Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/e5908448-3d6e-3ed2-8451-ef6f19dd3a85.roa
File:                     e5908448-3d6e-3ed2-8451-ef6f19dd3a85.roa (raw, json)
Hash identifier:          YMjhnzf+AHTYEXgdMisLCzGC5+nZkMQ88Ub0Rm5jQGw=
Subject key identifier:   14:8D:58:42:6B:45:1B:74:56:C9:9F:21:D0:07:66:9D:C1:66:A5:E9
Certificate issuer:       /CN=a0839207-1494-4e82-8648-ab9b9567c70f
Certificate serial:       010D0C9F4328583DE36110E57CAD52ED29756080
Authority key identifier: 10:18:D5:99:4E:8F:9F:DE:FE:93:63:56:D5:AA:12:F5:6F:98:D9:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/e5908448-3d6e-3ed2-8451-ef6f19dd3a85.roa
Signing time:             Thu 12 May 2022 12:00:00 +0000
ROA not before:           Thu 12 May 2022 12:00:00 +0000
ROA not after:            Fri 17 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2600:f000::/24 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:e3:61:10:e5:7c:ad:52:ed:29:75:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0839207-1494-4e82-8648-ab9b9567c70f
        Validity
            Not Before: May 12 12:00:00 2022 GMT
            Not After : Jun 17 04:00:00 2022 GMT
        Subject: CN=bf896b97-3c37-47a2-8d59-51560aaa850d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:72:8a:f3:b0:2f:c0:a2:76:98:f2:21:98:
                    23:9c:93:3d:e3:f4:5a:37:7e:77:dc:ea:c3:e0:aa:
                    8b:9c:fa:23:96:a5:8e:9c:3f:3a:05:05:29:62:99:
                    6f:bf:37:d1:a5:0b:b6:f7:ab:08:bf:13:b4:48:5a:
                    77:4b:0c:e3:0c:93:36:d4:e5:e8:1f:53:72:b7:9c:
                    7b:fc:82:51:16:07:9e:21:0c:6a:61:f9:1c:8a:a3:
                    6f:4a:22:36:f8:a8:8a:2a:6d:db:91:a1:59:89:71:
                    9a:ff:47:15:8d:6b:9d:21:f1:86:01:c5:de:cd:3d:
                    29:3e:7c:4d:27:17:6c:fc:4d:67:bd:94:3f:1b:35:
                    30:81:c6:34:c2:68:02:dc:d1:d4:37:bb:2e:b0:50:
                    59:31:4e:c5:17:22:96:96:73:4f:af:0e:c8:ad:d0:
                    76:45:1c:92:4f:1c:dc:40:67:9c:bf:05:39:10:8f:
                    d5:33:9e:23:e4:c7:ec:98:9a:1e:6e:f1:4e:1a:54:
                    29:7b:ef:1d:07:12:f3:4c:11:a1:53:a9:92:fd:37:
                    a2:02:88:01:4c:0f:d9:c9:2c:90:29:d1:a4:16:ff:
                    ef:e4:10:9c:56:f0:2e:25:cf:25:93:d8:ef:05:c4:
                    8d:98:49:81:2b:14:bb:94:69:8d:8d:1e:37:5a:d0:
                    d4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8D:58:42:6B:45:1B:74:56:C9:9F:21:D0:07:66:9D:C1:66:A5:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/e5908448-3d6e-3ed2-8451-ef6f19dd3a85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/a0839207-1494-4e82-8648-ab9b9567c70f.crl

            X509v3 Authority Key Identifier:
                keyid:10:18:D5:99:4E:8F:9F:DE:FE:93:63:56:D5:AA:12:F5:6F:98:D9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f000::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:72:86:fd:8f:0a:bf:05:d7:d9:ab:9e:dd:35:51:10:57:66:
         52:f7:43:01:3e:be:6c:5e:1f:48:79:c9:89:96:a5:95:17:07:
         09:80:26:17:8f:90:f4:d2:82:19:4c:b8:b1:f5:ca:3d:51:16:
         11:86:bc:d0:f2:7e:22:3b:b8:4b:9e:3a:aa:66:1c:93:df:13:
         97:c0:47:c1:9e:46:29:22:f7:14:3e:01:d2:63:31:37:d8:6e:
         90:35:d2:40:d3:0a:05:e8:82:31:3e:3c:bb:2f:7f:46:a8:0b:
         89:a4:ff:5a:3a:34:47:a5:89:27:75:8d:ca:ec:27:10:ca:8d:
         0a:0e:37:91:50:70:e6:15:d1:d8:77:d1:01:d7:02:ea:c2:06:
         3b:f8:dd:bd:4f:f2:51:e9:b6:0c:72:02:b1:8b:58:09:07:c9:
         a0:fe:b7:74:25:0c:59:8a:ec:e2:b5:09:ca:bd:62:00:fa:34:
         5e:d2:4f:e6:0c:7c:46:1b:46:e6:51:5f:b1:18:66:a9:04:75:
         50:e3:8e:60:05:ca:8c:aa:9a:45:da:1d:37:84:fa:e6:37:01:
         44:63:cf:08:31:76:f3:37:93:52:aa:34:b7:79:29:a1:69:7e:
         63:18:cc:b0:0d:b5:e7:b5:6e:c0:7a:af:32:08:62:d3:19:98:
         de:c0:15:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----