80a7-54db12abf19c.roa
Signing time:             Thu 03 Nov 2022 12:00:00 +0000
ROA not before:           Thu 03 Nov 2022 12:00:00 +0000
ROA not after:            Fri 09 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        2606:7b40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cc:66:1f:b2:b0:03:c0:4a:89:21:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7224c0-abb1-4387-9b24-b77e802833d4
        Validity
            Not Before: Nov  3 12:00:00 2022 GMT
            Not After : Dec  9 05:00:00 2022 GMT
        Subject: CN=08c94aec-f28b-4894-bfb4-2c0afe1b061e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dc:de:a3:66:1a:cc:8c:c1:a4:3a:ee:1e:72:
                    b8:6c:fa:0b:ee:df:58:eb:79:6c:cc:de:45:95:ad:
                    60:17:5f:07:4d:a1:e5:9c:87:68:65:c6:e6:d4:11:
                    e2:75:cd:95:8a:a6:06:1f:ec:5b:c3:4b:f4:a6:e9:
                    be:03:49:56:1a:01:77:c4:1f:72:c8:24:2f:ac:73:
                    19:c9:a3:bb:32:c5:72:12:b3:e9:7f:db:39:25:cd:
                    d8:74:ba:1f:fc:2b:b6:78:52:03:8b:b9:a1:9c:0e:
                    1c:ac:70:6d:71:16:54:e0:d6:ba:49:43:45:ed:3b:
                    bc:fe:30:de:12:cd:47:7c:74:91:69:df:b2:cc:48:
                    da:b1:ec:6c:5f:3e:0e:cc:0e:e6:32:d4:01:88:ea:
                    23:f4:96:d6:a6:0d:b2:5e:c0:4c:b1:4b:21:5d:ec:
                    30:e9:5b:85:99:db:72:fa:03:17:ee:a7:de:ce:71:
                    b5:26:16:3a:08:98:68:07:98:6d:66:9f:d6:a8:86:
                    d9:f5:4b:49:db:20:21:7a:fb:3b:0a:1f:8d:8f:1a:
                    5c:ef:46:09:de:3b:7e:0e:e2:03:48:77:70:b1:7b:
                    5a:df:ba:b3:d4:bc:d5:38:36:f0:72:60:04:18:39:
                    61:28:5e:64:77:95:70:b7:48:05:04:59:94:3c:f0:
                    17:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7A:86:B9:AF:60:56:A3:24:83:36:20:4F:4F:37:64:22:52:D2:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/7789c60e-7c25-353c-80a7-54db12abf19c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/7b7224c0-abb1-4387-9b24-b77e802833d4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ee:9b:67:35:ac:8d:2d:4e:e4:bf:a6:d6:20:44:af:2f:4d:
         a2:a2:5f:00:7f:f2:3f:9b:d8:7a:78:59:08:1b:6f:ea:bd:34:
         4a:f6:91:2f:c8:99:16:0f:37:a7:c7:a9:88:7d:bc:c7:ba:31:
         fd:e1:e9:64:b8:13:bd:05:f4:d4:22:1a:a6:84:d3:b6:ee:96:
         de:8c:ee:cb:c4:fb:ef:2c:77:f6:3d:04:3d:ba:8d:07:13:a1:
         1e:5c:7a:94:bb:4e:d7:c0:eb:34:5a:2b:0c:87:12:ed:45:7f:
         04:e6:65:f5:e3:3b:86:55:e1:8b:5d:a2:c8:26:76:ae:2d:93:
         60:43:e0:f6:5f:d7:23:27:52:a1:27:96:c6:b1:64:31:81:c2:
         a0:f4:db:98:e8:6d:63:cb:cb:54:f4:a7:23:9d:ca:46:16:b7:
         48:37:d0:dc:d7:d2:7b:44:2c:c1:0c:09:dc:a0:17:e9:5d:5f:
         d2:82:ce:b2:50:5b:6e:b5:7a:ff:63:ce:57:96:59:d8:51:ba:
         63:60:80:cb:c5:a4:47:73:8e:f9:88:ed:17:bf:9a:67:27:5b:
         65:40:82:fe:51:14:7f:a1:5f:b8:ae:56:b9:93:af:a4:44:aa:
         c6:73:87:ed:42:3d:5b:26:94:b9:9d:0e:39:e6:4e:3f:76:0a:
         bb:11:72:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----