Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6908a47b-9999-4cc7-9f27-2eec7f006416/0b8e4344-ff46-3b34-b1a2-16054a5604d4.roa
File:                     0b8e4344-ff46-3b34-b1a2-16054a5604d4.roa (raw, json)
Hash identifier:          7KhoLzIW5e/GnEamzLxb9H4RqIFXjPXdbWBW/8br5KI=
Subject key identifier:   25:D4:3C:51:A6:0F:6E:5B:3D:C7:92:38:DD:B7:90:CE:D1:56:96:C9
Certificate issuer:       /CN=6908a47b-9999-4cc7-9f27-2eec7f006416
Certificate serial:       010D0C9F4328583D8DB373852D9361FF0A4F8400
Authority key identifier: 4B:3C:05:0B:F9:07:00:8F:82:57:22:CE:52:B5:CB:B8:9B:CD:9D:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6908a47b-9999-4cc7-9f27-2eec7f006416.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6908a47b-9999-4cc7-9f27-2eec7f006416/0b8e4344-ff46-3b34-b1a2-16054a5604d4.roa
Signing time:             Tue 12 Apr 2022 04:00:00 +0000
ROA not before:           Tue 12 Apr 2022 04:00:00 +0000
ROA not after:            Mon 15 Jul 2024 04:00:00 +0000
asID:                     26795
IP address blocks:        172.82.76.0/22 maxlen: 24
                          2602:fc9b::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:8d:b3:73:85:2d:93:61:ff:0a:4f:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6908a47b-9999-4cc7-9f27-2eec7f006416
        Validity
            Not Before: Apr 12 04:00:00 2022 GMT
            Not After : Jul 15 04:00:00 2024 GMT
        Subject: CN=fcf56f87-f0d4-43ef-b781-aa420ee60e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:67:61:dd:27:1b:66:7d:f0:c1:7d:75:1e:ed:
                    e5:b7:10:27:94:d7:78:77:cc:19:42:f2:0f:01:1c:
                    e5:ba:ef:29:96:99:ee:6c:71:a6:f7:6d:68:ea:cb:
                    90:e8:d4:18:15:a9:a0:35:0d:97:e8:e9:8c:f3:35:
                    ee:53:d3:bd:0c:2d:93:c2:32:ca:e6:a9:8b:72:18:
                    34:4c:09:c7:c6:46:08:62:6c:16:9e:d6:12:bb:5d:
                    b3:a1:a5:07:8e:a9:31:27:14:d5:53:d1:00:2f:95:
                    65:75:94:75:45:8b:21:b5:29:d5:e4:2a:dc:7d:60:
                    fc:87:82:73:9b:83:f3:f2:db:61:12:c1:d4:e1:8e:
                    ac:3d:a4:05:6d:43:59:f8:ec:8d:bb:90:90:94:d7:
                    2e:9c:63:96:ee:e2:59:bc:3b:2b:69:25:51:db:3f:
                    b1:d8:b5:f8:6b:49:85:20:e5:ab:0e:dd:1b:3e:e7:
                    9e:c1:ab:d9:72:3d:88:b6:db:1b:e9:4f:8f:ad:9f:
                    3f:ee:3f:54:66:4b:de:42:79:9e:79:e5:a4:3d:7b:
                    47:03:57:4e:f2:86:d7:1c:66:e2:1c:62:5f:e3:f5:
                    53:40:97:02:20:91:35:ab:9a:2b:13:ee:c3:ae:b9:
                    4a:54:bc:77:de:3c:f9:6c:a3:fb:7c:9d:96:bd:fd:
                    9f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D4:3C:51:A6:0F:6E:5B:3D:C7:92:38:DD:B7:90:CE:D1:56:96:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6908a47b-9999-4cc7-9f27-2eec7f006416/0b8e4344-ff46-3b34-b1a2-16054a5604d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6908a47b-9999-4cc7-9f27-2eec7f006416/6908a47b-9999-4cc7-9f27-2eec7f006416.crl

            X509v3 Authority Key Identifier:
                keyid:4B:3C:05:0B:F9:07:00:8F:82:57:22:CE:52:B5:CB:B8:9B:CD:9D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6908a47b-9999-4cc7-9f27-2eec7f006416.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.76.0/22
                IPv6:
                  2602:fc9b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f9:0e:7f:e5:4f:44:a9:f7:d4:cc:66:9f:53:b0:67:04:e5:
         f6:5a:5c:f9:c2:0f:bd:a0:db:4e:cf:7b:e8:9e:f6:17:92:bf:
         20:bb:c5:19:6b:1b:2e:b2:6c:3b:67:fd:62:0c:9e:21:48:92:
         61:da:b2:9f:3e:95:64:61:52:ef:67:42:90:e6:40:a9:30:67:
         54:f5:58:44:a4:fb:dc:1a:98:49:37:ef:36:bb:c7:d1:f7:ba:
         fc:2f:a4:b8:11:43:b0:5d:f1:7b:f3:e1:f0:62:1d:36:20:bc:
         a1:2a:49:27:82:e9:0c:4c:40:c4:e5:80:90:8d:40:98:88:ec:
         4d:79:07:0a:2e:ea:ec:76:bc:5d:26:15:cb:dc:6b:61:27:bf:
         d8:c0:1a:d8:90:6f:50:e6:60:35:9b:50:f8:e5:b3:e8:c7:92:
         13:aa:fe:24:44:82:69:f4:d1:06:72:73:5b:dc:42:2d:b1:06:
         64:79:da:04:69:bb:81:bb:25:7a:44:eb:b1:ec:24:39:f5:20:
         84:11:da:a1:c2:91:f1:67:cd:ea:25:61:53:30:31:d9:a1:4a:
         40:00:dc:6a:a2:8d:1a:84:66:e9:f7:d6:73:44:52:f9:51:36:
         c1:30:2d:7d:40:56:f2:02:a0:4e:b3:f3:9b:a5:29:90:2d:87:
         ec:81:51:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----