Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/acd808c6-a147-3bdd-a74a-e6dcd34d1b78.roa
File:                     acd808c6-a147-3bdd-a74a-e6dcd34d1b78.roa (raw, json)
Hash identifier:          YJTRDk/RSFD8d+jj3j6eu+fdH0lcOOkWkEf1+HgX0a8=
Subject key identifier:   9E:CD:95:30:96:86:51:79:54:60:A3:10:59:EB:CA:4E:31:8A:D9:22
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583E47A64C4547535AF8E4AEA600
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/acd808c6-a147-3bdd-a74a-e6dcd34d1b78.roa
Signing time:             Fri 17 Jun 2022 12:00:00 +0000
ROA not before:           Fri 17 Jun 2022 12:00:00 +0000
ROA not after:            Sat 23 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        72.21.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:47:a6:4c:45:47:53:5a:f8:e4:ae:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Jun 17 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2022 GMT
        Subject: CN=3412cb82-79b6-4b78-9646-a037786223d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:00:ec:2a:5d:0e:5b:00:d8:a8:95:0f:f7:0c:
                    87:30:30:c5:db:6c:17:ba:18:33:51:e9:32:a4:67:
                    d2:d7:ff:83:61:32:2a:60:4b:bc:58:cf:3f:e0:77:
                    01:fe:fc:04:0e:12:f0:b1:17:0d:74:c1:2b:25:cc:
                    96:ef:26:38:a8:64:eb:89:f5:36:da:20:63:58:88:
                    71:a6:83:e8:bd:91:17:b0:0d:5c:6e:d0:8c:79:52:
                    d8:f2:08:df:6a:31:cc:34:29:45:21:64:f1:ba:0d:
                    f7:f9:86:41:04:d6:ef:fc:5c:36:1d:20:d7:2e:9a:
                    ff:64:11:cf:3e:e0:7c:47:6f:0f:d8:e9:42:f3:40:
                    3d:bf:61:6a:02:18:ec:a7:19:2d:16:62:c9:2a:1f:
                    ec:ef:a1:ee:66:d4:9b:14:ab:a4:0b:0a:a8:29:85:
                    7b:0a:9c:03:de:45:2c:1d:9b:1b:9a:bb:39:24:10:
                    75:ec:12:3c:ae:46:33:e7:79:e1:47:68:f6:5c:26:
                    b6:18:0d:f1:a8:79:25:70:9f:7c:d2:5b:52:5b:86:
                    97:89:38:b6:16:b3:bc:3c:d3:3a:2e:e9:1d:6e:e7:
                    14:2f:94:a0:fc:c9:3b:0c:43:e6:d5:19:8b:d3:61:
                    45:6b:a6:4e:1a:fc:b0:42:ee:05:f2:cb:3c:0e:2b:
                    3f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CD:95:30:96:86:51:79:54:60:A3:10:59:EB:CA:4E:31:8A:D9:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/acd808c6-a147-3bdd-a74a-e6dcd34d1b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:42:e3:ca:1c:92:81:95:37:1a:0b:14:9e:dd:81:a0:68:c0:
         8f:40:8a:a9:0b:75:45:46:4d:ff:31:5a:2c:7b:84:ea:f6:31:
         ee:ff:09:c6:64:16:2f:29:87:2e:31:11:41:7f:db:10:93:a6:
         b7:51:63:e2:24:b2:9d:b3:b3:45:b3:bd:0a:94:8a:df:d4:da:
         a7:4f:f3:eb:c2:17:13:2d:25:95:2a:5c:67:cf:f2:35:95:0e:
         9d:be:17:1d:83:71:84:1c:54:ec:70:3d:54:43:b2:8a:11:7d:
         d1:b8:08:af:81:77:8f:75:e1:19:02:18:98:24:08:9a:64:d2:
         d3:b0:9c:1c:31:3b:d4:ee:48:88:25:c8:5f:c2:bf:9c:b6:93:
         ea:f6:e2:c3:4f:e0:f6:50:72:fb:7d:37:e6:c8:5c:2a:82:81:
         2f:9a:6d:d2:ea:b5:cd:76:1b:d2:68:78:65:ee:f6:f4:d8:4a:
         46:d7:e3:7d:da:de:87:2d:19:2f:b4:30:da:69:e0:d2:ef:2f:
         43:6c:55:62:af:53:ef:eb:14:6d:04:fc:47:f2:19:2b:30:ce:
         4d:9a:50:2b:37:38:a2:2a:0d:96:b6:31:56:ed:23:f7:33:d7:
         9c:ce:96:75:de:d9:03:b6:62:8d:2d:17:88:81:49:e9:7c:b4:
         4c:92:75:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----