Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5921e699-798d-3e9a-bc74-bd5393b12c99.roa
File:                     5921e699-798d-3e9a-bc74-bd5393b12c99.roa (raw, json)
Hash identifier:          vJbczXoyp/D/iUjhI54SCqCN+Y8c86FxxUYMsU8KCMM=
Subject key identifier:   F8:33:CE:B0:34:E0:DC:0E:C5:75:BC:99:38:2B:0F:56:D5:4E:35:09
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583E45D11A297571619A98D17FB8
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5921e699-798d-3e9a-bc74-bd5393b12c99.roa
Signing time:             Thu 16 Jun 2022 12:00:00 +0000
ROA not before:           Thu 16 Jun 2022 12:00:00 +0000
ROA not after:            Fri 22 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        216.137.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:45:d1:1a:29:75:71:61:9a:98:d1:7f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Jun 16 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2022 GMT
        Subject: CN=8233446c-6985-42ab-b3d4-75901f189612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bd:33:ee:9b:18:9b:67:8d:44:39:8b:37:6d:
                    32:e5:68:33:e5:dd:34:90:0e:af:33:0f:58:cc:af:
                    ba:4d:08:18:86:ab:fb:17:ef:14:f2:e9:d0:50:f0:
                    1e:07:b8:3b:c8:d2:4b:f0:30:34:fd:04:8d:e7:24:
                    f0:36:bd:4b:c2:77:3c:77:32:1e:f0:e7:64:5e:c9:
                    5e:51:e8:ec:82:20:bf:d4:be:84:bd:cc:b7:f2:49:
                    ae:58:87:f6:d8:ed:88:ec:ed:5c:62:61:0d:37:ca:
                    9f:48:4d:3f:80:65:0b:72:f3:d1:9f:04:3e:b6:a7:
                    80:98:df:63:79:44:0c:da:54:cb:cb:9b:c6:38:ff:
                    f4:84:02:74:93:6c:4a:6e:a4:cc:9c:94:6e:e6:73:
                    2c:54:3a:5c:44:92:a0:eb:57:5d:b6:15:93:83:6e:
                    90:cc:81:6b:40:7b:a0:8f:f0:a8:44:6a:8f:c8:c2:
                    bd:b0:b7:92:ec:3b:af:04:98:8c:5b:17:d5:f8:23:
                    ae:c4:cd:86:c6:16:fd:73:97:9b:05:b9:83:9f:27:
                    47:6d:10:cf:cb:66:3f:cf:e9:87:f4:9c:04:a8:28:
                    a8:70:fc:00:2e:bd:04:3b:64:f5:dc:51:e2:3d:7f:
                    45:a0:29:29:70:bf:70:7d:16:7a:15:e3:21:35:bb:
                    e4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:33:CE:B0:34:E0:DC:0E:C5:75:BC:99:38:2B:0F:56:D5:4E:35:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5921e699-798d-3e9a-bc74-bd5393b12c99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:8b:aa:53:ea:7a:c2:6e:b2:33:8d:b3:ea:f5:6b:32:16:a5:
         3a:b0:11:df:0d:e2:0f:2f:05:45:13:29:52:48:f4:1c:cb:ee:
         c9:ec:80:3b:a9:a9:c6:6b:7e:8d:c2:fe:d8:d8:90:52:98:15:
         ed:67:47:8b:8c:f5:35:9d:79:1b:00:6a:c7:04:97:cc:03:7c:
         71:4c:dd:97:bc:c4:45:d8:42:74:82:fc:e7:cf:fb:a4:af:7f:
         ec:90:a0:47:53:1b:38:2e:2c:49:47:e3:05:26:e6:43:76:83:
         c5:e4:3e:2c:60:aa:d6:b5:5e:a7:67:8a:5f:69:02:92:cb:03:
         a1:21:cf:92:aa:7a:a1:96:76:a5:aa:f5:9c:40:46:52:f3:31:
         2b:cf:b5:7c:ca:ce:eb:27:04:d7:57:74:7e:37:45:38:6e:e7:
         2d:2d:19:e8:64:9a:d6:37:db:4b:c5:d5:0e:d0:ee:76:8c:0d:
         3a:3f:24:57:18:6d:e8:ea:b1:f3:d5:f2:42:ba:ea:d6:a5:ac:
         e1:6a:0c:a2:97:de:4e:63:c1:ae:5e:71:44:ca:95:43:83:24:
         5a:15:86:97:58:38:fb:b4:98:f8:d9:b7:f9:91:f1:a0:70:d1:
         68:cd:cd:e8:90:e5:d0:69:a8:d3:39:8d:87:66:ea:2e:09:5b:
         d9:38:7a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----