Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/7975bc09-69ba-391d-b46a-cd1e4ec78b0c.roa
File:                     7975bc09-69ba-391d-b46a-cd1e4ec78b0c.roa (raw, json)
Hash identifier:          4uJMKhxoemRfwzFyOcdID6mOH/+lKWL4kQKiz8sMcoU=
Subject key identifier:   1D:77:A4:30:11:5B:91:FE:44:D1:8B:BC:0B:6C:83:D0:60:0B:3B:FB
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583FF356391707F731A0FBEF0900
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/7975bc09-69ba-391d-b46a-cd1e4ec78b0c.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        216.137.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f3:56:39:17:07:f7:31:a0:fb:ef:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=8b3346bf-2123-4b88-8d33-27904df227ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:7a:b1:96:8d:15:47:c6:2b:5d:1b:a6:1d:
                    0d:e7:76:43:b6:bf:2f:b9:30:4b:d5:bd:10:34:1d:
                    1b:28:92:72:4d:62:fb:16:66:b0:08:2e:3e:80:54:
                    1c:cd:61:ae:01:3d:37:e5:48:51:ff:4d:1f:89:ee:
                    ed:af:ac:0d:b8:91:3b:61:17:fa:67:1c:6c:4f:24:
                    6f:a1:2f:26:5e:4d:d6:01:42:5a:f1:e3:0a:7e:dd:
                    a3:59:f1:93:94:81:10:ff:f4:0f:21:f2:b0:8b:fd:
                    db:f2:1b:f3:1f:89:33:ab:04:68:e5:9a:74:ab:f7:
                    6b:93:83:81:c5:6d:60:dc:90:b8:00:f6:56:ac:17:
                    0c:ee:36:87:b5:22:cf:bd:74:6b:54:ce:70:fb:36:
                    6a:3d:5a:a2:1d:8c:69:2c:e9:3a:5b:b0:12:59:e1:
                    fb:f4:27:e8:73:8e:7e:b9:0c:12:ac:09:a4:c4:69:
                    c8:95:9b:6e:f9:85:4c:85:c0:70:6b:ce:ea:56:6e:
                    23:bc:20:01:83:34:71:79:14:23:51:64:0d:0a:06:
                    7b:a5:e2:e2:55:af:29:51:45:3c:75:03:9a:af:6e:
                    7e:b6:fe:85:e3:2b:32:4b:e2:52:8d:1e:e2:17:82:
                    e4:8d:da:a7:5e:a6:16:bf:df:bb:e9:40:84:a3:91:
                    b9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:77:A4:30:11:5B:91:FE:44:D1:8B:BC:0B:6C:83:D0:60:0B:3B:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/7975bc09-69ba-391d-b46a-cd1e4ec78b0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b0:0c:b1:d9:a2:ec:1b:3e:7f:ee:2f:c4:6e:93:8b:69:3e:
         30:0e:7f:e0:2c:50:40:7a:c4:e0:bf:27:7b:98:80:f3:ae:f1:
         17:7e:5c:c4:b2:05:01:08:92:22:2f:05:9d:70:89:77:fa:3a:
         d9:d6:23:11:ba:a4:22:7b:14:16:84:b2:fe:73:2c:ba:28:c3:
         70:30:c2:72:70:22:30:b3:1e:46:63:b7:b6:a4:ce:64:ef:9d:
         d6:e2:76:67:ac:4f:13:a8:3b:72:e5:03:d2:05:9c:50:93:d3:
         a1:ef:63:96:5b:59:44:fb:95:83:cc:5b:91:c1:ff:44:64:29:
         80:5e:33:4f:ff:fc:0c:24:9d:c8:02:ec:ef:8f:ed:36:6c:6f:
         08:e7:ea:8b:b4:7c:94:e3:2b:d2:51:f0:77:bb:09:d8:89:4b:
         4a:fd:57:7c:dd:5f:2c:15:22:4c:62:1f:e4:c6:08:ae:cf:b2:
         f1:4e:13:06:9a:82:3b:dd:c6:33:75:8c:fc:da:4a:bc:ef:f0:
         17:54:0c:9a:70:a5:e6:70:a5:2a:f3:70:f6:4a:97:19:32:aa:
         5a:fa:24:83:3a:c7:9a:7a:00:bf:80:ce:ec:40:9e:5b:f9:cf:
         92:6d:ec:27:eb:0b:63:fb:b7:c4:72:2d:24:1c:3e:58:fa:f6:
         2a:9c:b9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----