Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/fc72705b-06a8-372a-b9da-cf99f8606751.roa
File:                     fc72705b-06a8-372a-b9da-cf99f8606751.roa (raw, json)
Hash identifier:          KTrle4Ury0kG9d45OhlN5tFBaZ2QHPWEXNreeGsPEzE=
Subject key identifier:   63:63:95:6F:0A:01:12:64:36:3A:15:BE:48:58:EF:50:72:34:56:B0
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583DF720390ABD17F8A8576C1300
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/fc72705b-06a8-372a-b9da-cf99f8606751.roa
Signing time:             Thu 19 May 2022 12:00:00 +0000
ROA not before:           Thu 19 May 2022 12:00:00 +0000
ROA not after:            Fri 24 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f7:20:39:0a:bd:17:f8:a8:57:6c:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: May 19 12:00:00 2022 GMT
            Not After : Jun 24 04:00:00 2022 GMT
        Subject: CN=2cc19a61-9d98-4dda-a8bb-737906d8ecf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d9:f1:59:ba:3b:14:d5:91:39:0b:f5:1b:30:
                    e0:6a:3b:81:f8:d0:7d:c5:64:f1:36:d3:00:92:25:
                    15:15:4c:0c:4c:a5:d4:bc:88:41:97:8c:dd:c9:64:
                    a6:23:17:19:53:43:d7:5f:c7:b3:da:d5:2f:3f:bb:
                    42:d2:39:44:70:cb:4a:a2:f5:db:d6:b9:2b:1b:96:
                    5a:bf:95:23:97:da:2d:32:05:96:3a:46:b9:6c:f4:
                    fd:9a:bf:9a:69:71:5e:ac:6d:7b:11:f6:8c:18:e8:
                    42:52:e8:96:57:1b:42:25:18:f7:1e:36:21:da:77:
                    64:04:f1:1f:af:a6:31:0b:81:6e:e6:db:d1:bc:50:
                    a0:b7:3e:6f:8c:b2:45:d4:63:59:7e:45:84:c6:91:
                    86:12:a4:c6:e4:96:e9:6d:fe:de:ae:f2:ac:f6:f0:
                    bc:05:bb:a5:11:c8:b1:01:aa:94:5f:fb:34:bc:10:
                    76:d9:b5:41:99:a1:8b:31:af:41:2c:e8:5c:43:8a:
                    b6:0d:39:f6:fd:85:4c:3f:a3:dc:11:5d:91:00:1a:
                    e5:b7:d6:2f:f4:88:be:e3:f9:42:da:4e:9a:4c:1b:
                    f6:fc:e9:16:3d:fa:13:7b:d1:62:54:4e:f4:f9:97:
                    88:27:73:d0:b6:11:0c:71:7e:b9:ef:3c:77:4e:7d:
                    28:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:63:95:6F:0A:01:12:64:36:3A:15:BE:48:58:EF:50:72:34:56:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/fc72705b-06a8-372a-b9da-cf99f8606751.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:cd:de:b0:84:a6:ea:45:bd:4e:3e:ae:02:e8:85:75:86:32:
         8b:43:f9:b4:af:6a:ad:a6:be:b6:e8:7f:e8:34:38:10:47:96:
         4f:c9:04:26:ac:f9:7a:11:1c:dd:cf:76:2b:02:7e:57:61:7e:
         aa:5f:f9:28:8e:1c:f9:f9:c3:41:86:b8:37:72:8b:30:f5:b3:
         13:f5:a6:97:53:a8:62:b0:56:88:4b:da:3c:b3:e8:3b:77:55:
         cb:c7:65:2b:cc:9b:f5:f9:10:ce:b4:b5:cc:72:cf:9b:77:80:
         c1:31:06:d0:1f:42:3b:15:44:6c:33:f3:2a:d0:60:d6:89:c2:
         d8:1f:61:c7:d5:8b:e5:e3:f8:1f:7b:dd:b1:ab:f2:1f:ce:f2:
         4c:4c:b6:69:d2:ad:63:1a:14:55:72:dd:af:c1:b2:ed:b6:16:
         4c:1f:72:0d:30:85:af:82:dc:39:55:ee:f6:c7:75:1f:6c:eb:
         b6:70:a9:bf:29:e6:2c:8e:99:62:27:29:12:e2:46:4b:36:b3:
         f8:67:78:d6:55:5f:24:98:08:c0:4b:3a:06:4d:86:36:2f:7f:
         30:86:75:88:32:73:cd:98:70:cd:b5:4d:d6:00:bd:80:25:09:
         3b:95:df:d4:6b:62:cf:23:13:7b:84:47:f3:c0:80:be:db:7b:
         2f:fb:d4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----