Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/77e4aed8-f690-3dd2-950b-b09c772d54e5.roa
File:                     77e4aed8-f690-3dd2-950b-b09c772d54e5.roa (raw, json)
Hash identifier:          YlIMhTStUGuBtLPvGEQMNtcmIKOwWn/vZAFNkfEn4fE=
Subject key identifier:   A4:1D:A1:E1:2C:4E:15:BD:D5:AA:72:14:25:4A:77:7B:36:BA:30:B2
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583E1F57E9E0E8F66BBC2F3A2B00
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/77e4aed8-f690-3dd2-950b-b09c772d54e5.roa
Signing time:             Fri 03 Jun 2022 12:00:00 +0000
ROA not before:           Fri 03 Jun 2022 12:00:00 +0000
ROA not after:            Sat 09 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        204.246.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1f:57:e9:e0:e8:f6:6b:bc:2f:3a:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Jun  3 12:00:00 2022 GMT
            Not After : Jul  9 04:00:00 2022 GMT
        Subject: CN=e365320b-6bbc-4783-a4cf-e452454465b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3f:b0:88:08:29:51:96:73:e1:45:7f:5e:cf:
                    82:cb:d9:f0:a7:0e:c1:d1:41:26:7b:64:e7:17:a4:
                    02:b3:b7:7f:72:a3:02:95:c1:96:33:26:f5:d9:23:
                    6d:42:fb:df:60:22:30:9d:15:1e:3c:02:69:0a:bf:
                    3f:52:1e:49:7a:3d:51:6d:e5:70:bc:60:41:20:15:
                    98:b8:ab:a2:2b:f6:1b:33:62:54:22:0e:a6:a5:f0:
                    5d:d8:9f:c5:e0:13:ce:7e:13:e5:ea:c6:5b:3e:f7:
                    8b:b3:3b:3b:5f:b4:00:25:65:cc:f6:7d:66:f9:8b:
                    33:0a:8f:8f:58:ea:1b:2f:10:f6:62:98:6a:99:e3:
                    7a:eb:2f:49:5c:a3:3c:99:6c:2f:89:88:04:69:ef:
                    19:f0:da:5e:c2:3c:a1:1e:36:44:79:d8:be:8b:28:
                    4b:d7:30:63:d1:47:57:7d:a4:e5:7f:70:f0:90:f3:
                    aa:49:9e:e5:01:61:ac:86:24:6e:2a:14:c1:12:ee:
                    81:b4:7c:32:8f:68:e5:9c:72:b5:59:4e:ca:8b:12:
                    45:73:ec:00:f1:88:ad:de:85:2d:d2:fd:37:ef:0f:
                    63:df:dc:5a:2d:4b:8c:2e:41:00:42:eb:34:7f:73:
                    f3:e8:26:91:7c:d0:c2:fc:63:0e:5f:a0:c3:5a:f5:
                    49:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1D:A1:E1:2C:4E:15:BD:D5:AA:72:14:25:4A:77:7B:36:BA:30:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/77e4aed8-f690-3dd2-950b-b09c772d54e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:af:22:2c:66:bb:57:16:61:f0:ab:48:0f:94:58:1a:43:d2:
         e5:b3:df:86:b4:b0:e4:2e:4e:a6:59:bb:6c:45:c4:d6:8f:66:
         03:0e:3a:78:07:ac:00:28:b8:63:93:c2:39:e4:7d:ce:31:67:
         49:3e:59:5c:01:3a:f0:9b:8f:ee:51:d3:9b:a2:5e:f1:26:54:
         32:2d:eb:ec:7a:d9:b3:99:a1:44:d2:9a:e1:2d:85:7c:4c:13:
         e9:1a:c4:9e:46:e8:7d:e3:15:8a:9b:1f:0d:52:88:a8:94:93:
         e1:55:0f:0c:70:6b:a2:aa:12:b0:fe:df:10:d3:0e:b6:dc:85:
         e6:96:66:79:39:85:b8:a5:65:32:15:e5:24:d7:bd:9b:6a:f9:
         58:0e:68:7c:6e:3d:9a:4b:bb:20:07:32:29:52:a6:5b:24:7b:
         e9:a0:cb:88:87:f5:e6:95:5d:0d:61:1f:12:4e:86:f4:6e:fe:
         0e:97:78:72:a0:08:ca:ae:c6:3f:60:18:3c:a7:d9:7a:86:fe:
         ac:9e:5f:0d:08:93:dd:c5:2f:1f:3b:9d:e9:1d:36:34:4f:e2:
         d5:29:44:a5:f5:ac:ab:05:8b:83:ec:0d:55:b3:ae:06:9b:ec:
         03:a7:fe:a9:76:7f:22:0b:b6:5f:24:45:87:07:a5:52:9b:95:
         8c:59:08:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----