Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/0cc73fe4-8566-3e8a-bd2a-3a4760b65099.roa
File:                     0cc73fe4-8566-3e8a-bd2a-3a4760b65099.roa (raw, json)
Hash identifier:          Pd2vFn40Sj4srGAH7i9nPjCzdIldTZRznNfSWLTsKPc=
Subject key identifier:   21:2E:58:AA:C1:8F:63:FD:15:51:4F:04:51:90:80:3B:10:9C:F1:E8
Certificate issuer:       /CN=505332f5-c843-4e04-add6-4ef51984b8f2
Certificate serial:       010D0C9F4328583D338FCA6B068788E5BCD91400
Authority key identifier: 4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/0cc73fe4-8566-3e8a-bd2a-3a4760b65099.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2620:108:d000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:8f:ca:6b:06:87:88:e5:bc:d9:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505332f5-c843-4e04-add6-4ef51984b8f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=b5729152-6662-4e18-89e0-1f7b8b64e0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:bf:8c:1d:57:1d:d9:c3:5a:75:6a:33:58:
                    20:73:2e:93:33:3e:18:f7:43:c3:bd:3d:fd:26:63:
                    91:d8:38:8e:fa:d7:35:07:05:87:1e:33:b5:23:ec:
                    92:b7:62:b6:ae:4d:5a:c5:d7:21:10:30:7d:9d:3f:
                    78:be:88:4a:b0:ed:24:39:76:22:f4:0a:2d:ee:ab:
                    2b:b2:ea:b3:47:2a:ed:4a:e9:44:95:17:35:14:0f:
                    1b:f1:8d:49:e5:a9:32:6f:72:e2:af:43:91:28:09:
                    85:91:1c:56:a2:81:00:61:25:79:31:13:16:36:53:
                    d3:4c:84:cb:07:ee:d4:39:d5:2d:7b:cf:b6:d1:39:
                    2c:00:98:cb:78:ff:53:e5:fc:73:ee:c6:6e:43:23:
                    c3:7a:93:8e:98:a1:fd:51:d2:1c:58:aa:02:3b:fe:
                    ad:08:8f:d6:d1:c2:1d:a2:a5:f9:6d:6c:b3:36:43:
                    a0:e6:e6:6e:db:df:17:59:a4:e6:95:e2:30:16:a7:
                    7f:8b:c5:d6:a3:2b:32:a4:65:3e:32:e1:2d:1d:26:
                    99:25:7b:24:35:04:c5:a4:88:63:21:23:bb:66:37:
                    09:c4:50:09:2c:72:c8:07:20:20:b4:55:64:ad:26:
                    76:a6:1d:7f:b1:c1:2f:10:c7:52:73:50:7a:98:ec:
                    0b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2E:58:AA:C1:8F:63:FD:15:51:4F:04:51:90:80:3B:10:9C:F1:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/0cc73fe4-8566-3e8a-bd2a-3a4760b65099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/505332f5-c843-4e04-add6-4ef51984b8f2.crl

            X509v3 Authority Key Identifier:
                keyid:4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:5f:5f:44:10:3b:79:ff:7b:07:47:bd:86:02:85:94:e4:3f:
         5f:87:42:4c:f1:36:c3:81:06:4a:a5:c5:ae:62:1e:f7:29:97:
         c6:f8:ec:0a:bb:79:3a:2c:b3:5b:ff:f0:c2:56:bf:63:64:69:
         96:f9:9d:e8:08:ed:58:dc:a5:6a:18:5e:e5:fe:2a:4b:4d:12:
         ac:c8:8c:5c:ce:80:f5:88:aa:ab:58:66:57:ea:b5:45:ab:91:
         de:42:f9:9b:e7:5a:67:6b:8f:d5:89:0a:6f:39:4f:46:70:26:
         f1:f4:e6:23:52:d0:2d:96:9a:a8:b1:1d:ab:89:45:6d:83:ad:
         40:b0:a0:2b:a1:0a:f9:d3:d5:bb:5a:26:40:2a:0b:54:36:a4:
         e0:39:88:7e:dd:c7:f1:6f:ac:c1:18:0c:37:75:62:6a:ae:bd:
         37:4d:1e:fd:83:c1:59:ca:cb:53:f3:1d:06:9a:77:9f:02:61:
         a1:27:65:10:ff:fc:a2:72:b1:44:08:38:9f:c6:2a:3c:f7:a9:
         93:4a:4e:33:f3:01:5c:62:40:58:c3:e8:67:b3:62:3d:07:39:
         8b:92:75:f9:d5:c8:fd:3a:64:92:28:c3:0b:99:04:35:e7:fd:
         fe:9b:de:36:e3:0e:d8:fe:d0:d3:9a:a5:9c:55:04:97:08:34:
         dc:82:ad:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----