Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/22987355-cc86-33a3-bec0-9829f5713448.roa
File:                     22987355-cc86-33a3-bec0-9829f5713448.roa (raw, json)
Hash identifier:          M6WDqtbgIgFKMBWcT6QdlRHcghQ2/Xw1P+RIFqlAfRk=
Subject key identifier:   CD:FD:DE:05:76:2F:F0:82:71:47:8D:14:80:66:F8:A5:CC:D8:19:02
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583E45E7D589667A415A7B872240
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/22987355-cc86-33a3-bec0-9829f5713448.roa
Signing time:             Thu 16 Jun 2022 12:00:00 +0000
ROA not before:           Thu 16 Jun 2022 12:00:00 +0000
ROA not after:            Fri 22 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2600:9000::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:45:e7:d5:89:66:7a:41:5a:7b:87:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Jun 16 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2022 GMT
        Subject: CN=4ddb11d9-3977-4ea7-8026-5e7176268447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:97:29:4b:2e:20:37:01:23:9d:e4:ea:f6:62:
                    58:0a:1b:54:e9:bd:a1:68:aa:d1:8c:72:33:a8:f1:
                    75:df:4a:5e:de:86:80:13:30:75:5c:55:81:42:e3:
                    f8:a9:17:78:3c:7c:db:42:61:9d:4f:c2:71:ba:59:
                    be:b6:87:9d:76:67:d2:cd:7f:7b:f1:2d:a8:f6:79:
                    9b:28:f6:f4:5b:ec:98:28:b5:00:42:d7:e6:d0:00:
                    76:88:01:40:c1:7a:40:ea:e3:22:92:b7:d7:b3:03:
                    da:54:89:1b:8b:94:b9:34:97:6c:70:70:18:c2:dc:
                    d7:43:e9:e9:f6:a7:b0:c0:65:d3:bc:13:35:af:d3:
                    0b:99:ee:02:72:12:3c:32:fd:38:16:56:74:2d:0a:
                    a5:e0:4c:89:78:5e:9a:b3:54:79:89:e8:b4:5c:69:
                    5f:29:f4:74:d0:45:aa:88:02:8c:09:7d:49:20:8b:
                    c4:d0:7f:25:ca:66:45:d6:d7:2d:91:fe:2f:71:51:
                    00:42:d4:9d:8c:e4:4e:ed:60:cc:76:45:a8:3d:5f:
                    c0:48:20:9f:46:d2:71:d6:3d:26:ba:a9:2a:4d:ff:
                    1a:de:1c:c7:c8:f5:5a:47:68:8e:a5:aa:a0:fc:e7:
                    64:58:95:f6:f2:96:b3:b7:f3:60:29:65:c4:18:ba:
                    43:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FD:DE:05:76:2F:F0:82:71:47:8D:14:80:66:F8:A5:CC:D8:19:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/22987355-cc86-33a3-bec0-9829f5713448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:06:75:44:d2:6e:62:df:cc:aa:cb:ff:f0:07:16:91:01:b5:
         af:29:18:56:f8:50:02:07:f5:53:b8:f7:6a:5a:eb:10:19:91:
         1e:c3:dc:bd:5f:ba:7d:a0:b5:d4:26:fc:f6:28:d0:d2:ac:15:
         34:aa:ed:53:7a:09:69:8d:38:2a:7e:52:7f:68:72:99:82:81:
         0d:82:0d:15:8f:33:b1:c8:b0:b4:3a:f3:a7:e4:0e:b5:0e:29:
         d3:66:55:19:23:05:ce:aa:d9:38:72:97:3b:be:31:23:a1:3c:
         60:0a:2b:d0:4d:9b:fa:8e:6f:58:d6:ee:2a:fc:ab:64:16:60:
         d7:5d:a9:4b:bb:5d:fe:69:fd:8c:fd:16:ac:ff:23:d4:37:28:
         6c:c2:b3:58:69:9f:cc:26:eb:40:a0:51:e3:b1:74:58:67:45:
         b0:28:ed:e4:e4:6a:f5:f4:2f:fe:c9:9a:c4:96:02:ca:05:03:
         3d:85:7a:f9:95:9b:cc:34:33:11:3a:7e:73:0a:3f:ad:09:2a:
         77:ce:be:40:1c:cb:31:4b:e5:61:c9:80:c8:a5:7a:05:31:3b:
         83:1e:c2:3a:a5:82:19:0b:c4:38:f7:13:70:8e:d4:06:84:38:
         6a:fe:78:61:33:34:72:f5:4a:21:f9:07:40:ca:06:55:b0:eb:
         a6:a0:65:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----