Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/43d4698f-3d72-32e7-a977-8ddd91c15199.roa
File:                     43d4698f-3d72-32e7-a977-8ddd91c15199.roa (raw, json)
Hash identifier:          0+R/GIbUiPMWUT9f1+p2XMiaWDxT+Sm+YqUGmVFiFzs=
Subject key identifier:   37:8F:9D:44:F8:55:67:AC:D9:FF:71:A4:DD:63:35:37:BD:1A:06:1E
Certificate issuer:       /CN=505332f5-c843-4e04-add6-4ef51984b8f2
Certificate serial:       010D0C9F4328583C6FFEA5BD38AF44A3A8C8AA80
Authority key identifier: 4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/43d4698f-3d72-32e7-a977-8ddd91c15199.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        2620:108:d000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:fe:a5:bd:38:af:44:a3:a8:c8:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505332f5-c843-4e04-add6-4ef51984b8f2
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=554a4109-d8fd-4861-8c49-81ecc171b37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:64:b6:b3:02:1d:80:7e:69:d2:17:8a:5c:b5:
                    bb:b3:32:f8:6b:1b:79:31:e7:89:0f:26:32:ea:24:
                    60:f8:ce:28:09:bc:b5:83:c8:29:b2:0f:d8:c1:9b:
                    14:26:4b:90:1b:84:20:27:0a:ae:b4:d7:a5:fb:77:
                    d8:98:f0:14:ac:d4:d9:d7:cc:b9:56:6f:5a:1c:6a:
                    3d:13:37:fe:64:2e:b9:5a:f7:1b:bc:02:99:b0:cf:
                    31:6b:f4:52:ce:d1:ef:d8:90:de:db:35:7b:9b:41:
                    80:6a:87:d2:0a:93:1a:d9:6e:d6:66:58:58:a6:7b:
                    bd:7e:ef:5f:71:9b:48:00:54:dc:7f:9b:bc:50:67:
                    c5:6e:d5:1a:81:4f:c3:54:d3:2b:72:ac:bc:b3:5e:
                    22:cf:e4:eb:d3:b1:92:3f:3d:a4:e7:73:b6:5e:74:
                    87:a8:96:ff:6f:59:5e:1a:00:d1:ec:77:d4:1b:82:
                    c5:97:34:61:0b:56:b9:89:6d:c5:54:b5:fa:0a:41:
                    cc:2b:11:d2:1c:bb:12:41:c8:a6:94:41:1c:93:bf:
                    39:27:42:7d:4e:d4:78:ec:ed:23:8c:cf:02:c7:5d:
                    96:c9:17:6e:e7:2d:7e:cf:9c:f1:54:ac:10:19:91:
                    2f:08:11:ae:13:26:a8:19:ff:41:21:d0:00:67:ff:
                    14:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8F:9D:44:F8:55:67:AC:D9:FF:71:A4:DD:63:35:37:BD:1A:06:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/43d4698f-3d72-32e7-a977-8ddd91c15199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/505332f5-c843-4e04-add6-4ef51984b8f2.crl

            X509v3 Authority Key Identifier:
                keyid:4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:76:22:b0:c4:b0:76:60:30:b4:4e:23:7e:4b:bf:c5:6a:11:
         c1:03:c9:99:59:e2:75:38:69:10:82:b5:00:e2:7c:6e:97:2a:
         01:d0:1f:72:7a:58:87:06:c4:8f:8a:db:5b:a8:15:6d:e7:ea:
         cc:0c:81:d4:95:61:23:0b:e0:33:61:73:22:8a:d1:38:c2:3d:
         82:dc:75:43:a0:09:6e:e9:61:9f:66:8f:45:40:ca:07:e6:9b:
         8a:e8:45:b7:63:d0:1a:28:09:05:83:d6:59:6c:f3:7f:bb:3d:
         6f:82:06:11:dd:7f:11:cd:64:7a:86:4c:42:80:f4:b4:46:06:
         7e:bc:6d:3e:21:bb:68:32:69:37:3c:37:6c:c3:71:e7:5f:21:
         4b:2e:f2:22:81:cc:d5:ac:d1:95:2f:2c:12:95:12:65:9e:ad:
         4e:70:9a:fb:bb:bd:98:af:6a:8d:51:e5:78:78:9e:67:bd:3a:
         48:cf:e0:d8:c7:c7:cf:2d:06:47:76:67:1b:68:ed:f4:ff:d4:
         de:2c:82:00:39:2d:0e:9d:48:b2:ef:db:d2:44:ef:36:b4:6a:
         51:2c:26:e8:ba:73:b9:c4:33:a5:a2:b0:50:f5:18:38:23:ec:
         10:43:d9:6e:2d:56:e2:9e:5e:aa:08:a1:0c:82:ce:be:d1:f6:
         ad:2e:8f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----