Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/c7b5f7bd-8356-3cd5-8279-6c40aa519806.roa
File:                     c7b5f7bd-8356-3cd5-8279-6c40aa519806.roa (raw, json)
Hash identifier:          j0AjYV3bDDRg/48Kd1n+Hbud5UCM2/6cBKGoM4cykiY=
Subject key identifier:   CB:85:61:42:1B:25:14:36:20:CD:99:FA:E8:88:8C:9A:9F:88:0F:CA
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328583C965969F5896552F25398D620
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/c7b5f7bd-8356-3cd5-8279-6c40aa519806.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        50.112.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:59:69:f5:89:65:52:f2:53:98:d6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=e3be3e42-ac92-4659-a485-049c57c1fd4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:41:84:19:dd:54:9a:72:f9:91:e2:ac:9c:0b:
                    69:01:79:d5:8e:cf:79:f7:09:a5:8c:9b:37:27:cb:
                    c7:e0:e4:08:87:24:f4:7f:b9:ed:87:1b:d8:a1:98:
                    1c:47:a7:dd:b4:77:82:26:33:11:a7:01:26:77:50:
                    fe:e1:ac:fa:0e:74:45:63:62:89:91:ed:07:a4:75:
                    cd:8d:ff:fd:ca:95:4f:fd:b8:ff:7a:7c:04:a5:5b:
                    87:b3:a6:1c:d1:17:69:98:49:62:47:de:f4:c0:5e:
                    2d:93:50:46:81:0e:11:7b:aa:1d:0a:a5:f8:54:08:
                    35:bb:e0:a3:0d:46:cd:0d:32:be:c2:7a:9c:29:bb:
                    01:1a:5d:66:fa:d3:17:a9:f6:ac:b0:e5:4c:99:9b:
                    dd:f9:b3:01:9c:b7:fc:98:e4:63:4b:17:b5:d8:41:
                    51:09:7e:8e:b1:49:64:e6:0d:c1:1d:f3:e4:02:98:
                    31:3f:a7:b9:b2:42:d8:d5:bd:3b:9c:ba:20:59:7e:
                    09:7b:2b:59:b7:88:c7:6f:68:b5:58:8c:95:e0:97:
                    73:e6:af:0f:30:b5:e3:76:6c:52:22:29:94:1d:46:
                    f3:03:20:80:10:fc:a4:a1:ac:3d:b1:19:47:a1:60:
                    b2:0a:6d:27:28:fb:1b:c9:29:57:62:f9:44:45:8b:
                    cb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:85:61:42:1B:25:14:36:20:CD:99:FA:E8:88:8C:9A:9F:88:0F:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/c7b5f7bd-8356-3cd5-8279-6c40aa519806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:29:69:cf:8c:8e:50:3a:4e:32:75:68:94:87:a0:2c:cf:c7:
         a4:4c:00:b6:17:e0:28:08:fe:e1:65:25:7e:61:9c:00:24:cf:
         cc:92:88:04:af:7e:fb:53:05:a2:bd:4a:ff:f2:7c:33:60:0d:
         f3:6b:c6:8d:6f:f2:48:fb:a1:db:b4:f1:0b:7e:64:d7:60:90:
         d9:df:b1:cd:98:89:f9:bb:e5:17:11:fa:38:a0:32:29:9c:c6:
         5e:dd:a6:66:f4:ef:7d:82:9b:ca:1f:97:cb:11:48:d3:8b:5d:
         6d:0d:a6:e6:d7:1e:c9:b8:04:61:e2:18:a2:1f:94:4c:1d:7c:
         38:c6:3d:1d:6a:c2:09:1d:e5:cc:86:6a:48:b9:93:8c:2d:b4:
         bd:12:66:fd:77:e6:07:b6:f3:01:da:e5:1c:c6:bc:6b:d9:1a:
         1a:0c:10:b1:45:af:07:d1:a8:9c:87:8e:5d:b7:22:fc:e1:cd:
         34:ef:54:12:48:e6:bf:f0:42:56:25:5f:bf:d8:9e:42:3e:45:
         7c:98:f8:96:3e:ec:92:84:af:f8:fc:c6:9e:9d:e1:ea:55:cb:
         89:df:f7:67:59:6f:3c:33:7b:60:4f:b1:73:9a:94:b6:a2:87:
         dc:d4:5d:3c:85:5d:4a:01:5d:a7:74:68:ac:de:e7:47:4d:9a:
         7f:f6:cf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----