Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/61a2ee55-e58e-3cb2-ac2a-11e6848876d6.roa
File:                     61a2ee55-e58e-3cb2-ac2a-11e6848876d6.roa (raw, json)
Hash identifier:          glROrr9N6reEiubn6Dix5q57O5gtQ6HdD7RsukR2Xjo=
Subject key identifier:   20:4F:EC:EE:9A:25:80:62:5F:2A:BF:DC:D5:74:3C:EB:31:D5:64:71
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583D5A0911185576FE0E4A5C2F80
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/61a2ee55-e58e-3cb2-ac2a-11e6848876d6.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        72.21.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:09:11:18:55:76:fe:0e:4a:5c:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=aa6aca16-0207-4b31-9fa9-19f24dea566e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5f:ae:06:55:d8:8c:2a:04:97:c7:9b:b3:5c:
                    0d:ae:fc:e7:47:25:c4:70:57:8a:97:6b:d9:a5:80:
                    92:31:bd:87:c2:77:30:19:e6:7d:e9:75:1b:4b:eb:
                    c4:7a:03:e5:f2:a4:69:53:7b:15:84:74:ff:3e:3c:
                    f8:79:df:e4:12:09:11:b6:d7:58:31:b2:39:05:06:
                    8c:93:31:1d:5b:af:f3:fb:40:1f:3f:6e:b1:63:2a:
                    99:f3:39:a4:60:ff:af:66:ea:8c:3c:f3:86:09:db:
                    ed:bb:6c:60:6d:6a:33:04:61:42:73:8c:b6:2b:d4:
                    f3:dd:08:d4:91:04:f0:df:64:20:66:59:4f:ff:c3:
                    fd:56:75:0c:14:fa:a0:d5:23:78:2f:ea:65:74:9a:
                    8a:31:80:44:80:b4:c5:48:f3:70:d0:06:c6:07:5b:
                    c8:97:62:f7:66:5c:31:a8:0a:26:d5:11:02:4f:ad:
                    d4:79:c8:1e:cc:89:76:f2:f3:25:66:b8:06:5e:73:
                    56:a8:3b:f7:28:61:73:be:9d:51:ae:02:d1:07:b8:
                    b8:19:2b:81:bd:ba:7c:04:b1:35:80:1c:41:e2:48:
                    8d:1f:f2:96:91:1a:7b:a1:e3:7f:18:93:a1:25:1c:
                    c8:6e:b8:3f:9d:29:5b:74:a3:2a:b0:ec:45:a1:51:
                    23:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4F:EC:EE:9A:25:80:62:5F:2A:BF:DC:D5:74:3C:EB:31:D5:64:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/61a2ee55-e58e-3cb2-ac2a-11e6848876d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:f8:a2:64:4b:11:8f:97:b1:62:7e:de:e4:56:c2:42:b5:bf:
         7f:8d:c1:0a:58:fa:61:f5:cc:71:05:4d:50:f4:50:4b:5c:8f:
         a4:25:f3:c2:3f:cf:c2:ad:c7:97:f8:1f:c8:0f:cd:86:33:00:
         55:6b:07:00:ec:8e:c7:76:f4:a7:2d:f6:f3:cd:98:49:65:c2:
         d8:88:bc:66:27:61:54:08:50:e3:e1:26:84:ed:16:91:7c:44:
         4a:53:11:00:38:8b:7f:53:0d:4a:2e:e1:56:04:ad:4d:71:67:
         f4:fd:f3:d4:3f:31:f6:ee:85:07:de:4e:25:03:b6:c0:2d:6f:
         b6:a7:ca:26:da:00:ce:84:cd:e0:84:79:fa:d4:e7:33:c6:76:
         93:74:56:9a:8b:90:8f:e8:f0:04:7f:3a:fb:05:ef:40:a6:33:
         0b:a8:cc:21:dc:80:3d:f5:08:0f:3c:0d:02:84:40:d7:a6:5a:
         58:f2:48:18:6f:78:52:b2:58:77:66:71:76:43:27:59:ab:d8:
         d2:f8:02:f0:73:b5:37:5c:c6:d5:58:6f:f8:45:b7:9a:52:4d:
         af:85:03:e5:aa:99:00:4c:60:0d:47:a5:ba:29:9a:b9:fe:63:
         18:5a:76:d8:e6:d6:30:76:29:74:7f:c4:a3:95:c4:be:f1:c7:
         cf:50:ab:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----