Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/5542dfd4-d096-3a43-b512-7a7c2370ef85.roa
File:                     5542dfd4-d096-3a43-b512-7a7c2370ef85.roa (raw, json)
Hash identifier:          lrxOGCRFLQ9TxpfHrXA75TSXX0knUJmPqh8qjMtCmbQ=
Subject key identifier:   91:42:6A:01:9B:04:9F:19:93:25:77:D5:52:E6:50:76:0A:B2:C0:D3
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583FA4963905E092390DEE4BD500
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/5542dfd4-d096-3a43-b512-7a7c2370ef85.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a4:96:39:05:e0:92:39:0d:ee:4b:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=5f638faa-38b6-4c65-aad9-a8a59bfafcd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:34:d8:a0:fb:54:8f:3b:c5:db:61:a6:28:14:
                    9e:93:08:29:40:e6:15:71:e6:12:88:89:49:77:0e:
                    a9:61:7e:f4:8e:b1:3d:0a:d8:b3:62:b4:d0:a5:0a:
                    55:a7:a7:c3:0c:1f:93:97:3a:d5:da:36:74:89:32:
                    bf:3c:c4:e9:36:f4:14:3e:fb:bc:28:64:82:20:ab:
                    6b:92:43:f8:42:9f:1a:aa:42:8e:13:65:ad:0a:77:
                    2d:ce:6b:ae:71:cb:6f:e7:91:33:91:36:99:e3:33:
                    2b:ba:4a:87:f8:eb:8d:ff:b0:a1:18:04:9b:ea:86:
                    03:ae:f1:13:23:a7:7e:5e:70:e1:2f:8b:71:45:2c:
                    e3:19:2d:d3:6f:78:f7:82:6f:ac:07:0b:e2:e3:76:
                    a4:04:de:05:cd:75:a3:e7:cf:06:42:ab:0d:a7:6e:
                    48:98:b6:e0:e4:14:68:f8:f5:e3:e9:91:3b:51:81:
                    45:e9:55:33:e5:a2:ee:a3:eb:53:b0:02:b1:aa:50:
                    b5:6d:3c:38:55:cf:73:cd:81:e2:32:8f:eb:21:e7:
                    b9:62:aa:32:3e:79:98:ce:14:cf:1f:23:eb:3c:8d:
                    52:e0:ac:e0:a3:94:d1:0b:dc:81:dc:93:19:89:54:
                    ea:70:46:ea:53:ca:15:66:d6:3e:dc:11:de:c2:bf:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:42:6A:01:9B:04:9F:19:93:25:77:D5:52:E6:50:76:0A:B2:C0:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/5542dfd4-d096-3a43-b512-7a7c2370ef85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:ee:09:cd:31:01:a9:35:fe:fe:01:83:ba:74:2e:9f:a3:7a:
         f1:ef:9d:f3:52:84:c7:98:c2:36:3a:4f:65:45:2d:ce:c8:a5:
         47:3a:d7:89:2c:3b:f1:78:8e:61:2d:2f:56:86:ff:83:67:1c:
         50:b4:48:3a:99:5c:a2:ea:89:e4:2d:a2:9a:3b:a0:36:75:6c:
         3e:3a:0c:a4:52:9a:a1:53:8c:ab:22:a3:46:db:be:ce:f4:31:
         04:8b:4a:27:a1:8a:40:de:f4:64:ef:83:3d:ae:b6:ea:29:01:
         f7:3e:5a:8c:6d:92:ef:57:36:16:f1:fc:9a:4c:2e:3d:6d:0d:
         1f:31:ab:57:f5:e4:88:ad:76:25:ee:df:fe:70:41:00:f1:23:
         a3:20:43:f3:a6:99:b7:e8:cc:22:03:88:3b:9e:d7:5a:bf:7c:
         4a:3a:48:3b:ce:f6:7a:cb:95:d6:a9:3f:ea:07:cf:a6:3d:8c:
         7d:d2:d6:0c:77:ac:11:4a:82:23:5b:7a:35:d5:30:73:0b:3d:
         f4:98:09:28:59:3a:68:43:7b:df:54:94:8f:9f:7d:2d:df:bb:
         18:23:8f:50:10:e5:8d:51:3e:a3:3b:a5:5f:a6:64:64:60:3c:
         52:51:96:88:4b:2f:8e:d7:e7:94:5e:3b:3d:81:6e:f5:29:86:
         01:49:3c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----