Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/717ad778-0331-349d-9a07-bda6f48fc402.roa
File:                     717ad778-0331-349d-9a07-bda6f48fc402.roa (raw, json)
Hash identifier:          Zd2zO3tctfSob/adh263waDelheEA+ASFGabOHEG2Is=
Subject key identifier:   C7:D0:30:A1:1B:D6:CD:9B:45:5B:04:5C:BF:F0:DD:6E:67:C4:FA:44
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328583D5AAC9D688CF219EED7A844C0
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/717ad778-0331-349d-9a07-bda6f48fc402.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2620:108:7000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:ac:9d:68:8c:f2:19:ee:d7:a8:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=3f77aa4c-7c52-4b38-81dc-2f05d389559d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d1:1d:18:45:b6:9a:64:26:49:61:f4:b4:7e:
                    0b:77:88:9f:39:1c:b9:52:f2:59:0a:48:4e:62:50:
                    b5:ea:99:e2:99:51:5b:7e:37:e6:13:d0:0f:c6:a9:
                    01:3b:06:84:07:8e:91:71:a6:ce:e0:64:8f:84:2d:
                    80:62:13:0d:f2:47:1f:ba:fc:72:20:ae:9c:5c:ea:
                    09:e6:f6:8a:93:5e:6d:bc:42:d8:35:94:7a:90:7c:
                    c7:01:78:92:aa:d9:47:be:f1:0c:fc:36:f8:69:06:
                    37:63:5c:aa:eb:26:70:d8:1f:d8:6d:da:04:b0:9b:
                    21:a3:b4:c1:7e:c4:45:2d:56:46:1d:b9:f1:fd:91:
                    73:9d:0f:e1:aa:c0:bd:d5:d1:0b:0d:9a:f2:42:72:
                    ce:86:7e:f0:1c:26:bf:84:9b:36:c3:59:93:ad:b2:
                    72:01:11:24:2f:b4:a9:e5:2d:a0:67:66:3c:7c:55:
                    3b:90:c8:a7:51:76:a7:96:10:9e:4d:89:a5:16:0f:
                    34:9f:a6:33:38:e2:a0:6a:e6:50:93:31:cc:07:58:
                    e9:62:ed:1f:4d:1c:3d:1a:8e:24:f5:1e:55:9a:cc:
                    21:27:dc:a0:1d:72:27:94:31:ae:22:9f:c1:af:1d:
                    b5:c8:ba:1d:b4:e3:3b:12:a0:71:b4:8f:c0:fa:e9:
                    dc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D0:30:A1:1B:D6:CD:9B:45:5B:04:5C:BF:F0:DD:6E:67:C4:FA:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/717ad778-0331-349d-9a07-bda6f48fc402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:68:12:b7:d6:6c:21:11:c3:74:5d:69:bf:61:74:f7:84:65:
         fb:3d:ef:bf:db:18:b7:7a:ea:f2:8b:ce:c1:42:4d:f5:a1:79:
         5c:31:ee:3e:38:ed:8e:c0:91:ee:b6:51:61:98:30:b6:6a:c1:
         f0:bc:55:ef:66:c6:1e:e3:22:b4:60:f3:41:74:ed:22:c7:a5:
         10:07:4e:8c:f3:d9:34:e8:91:c4:96:48:ad:64:4d:b0:51:d2:
         6b:35:d8:c6:ad:e3:ff:7f:13:73:87:08:1d:d7:b2:01:05:52:
         51:f5:56:9d:85:45:10:2c:0a:98:2a:3f:e2:d6:b2:66:71:71:
         26:52:63:ba:74:57:93:22:62:61:1f:fe:d0:40:12:fd:d1:88:
         ae:e1:4c:48:49:a2:a4:61:f3:ab:7e:fa:90:b0:3a:8b:07:f9:
         da:f5:dc:de:8d:5c:27:ed:c8:d3:f1:26:e7:e6:fd:9d:fc:a1:
         02:44:fa:9f:eb:28:17:1c:fb:1e:44:b5:41:12:8c:8a:9e:5b:
         0b:5d:98:58:97:db:63:52:49:0a:ac:be:47:34:26:2a:7f:63:
         1f:78:71:c3:8f:5a:8c:0b:68:be:c2:1a:2f:6e:9e:9e:39:5c:
         e4:8c:5b:21:ab:20:bc:da:26:23:18:fb:d8:8c:9c:4e:44:5f:
         2d:a3:90:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----