Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d66be2ca-9529-4430-bcfe-12e5b919f33d/6ceb9d7b-00af-3df2-9a82-247ebffd3de8.roa
File:                     6ceb9d7b-00af-3df2-9a82-247ebffd3de8.roa (raw, json)
Hash identifier:          oRthK6kmKxnPAuJ1HS3PcYucExSPDkTH6MaF/FoTl3M=
Subject key identifier:   E7:D4:16:4F:0E:25:FD:8A:B3:3A:AA:ED:4F:DB:75:83:5D:4C:CE:91
Certificate issuer:       /CN=d66be2ca-9529-4430-bcfe-12e5b919f33d
Certificate serial:       010D0C9F4328583E1BA391A35EBFB4670FAE7140
Authority key identifier: 50:0B:54:BB:79:B8:1A:54:3F:DE:E9:66:3B:9B:1C:E9:B1:9D:B6:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d66be2ca-9529-4430-bcfe-12e5b919f33d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d66be2ca-9529-4430-bcfe-12e5b919f33d/6ceb9d7b-00af-3df2-9a82-247ebffd3de8.roa
Signing time:             Thu 02 Jun 2022 13:07:19 +0000
ROA not before:           Thu 02 Jun 2022 13:07:19 +0000
ROA not after:            Wed 04 Sep 2024 04:00:00 +0000
asID:                     395500
IP address blocks:        72.29.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1b:a3:91:a3:5e:bf:b4:67:0f:ae:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66be2ca-9529-4430-bcfe-12e5b919f33d
        Validity
            Not Before: Jun  2 13:07:19 2022 GMT
            Not After : Sep  4 04:00:00 2024 GMT
        Subject: CN=3bafacf9-7ab8-455c-9c12-eae23532cd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cd:c2:cd:5f:53:5e:dc:2c:87:61:b0:a0:2f:
                    b6:22:5b:0b:dd:1f:ab:95:11:cc:79:44:4a:8b:f1:
                    99:ce:54:50:1d:2b:c0:4f:6b:06:ce:65:42:49:39:
                    a8:3e:41:53:cb:f6:7a:0c:4d:33:31:97:c7:88:5c:
                    25:b7:cc:41:29:a4:bd:c4:26:f9:10:c3:06:cc:bf:
                    72:a8:8c:d0:c5:5e:61:b7:df:d1:4b:ad:76:4e:f2:
                    0d:d3:2f:11:02:05:c8:74:42:e5:07:44:e2:a9:51:
                    1d:88:71:a0:6d:b3:39:65:0b:c6:a7:cc:2b:35:41:
                    c9:c6:12:bd:b5:b3:02:c4:2d:8a:80:eb:96:a1:a4:
                    a6:79:62:e3:60:fb:b8:9f:a6:6b:6f:56:b9:82:50:
                    05:91:43:c4:29:3f:a7:ef:6d:90:53:5e:57:0e:02:
                    d9:4a:86:c1:be:7d:b4:bb:33:e5:2b:54:71:10:c1:
                    03:26:5a:ad:3d:28:fc:ba:38:b9:b6:81:31:90:42:
                    94:e5:a3:58:78:4b:77:99:99:6f:d3:0a:f3:eb:b0:
                    39:a7:3c:35:fd:71:0a:6a:11:f8:1b:42:a3:01:29:
                    a6:a2:17:49:fc:0f:81:44:6d:57:96:13:25:5b:95:
                    26:48:00:c1:e5:64:33:8d:09:64:df:e3:1d:f5:e8:
                    1f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D4:16:4F:0E:25:FD:8A:B3:3A:AA:ED:4F:DB:75:83:5D:4C:CE:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d66be2ca-9529-4430-bcfe-12e5b919f33d/6ceb9d7b-00af-3df2-9a82-247ebffd3de8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d66be2ca-9529-4430-bcfe-12e5b919f33d/d66be2ca-9529-4430-bcfe-12e5b919f33d.crl

            X509v3 Authority Key Identifier:
                keyid:50:0B:54:BB:79:B8:1A:54:3F:DE:E9:66:3B:9B:1C:E9:B1:9D:B6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d66be2ca-9529-4430-bcfe-12e5b919f33d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.29.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:39:a4:f8:1c:42:7f:98:28:f3:b7:d8:fd:de:5e:7b:5f:30:
         0e:b7:1c:ae:5e:4e:0a:1d:ce:a3:d5:06:5d:8e:08:db:dd:40:
         ce:7e:3d:00:64:f4:86:3d:50:b6:14:3d:d2:c1:9b:c1:82:84:
         58:ee:d3:e0:25:f1:14:64:7e:d5:e0:08:16:15:65:d1:86:3d:
         f8:8e:fc:5e:68:16:60:04:f0:2c:b6:3e:81:79:4b:e4:53:6e:
         78:c8:f3:f7:51:80:8b:4e:0f:df:cb:df:df:bd:d2:bd:80:30:
         40:44:7b:24:85:5c:80:c5:e8:62:e7:4c:98:f9:7a:cb:f8:2c:
         72:82:ae:a2:b8:52:7b:1f:1a:d7:30:65:10:d0:a1:42:39:03:
         0b:40:9b:39:f3:8e:7f:11:41:7d:e2:5a:8e:d1:b0:ae:5d:ae:
         6c:26:50:7f:5a:1e:00:27:dc:80:0c:86:a2:c9:86:f6:f1:73:
         98:0b:c4:e0:ba:d6:48:43:d1:ef:9a:f0:43:df:24:fe:a8:e9:
         97:b3:2a:b9:99:7b:b9:4b:44:76:0d:0c:3f:91:a2:f0:ba:ae:
         f6:51:ef:fe:8f:9d:58:1f:0a:74:3e:26:6c:45:57:12:95:f8:
         10:de:ca:d4:a4:f8:27:82:f6:31:cd:7a:ac:37:ab:03:b2:38:
         c5:d5:12:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----