Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e78c3889-b7e4-488f-98c1-57b6a4247de4/e9bc5b1f-0836-3c8b-932e-058d96ceaa37.roa
File:                     e9bc5b1f-0836-3c8b-932e-058d96ceaa37.roa (raw, json)
Hash identifier:          Pfg9TqbMz5TljDS0h9l9UdSJuqmKDl45iOTuZTNAwTU=
Subject key identifier:   DF:9E:93:C9:96:B3:B6:D3:25:5E:50:7B:6F:F4:C8:4B:ED:74:06:BC
Certificate issuer:       /CN=e78c3889-b7e4-488f-98c1-57b6a4247de4
Certificate serial:       010D0C9F432858423E2BB72A5AB3279C5260BD40
Authority key identifier: AB:24:76:99:65:1A:C0:12:CE:38:20:56:C6:2A:6F:AA:1C:D7:AB:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e78c3889-b7e4-488f-98c1-57b6a4247de4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e78c3889-b7e4-488f-98c1-57b6a4247de4/e9bc5b1f-0836-3c8b-932e-058d96ceaa37.roa
Signing time:             Fri 16 Jun 2023 21:53:28 +0000
ROA not before:           Fri 16 Jun 2023 21:53:28 +0000
ROA not after:            Thu 14 Sep 2023 21:53:28 +0000
asID:                     32681
IP address blocks:        2620:b8:a000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:3e:2b:b7:2a:5a:b3:27:9c:52:60:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e78c3889-b7e4-488f-98c1-57b6a4247de4
        Validity
            Not Before: Jun 16 21:53:28 2023 GMT
            Not After : Sep 14 21:53:28 2023 GMT
        Subject: CN=ae7bc7a0-032d-4404-941a-c59d486d35b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1a:45:91:61:04:ea:68:64:9a:09:d6:77:15:
                    cd:f6:0d:9b:b9:73:ce:fb:04:d3:e5:9f:8d:3b:8b:
                    14:53:8b:3f:74:05:37:46:b9:c5:a5:5c:6b:c9:b0:
                    f5:fa:1e:94:dd:af:c2:7b:5e:80:ef:7a:ae:3b:f8:
                    30:e2:4a:f2:e6:09:8c:8f:45:a0:be:de:81:31:45:
                    32:a4:0a:f0:da:f5:34:59:48:3d:56:6c:cd:19:a7:
                    e7:ef:d0:5a:31:77:eb:7b:61:58:51:1d:31:6a:6a:
                    e3:01:a8:16:52:1e:9c:3c:13:09:84:86:9d:16:a3:
                    28:80:64:bc:53:06:b6:28:5b:0c:47:5f:0e:c2:cb:
                    b7:20:13:15:2a:9b:be:9e:72:26:b8:ca:98:90:07:
                    49:3e:a3:55:52:b9:fa:8f:d3:4e:09:f1:13:4c:15:
                    04:d0:92:22:3e:bb:4e:83:8b:34:85:dc:f9:c0:9b:
                    68:63:2c:91:87:74:53:18:c5:59:4b:da:26:db:b4:
                    c8:1f:d6:3b:ac:68:b7:d1:88:44:73:6c:59:1d:6e:
                    c0:f6:0f:ca:31:5f:f2:7e:e0:f1:b2:eb:d8:de:10:
                    7c:39:48:35:bf:9d:9b:ce:b6:5e:b6:58:5d:99:4c:
                    5b:b2:0c:bd:7e:04:dc:45:02:79:57:70:fc:9b:01:
                    84:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9E:93:C9:96:B3:B6:D3:25:5E:50:7B:6F:F4:C8:4B:ED:74:06:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e78c3889-b7e4-488f-98c1-57b6a4247de4/e9bc5b1f-0836-3c8b-932e-058d96ceaa37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e78c3889-b7e4-488f-98c1-57b6a4247de4/e78c3889-b7e4-488f-98c1-57b6a4247de4.crl

            X509v3 Authority Key Identifier:
                keyid:AB:24:76:99:65:1A:C0:12:CE:38:20:56:C6:2A:6F:AA:1C:D7:AB:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e78c3889-b7e4-488f-98c1-57b6a4247de4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b8:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:7c:79:0c:5d:0a:00:8a:92:73:8b:d9:54:8e:bf:14:27:fd:
         14:cd:90:e2:a3:3f:80:95:08:43:d9:22:cc:19:9b:33:1e:c3:
         56:20:63:03:92:70:fd:2d:21:3b:b1:0c:61:45:91:86:af:66:
         39:91:43:dd:2f:62:96:29:f3:01:aa:d4:34:a3:7c:81:51:ee:
         bf:36:90:e4:b2:6e:03:78:1b:30:19:4a:22:1a:3f:90:e8:8c:
         a3:b8:44:24:34:db:d5:be:05:4f:68:d7:c0:c6:f8:38:a5:20:
         98:f6:fe:ae:6f:eb:56:19:fa:d4:07:f8:c7:0e:57:9b:b4:75:
         08:49:1c:65:60:c8:62:61:09:1f:c0:26:d8:e3:2b:03:05:d4:
         e1:91:d6:5c:6b:f9:f8:d6:3f:38:4a:2f:3a:ad:6d:e9:ac:35:
         c6:09:84:f3:9f:79:96:35:50:e4:d2:f1:bd:07:35:88:c7:73:
         1f:a4:39:38:c8:c2:2d:f7:6f:5b:d2:b8:cc:d6:5d:25:e5:73:
         57:40:07:a6:0c:75:7f:eb:90:1e:59:2f:e9:6f:a0:58:fb:83:
         6a:73:3f:0e:c9:06:0a:f6:f7:99:5e:e3:06:a4:cf:4e:19:0e:
         8f:5e:1c:81:35:b7:b2:f6:08:0f:a6:fb:a9:15:19:01:dd:32:
         36:f5:a9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----