Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a73693dc-5972-3954-b64b-451561a2e7ad.roa
File:                     a73693dc-5972-3954-b64b-451561a2e7ad.roa (raw, json)
Hash identifier:          IGG8xC8iBCvmi+6XL4taY16HXg/Kbh6j3sGT7N+ryGE=
Subject key identifier:   D2:FF:C3:95:72:A9:D3:EA:10:E0:9E:B5:A8:4F:06:07:86:08:B0:C0
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583E1ECAA1B6254EDA7E8E052180
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a73693dc-5972-3954-b64b-451561a2e7ad.roa
Signing time:             Thu 02 Jun 2022 12:00:00 +0000
ROA not before:           Thu 02 Jun 2022 12:00:00 +0000
ROA not after:            Fri 08 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2600:9000::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1e:ca:a1:b6:25:4e:da:7e:8e:05:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Jun  2 12:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2022 GMT
        Subject: CN=56c7107a-c556-4648-be65-d8e559b958fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:96:e3:8b:40:c9:18:a5:49:55:68:61:1e:b5:
                    73:57:7a:aa:9d:ea:6d:af:fb:70:17:db:00:c6:da:
                    5f:0c:5e:5e:aa:84:ef:17:8d:81:af:d0:9b:c9:96:
                    4b:34:a6:dd:bb:5f:b8:8b:45:04:14:90:03:30:b8:
                    b7:23:24:25:34:4b:3e:61:d2:62:1b:af:36:58:a7:
                    16:cc:ec:4f:e4:21:75:08:05:94:b9:ef:30:55:aa:
                    60:4e:3e:1d:37:88:1a:a3:a8:66:45:f5:88:7e:4d:
                    fd:87:86:7a:0e:84:d3:c8:fd:a5:c4:6e:49:e2:24:
                    8a:7b:9d:4c:dd:5c:9a:4a:ef:f5:bd:7e:d1:c3:0d:
                    88:0c:9c:74:ed:25:ab:96:88:ac:b4:d8:78:d4:f5:
                    c7:08:58:cb:dc:38:3e:e7:b5:3a:d9:3a:5e:1a:e3:
                    d2:f1:62:27:78:0a:dd:68:c5:65:fa:74:12:83:b7:
                    dd:fa:b2:b1:23:4c:19:78:8f:1d:05:af:5e:18:b9:
                    95:5b:78:5c:ef:11:e7:33:4d:19:6d:41:3b:41:ff:
                    fd:b0:5f:26:bc:c3:a7:78:2a:b2:9b:d6:f6:b8:a7:
                    32:2a:9b:e9:eb:e5:1f:a0:30:4f:7c:71:dd:3c:a8:
                    53:d2:a3:89:cd:e9:33:36:d8:2f:37:21:19:cb:17:
                    04:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FF:C3:95:72:A9:D3:EA:10:E0:9E:B5:A8:4F:06:07:86:08:B0:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a73693dc-5972-3954-b64b-451561a2e7ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:5a:f5:69:81:d6:8a:16:23:ae:01:07:56:1f:17:25:3c:9c:
         a4:3d:5a:fd:52:40:71:84:99:d6:fd:d0:5d:0a:98:b3:7e:57:
         bc:a4:37:04:e2:72:62:8e:87:fd:4f:74:34:62:f6:d8:e7:92:
         fc:aa:5b:aa:21:df:8a:20:a1:fc:99:cf:b3:a6:f6:c6:bd:ba:
         ab:06:29:f6:37:d2:fc:77:9c:cf:15:68:0f:ab:7b:7b:cb:e2:
         46:ed:50:e1:fa:24:93:f8:0e:dc:c2:fb:e9:50:d3:72:8f:b8:
         ff:dd:ec:d5:94:23:a6:52:fb:96:9f:f4:2a:cb:78:27:4c:48:
         71:45:b3:0c:49:9b:72:72:e0:c6:9b:55:ec:ec:7a:79:bd:e1:
         f7:7d:b8:80:a1:61:f5:cf:cf:b3:8c:85:ab:79:f2:11:ef:4d:
         4d:8c:3b:9e:8a:a9:0e:0e:96:d2:8f:62:51:e4:8d:fa:82:d2:
         6c:d2:f7:0c:b8:e3:d7:e3:c0:7b:c9:42:5a:6d:f1:2e:88:9d:
         71:06:cf:33:03:b0:90:ab:16:2e:a4:f0:0e:36:26:7a:1f:b4:
         ea:19:1c:10:c3:f8:38:4d:05:e3:3e:7a:37:0f:60:97:4e:e6:
         ec:3e:a4:c4:0f:1f:f1:39:64:24:b1:b7:6c:60:63:a3:4b:57:
         3a:09:8d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----