Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/b1285369-96b0-32f8-aa8c-5b89d6cbd2ec.roa
File:                     b1285369-96b0-32f8-aa8c-5b89d6cbd2ec.roa (raw, json)
Hash identifier:          /NJE0KkBBR9ECzLqsGRX84bhoajQ5fEHS3IWJkthnf4=
Subject key identifier:   4D:C8:6F:AC:F4:EC:68:75:8F:B5:CA:F0:BA:B6:D4:DC:1C:4F:76:A6
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583EBB3EB362A45E8B6842694780
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/b1285369-96b0-32f8-aa8c-5b89d6cbd2ec.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2600:9000::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bb:3e:b3:62:a4:5e:8b:68:42:69:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=bafb97cc-ce9f-420e-b5df-efbf74f8e714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:32:00:06:be:bd:8b:72:84:73:55:f6:02:fb:
                    05:8f:79:92:8a:27:29:a4:b2:a1:4e:2a:94:f7:f0:
                    b0:75:00:a4:00:54:b6:56:8e:02:a9:ca:72:87:d6:
                    fc:71:80:05:22:01:ed:57:19:f5:11:16:93:e7:a7:
                    04:66:e4:d1:42:31:49:a5:08:55:c7:0b:c9:6e:f9:
                    91:1b:89:5a:04:d3:b3:eb:6e:63:5c:fa:09:12:e7:
                    1f:0c:5b:f2:08:0a:17:27:77:8a:65:a0:01:b7:ad:
                    e4:ec:6c:bb:ed:88:b4:0b:c8:a0:a9:11:4f:d6:75:
                    d1:71:1e:bb:12:9e:23:40:bf:24:dd:0a:78:bc:5d:
                    11:ed:b1:fa:5f:c7:38:23:8e:38:7a:03:ce:0b:ec:
                    36:99:24:bd:58:8b:73:99:25:ce:23:f8:29:8a:07:
                    75:f7:89:0f:82:8b:8d:b4:59:a7:eb:78:07:b0:41:
                    35:c0:db:86:fb:67:64:e7:52:6a:78:9f:a9:de:46:
                    af:55:e3:53:4a:20:41:6d:60:d8:ad:d6:dd:d9:59:
                    29:1b:f6:cd:93:d6:19:0d:4f:4c:62:44:b4:59:a6:
                    67:99:c5:f1:01:d4:12:7d:43:ef:48:b1:b6:b0:86:
                    fc:a3:97:83:f6:87:57:7b:4f:3e:e4:73:a5:49:24:
                    c5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C8:6F:AC:F4:EC:68:75:8F:B5:CA:F0:BA:B6:D4:DC:1C:4F:76:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/b1285369-96b0-32f8-aa8c-5b89d6cbd2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d4:95:73:9a:1a:14:9e:dc:b9:9f:59:98:38:f8:6f:b6:94:
         f1:25:bd:0b:c6:01:88:43:7b:47:40:f1:9c:77:a6:1d:26:48:
         37:25:5f:a8:7a:d3:1d:ba:19:33:f9:9c:39:8e:c8:36:a5:0f:
         4d:2d:0e:94:b0:81:fc:01:a5:8e:f3:07:7a:d1:d3:98:d1:d4:
         35:ab:44:45:7c:81:f3:68:85:84:ea:1e:44:cb:2a:95:7d:de:
         b8:6c:0e:ab:2d:65:8d:ca:2f:76:51:6f:4d:25:3a:22:54:dc:
         08:a9:a3:5b:fa:46:6f:77:ec:c7:d9:29:80:6e:5b:a8:97:02:
         a5:d0:59:c8:d6:b2:5a:e1:c7:0d:34:10:13:a8:f6:9e:bb:1a:
         64:5d:6a:69:7f:52:7a:41:90:19:1b:ff:ca:08:5a:ea:0b:15:
         ae:04:82:45:3e:85:cc:81:ad:35:44:3c:73:40:1f:9c:e7:52:
         28:d9:76:18:79:d1:b8:e9:11:92:37:b1:ae:26:6d:0c:bd:99:
         67:76:99:39:f9:3b:a4:09:b1:7b:7c:b6:15:a1:3d:d5:cf:28:
         b0:02:09:b0:d6:50:a4:ec:cc:20:39:47:14:9e:d7:f5:c8:ea:
         1d:35:d3:e1:96:4a:59:67:9b:b3:f3:6e:8a:02:91:f1:cb:25:
         b8:7e:54:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----