Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/44b651b0-4c3b-352b-8c32-8fb8b21e6b8d.roa
File:                     44b651b0-4c3b-352b-8c32-8fb8b21e6b8d.roa (raw, json)
Hash identifier:          gfQbMllDYig7ok/Dl5/aCKRPVjAFSlDOu7xPkLYRRgE=
Subject key identifier:   9E:A8:EE:73:EE:38:BD:B4:FF:8C:80:32:03:89:69:96:90:58:14:57
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583C9677DB73312453008F54C460
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/44b651b0-4c3b-352b-8c32-8fb8b21e6b8d.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        72.21.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:77:db:73:31:24:53:00:8f:54:c4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=243e2265-418b-400a-99c1-58bd3c2e1a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:98:72:4d:19:cf:ee:d3:ea:1d:8e:e5:19:f6:
                    f2:11:a6:e5:6e:6c:1e:5d:eb:9b:77:88:e9:b2:89:
                    96:62:9f:f9:86:ea:23:cb:7e:88:4a:85:a1:71:66:
                    ef:4f:62:66:6d:a1:df:44:9a:d9:7d:3c:74:79:57:
                    dd:01:59:eb:fc:12:8e:4e:5f:d7:e0:ff:de:2e:dd:
                    51:4a:15:5d:43:29:58:e0:65:97:9b:0b:2a:84:cd:
                    6d:05:12:69:12:15:d7:b2:74:9e:cc:5a:ed:58:55:
                    8f:90:d6:c9:b6:8c:7b:dd:18:2c:5c:0e:44:98:cb:
                    10:6d:0c:b2:14:33:ef:75:29:fa:ae:61:7d:2a:16:
                    88:8e:9b:a2:bf:83:ab:9a:42:14:1c:07:a4:a8:50:
                    fb:30:59:bb:41:d0:91:31:65:be:1b:10:a3:79:b4:
                    7e:cf:af:c0:9d:ea:98:e1:6f:c6:e8:6a:3a:fa:ea:
                    cb:33:4b:c2:b7:65:10:8a:0c:cb:72:45:ba:17:14:
                    24:b2:72:ab:e4:36:9d:60:09:74:84:bf:3f:9e:e6:
                    e5:ab:f4:89:11:e3:f4:a6:9e:86:9b:39:2e:e9:e8:
                    0a:f1:c4:9d:3d:ce:29:6c:c0:03:86:12:1e:22:0b:
                    ca:2e:b7:a1:37:12:c5:49:06:ce:05:0b:e5:33:d2:
                    a5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A8:EE:73:EE:38:BD:B4:FF:8C:80:32:03:89:69:96:90:58:14:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/44b651b0-4c3b-352b-8c32-8fb8b21e6b8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e0:be:99:4b:33:69:21:dc:02:55:d5:a6:2e:14:d6:f0:6d:
         69:c3:be:dd:e4:9b:8e:31:7c:fa:d9:c2:a0:fe:9e:da:1a:9d:
         a0:09:9b:0a:da:a2:13:d0:7a:ea:ba:b5:c2:50:44:06:a9:d7:
         f2:01:05:99:63:94:b5:b0:42:47:e6:d8:07:7d:19:e8:d1:20:
         7d:2b:90:f9:5c:0f:f4:06:46:4d:d8:ab:0e:11:27:43:06:7d:
         f8:01:24:ea:31:f9:60:36:e5:aa:3a:b5:37:17:43:b4:63:ea:
         79:0d:4e:6f:35:98:83:f6:2d:40:b0:27:c2:a8:0e:ad:f6:96:
         3c:a4:29:d4:c0:11:30:92:0b:8e:36:67:dc:9a:fb:7a:19:0a:
         cc:76:29:52:9e:42:ac:d3:cc:2a:54:e0:50:2a:21:58:2b:84:
         99:97:48:f3:6a:36:58:57:9c:38:24:a8:5e:f6:ff:10:e1:b1:
         7a:d6:d0:98:41:b7:9f:0f:83:4d:8e:9d:e9:f9:ac:53:ec:92:
         f8:38:93:4c:ef:0f:00:4d:00:29:4c:30:78:c8:55:4a:c4:86:
         bd:dd:d5:d8:29:13:cc:84:67:31:2d:f3:8a:df:22:8f:ec:60:
         a6:00:55:4f:3a:c7:4a:fc:d2:28:38:3c:c3:94:40:87:7d:d6:
         02:de:ec:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----