Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/9b7cf92b-df74-3f18-89ed-3fa2f4a4412c.roa
File:                     9b7cf92b-df74-3f18-89ed-3fa2f4a4412c.roa (raw, json)
Hash identifier:          h8x88tEMTW7goyIEwVBwOufjdWE9Tavvc0/Gl8qu940=
Subject key identifier:   E6:1B:E3:BC:3F:F1:EE:BC:5B:3F:F8:FD:DB:22:23:6A:20:5D:C4:19
Certificate issuer:       /CN=872ab566-07c0-4d6b-ab98-45aed75350ff
Certificate serial:       010D0C9F4328583F7D7936453B2C5A38001E2700
Authority key identifier: BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/9b7cf92b-df74-3f18-89ed-3fa2f4a4412c.roa
Signing time:             Thu 06 Oct 2022 12:00:00 +0000
ROA not before:           Thu 06 Oct 2022 12:00:00 +0000
ROA not after:            Fri 11 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        2620:107:3000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7d:79:36:45:3b:2c:5a:38:00:1e:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872ab566-07c0-4d6b-ab98-45aed75350ff
        Validity
            Not Before: Oct  6 12:00:00 2022 GMT
            Not After : Nov 11 05:00:00 2022 GMT
        Subject: CN=3cc2cae5-1223-4105-be59-18db199c1778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:ed:15:89:cf:59:16:b3:b9:05:27:aa:06:
                    7c:52:03:cb:98:30:3f:02:d0:2c:9c:12:2d:37:32:
                    9c:5c:25:ab:66:a2:5d:8c:a4:51:60:a1:92:ba:ec:
                    8c:99:e5:6d:b3:60:b6:74:d0:60:04:77:e1:93:0a:
                    e4:24:44:c8:9a:87:0c:8b:2c:32:3b:e5:d3:63:b4:
                    d4:95:0a:83:31:e8:ed:27:ac:1e:2b:b3:06:cc:c5:
                    88:95:95:6f:b3:47:2a:3f:75:cd:04:c9:0a:0c:74:
                    8e:30:19:4a:c8:fb:39:f8:ab:8e:df:77:2b:88:3c:
                    b2:e9:39:5f:7d:e5:17:d9:85:71:a8:54:05:8a:0c:
                    d0:3a:d2:3b:7a:78:ee:87:d9:f8:e7:35:55:d0:62:
                    7c:b6:f6:5b:ba:5c:35:9e:fb:fe:af:14:1d:f5:fc:
                    1d:9f:7c:1d:d8:f3:89:2c:69:bc:46:50:a0:ce:ee:
                    a5:2f:8c:98:ac:a7:e9:bf:81:1c:cc:55:d5:34:28:
                    7b:29:14:4d:3a:41:9d:b8:52:87:3e:cc:f7:b0:a3:
                    18:f9:9e:80:66:cd:f9:f5:21:e3:a9:07:b3:c2:1d:
                    d7:75:f8:2f:e2:d4:5e:94:fa:04:a4:9a:f3:dc:25:
                    02:8a:0a:3c:fc:91:9d:8c:e5:5a:aa:15:f9:a1:f8:
                    df:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1B:E3:BC:3F:F1:EE:BC:5B:3F:F8:FD:DB:22:23:6A:20:5D:C4:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/9b7cf92b-df74-3f18-89ed-3fa2f4a4412c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/872ab566-07c0-4d6b-ab98-45aed75350ff.crl

            X509v3 Authority Key Identifier:
                keyid:BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d1:32:ff:91:10:a0:40:b8:06:29:a4:b1:fc:63:e0:f4:33:
         20:fe:7d:16:77:76:d1:eb:68:b1:82:8f:b7:b9:54:9c:0b:08:
         18:89:95:52:4f:3b:30:f9:3c:b1:b9:d2:3c:15:5c:3e:aa:4b:
         21:60:82:38:7b:68:b7:df:6f:cb:8f:3a:ad:47:99:9b:8f:9a:
         e1:49:0f:a4:d8:c4:86:ca:49:c2:15:a7:55:ce:c8:b2:43:c9:
         11:68:ca:6d:3f:8c:9c:a4:9d:bc:74:0b:d0:bb:a6:e2:22:ed:
         97:82:4d:21:d2:d3:87:b8:81:f3:5d:81:32:76:7f:51:b5:50:
         4a:60:15:82:81:6f:0d:30:d8:a8:03:06:77:8c:51:f4:b4:3b:
         bf:4d:8b:72:85:b4:31:62:4e:b5:52:34:09:18:f7:58:52:49:
         3c:fd:63:aa:2c:28:6b:77:41:07:fa:ee:09:68:06:66:98:ea:
         1a:48:fa:29:6f:84:93:9d:0c:39:9a:c4:0b:0d:e6:30:6f:0b:
         28:6a:58:29:a9:69:68:22:ab:92:b1:02:c8:47:55:d9:7b:15:
         ad:1f:51:39:d1:72:63:5e:17:69:a7:c6:b7:9b:26:aa:e7:a8:
         21:80:75:11:49:a5:2d:09:00:f8:4c:a4:dd:55:66:1c:fd:a3:
         77:4f:3b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----