Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/079b17df-38a4-3cb7-849e-22c836d33a10.roa
File:                     079b17df-38a4-3cb7-849e-22c836d33a10.roa (raw, json)
Hash identifier:          u2XxUiPxZg0hJEyPpoviwfMfWVezy8sgd7rRAKwrJgo=
Subject key identifier:   99:CF:6D:6B:F2:A0:06:C9:78:9B:21:E0:29:72:91:FF:4D:AF:05:DB
Certificate issuer:       /CN=505332f5-c843-4e04-add6-4ef51984b8f2
Certificate serial:       010D0C9F4328583DD0980DFD86FEA624D0546180
Authority key identifier: 4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/079b17df-38a4-3cb7-849e-22c836d33a10.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2620:108:d000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d0:98:0d:fd:86:fe:a6:24:d0:54:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505332f5-c843-4e04-add6-4ef51984b8f2
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=08715ddd-6819-4b55-8b1c-76675231cad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5d:dc:d1:df:d7:24:de:bd:44:ba:fb:9f:33:
                    9f:7f:3d:3b:27:42:fa:7a:c0:86:f5:28:17:5d:12:
                    9f:a5:1f:8a:14:e3:13:99:bd:89:47:51:e6:ca:72:
                    8c:10:56:9b:b3:79:5e:b3:5f:c1:81:1c:08:bb:54:
                    35:c7:89:b7:c4:b3:39:12:6d:85:fe:93:f6:08:66:
                    56:43:70:64:e5:70:98:05:c1:d2:95:5d:60:b4:db:
                    00:18:be:4a:2e:12:7c:ae:fb:6d:4a:be:82:5d:03:
                    37:6f:45:56:e9:e3:ef:8a:31:d6:b2:ff:73:a9:d9:
                    45:b2:8b:fe:27:4f:dc:00:32:83:d4:73:ec:4e:1d:
                    c7:78:a7:f8:d1:1b:8a:48:f5:31:24:f0:a0:c3:2b:
                    a9:11:03:08:de:78:47:74:50:1e:16:e1:fe:5c:fa:
                    2f:96:a3:ea:cb:2f:0e:a4:23:53:95:25:d1:46:1d:
                    9f:00:a8:f1:5a:32:ab:29:be:63:06:2d:0a:e3:75:
                    d0:22:9e:d1:5a:3f:fe:93:0d:87:81:c0:c8:09:9d:
                    b8:88:08:f4:11:5f:6a:6f:14:07:51:53:71:5f:75:
                    8f:fc:ff:60:4b:b0:a4:64:db:52:2f:bd:6a:be:15:
                    f3:99:61:a7:b8:cf:54:69:07:f5:4d:19:04:45:5d:
                    c6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CF:6D:6B:F2:A0:06:C9:78:9B:21:E0:29:72:91:FF:4D:AF:05:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/079b17df-38a4-3cb7-849e-22c836d33a10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/505332f5-c843-4e04-add6-4ef51984b8f2.crl

            X509v3 Authority Key Identifier:
                keyid:4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:71:ce:82:d1:46:d7:70:16:4a:d0:b4:39:0a:9d:81:79:4a:
         92:09:ec:0e:02:4f:e6:2d:bb:6b:af:43:07:9d:17:f4:07:ea:
         b0:b1:68:71:5d:25:62:06:1f:cd:2c:9c:39:00:8a:be:77:75:
         62:38:04:05:5d:de:04:d9:ae:91:c1:a4:48:32:d1:3f:8a:95:
         38:69:e7:51:42:20:6b:25:1c:1e:7c:ce:6e:66:68:a6:af:36:
         f5:40:95:aa:90:9c:f3:d1:c6:5c:37:fd:eb:2b:ac:35:3f:bc:
         a9:28:f0:a4:c1:e8:9f:2f:c4:be:30:c0:ea:1e:90:67:a1:ae:
         65:63:c2:f0:e7:bb:83:ba:92:96:64:96:e7:a1:30:d8:03:a3:
         1a:b4:f4:f4:0d:22:48:31:bb:35:8e:16:f9:fb:08:2a:fc:87:
         9e:b5:ea:e4:99:7b:22:10:e6:b1:3e:31:39:f6:db:cf:93:8a:
         f5:5a:94:4a:a3:de:be:1c:19:ef:ff:35:4b:50:9b:10:2b:78:
         1f:89:ff:e0:c6:bf:20:62:09:68:ee:66:75:5b:59:7a:c2:34:
         d7:0e:7a:83:0f:4a:bf:bf:5b:55:09:b0:9a:c8:3d:a2:e7:0b:
         5c:35:33:5d:c9:85:bd:da:90:7b:8e:7d:f5:04:83:b4:95:96:
         4e:bc:16:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----