Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/4ae8baa1-ba7e-3793-923b-9417213e1646.roa
File:                     4ae8baa1-ba7e-3793-923b-9417213e1646.roa (raw, json)
Hash identifier:          pI8GI4JPO9il7uk07ze63m08/K+QtGpuNQSx8WsjEmE=
Subject key identifier:   52:A2:21:E7:B7:E3:1E:36:24:82:4B:CD:D0:1F:84:45:CC:9E:A9:7B
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583D81B3002AA36D8513A1EF2780
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/4ae8baa1-ba7e-3793-923b-9417213e1646.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        204.246.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:81:b3:00:2a:a3:6d:85:13:a1:ef:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=f55d06bb-49cb-492c-a744-74265588c936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d0:dd:31:db:5d:b5:74:c5:47:69:cf:cc:ad:
                    a3:80:0a:48:63:e5:9d:07:7f:a8:22:d0:d4:d1:ef:
                    f4:c9:2a:fd:2b:af:45:05:e5:ae:79:76:f2:50:d3:
                    17:c4:19:d8:8e:f7:dc:52:f1:b2:35:f1:96:bf:dd:
                    43:26:5a:75:49:33:17:c9:cb:b1:eb:c3:f5:ec:ca:
                    d9:41:59:a1:20:55:aa:d4:fd:e9:07:93:07:a4:af:
                    e0:f0:5d:aa:4d:79:84:e8:87:ec:45:91:61:84:d9:
                    ef:ff:a4:9f:fc:e0:5b:ba:ea:70:b2:f9:e9:f9:1a:
                    19:02:e0:4f:5e:5b:a2:72:21:d2:25:b1:12:87:f5:
                    5a:e6:f3:44:bc:99:21:37:73:2b:60:43:a8:c2:e7:
                    3f:93:33:2f:b8:d8:4d:df:61:2b:e9:a5:98:b4:62:
                    8c:b9:e6:2f:a9:06:19:ec:71:8e:61:20:88:d5:bb:
                    01:dc:cd:ad:90:82:ec:a9:1d:2e:45:10:f3:02:f1:
                    08:5a:ae:98:74:c5:04:6e:40:e1:7a:e7:6b:db:32:
                    ff:42:61:5f:bc:9d:f6:56:b3:dd:e0:32:95:7b:ad:
                    d0:14:18:39:97:73:42:6c:b4:fe:ee:8b:4f:97:74:
                    6d:eb:0e:f8:3d:aa:b1:f4:d2:25:70:04:2a:7d:0c:
                    71:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A2:21:E7:B7:E3:1E:36:24:82:4B:CD:D0:1F:84:45:CC:9E:A9:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/4ae8baa1-ba7e-3793-923b-9417213e1646.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:de:9a:1f:e1:13:f5:30:89:90:6c:19:0e:3b:09:cb:fd:b3:
         2b:fd:f3:88:4d:4c:26:43:b8:80:ed:2f:02:dd:51:d2:a4:d6:
         d0:41:42:78:4a:ad:7f:14:04:99:e9:a9:49:ae:26:b7:62:cb:
         c9:d2:9c:1a:d0:e0:88:90:73:f1:a8:3c:44:20:59:50:35:2c:
         16:e0:06:39:a8:ba:ef:d8:91:4c:57:86:8a:f8:e4:2e:49:6f:
         53:78:b4:eb:42:0b:01:e9:f8:41:f6:12:d3:13:c2:12:2f:fa:
         0b:02:38:be:cd:67:9a:2c:8f:4d:e8:ea:2e:d6:94:3f:73:e7:
         1c:35:3c:af:a0:1a:3c:69:f8:c5:5b:fa:aa:a5:d8:11:51:68:
         4e:a9:c4:90:53:49:39:c9:b3:a5:a3:e7:c1:18:e9:d2:a1:0a:
         27:0a:20:6c:81:7b:d2:a9:35:de:2c:bf:d9:00:96:38:88:ab:
         a3:5d:ea:34:9f:9c:bc:f7:85:a1:67:ce:a0:66:2c:31:4d:c3:
         6e:c8:1c:e5:b6:8c:8e:4d:74:e6:d8:53:90:cc:f3:3f:28:dc:
         a1:77:a6:fa:ce:07:66:96:ea:ba:34:d9:5f:ba:35:52:17:46:
         e5:2f:d2:d6:34:dc:5c:6f:56:5b:ac:01:96:b4:04:1f:5f:03:
         bb:4e:af:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----