Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fc0dbd6-e42c-4fe2-a169-62fb3a90494f/c2a42a57-8732-3290-b566-86cd494e4103.roa
File:                     c2a42a57-8732-3290-b566-86cd494e4103.roa (raw, json)
Hash identifier:          eJ+k4BSjbl5CS9SDi5WiULssXwrgfGWJ7finCfRwE5o=
Subject key identifier:   B1:4E:8C:97:6F:B8:09:9C:93:23:BE:AB:B7:A0:EA:B9:4F:01:55:BD
Certificate issuer:       /CN=6fc0dbd6-e42c-4fe2-a169-62fb3a90494f
Certificate serial:       010D0C9F432858376FDFD87DD73A40A40D7233C0
Authority key identifier: 63:B3:6A:70:16:C6:38:F4:DE:52:A5:60:12:B1:B7:99:FA:22:FB:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fc0dbd6-e42c-4fe2-a169-62fb3a90494f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fc0dbd6-e42c-4fe2-a169-62fb3a90494f/c2a42a57-8732-3290-b566-86cd494e4103.roa
Signing time:             Mon 28 Sep 2020 04:00:00 +0000
ROA not before:           Mon 28 Sep 2020 04:00:00 +0000
ROA not after:            Sun 01 Jan 2023 05:00:00 +0000
asID:                     33662
IP address blocks:        104.36.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:6f:df:d8:7d:d7:3a:40:a4:0d:72:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc0dbd6-e42c-4fe2-a169-62fb3a90494f
        Validity
            Not Before: Sep 28 04:00:00 2020 GMT
            Not After : Jan  1 05:00:00 2023 GMT
        Subject: CN=a4c25bb8-198d-4fc6-85dd-a966c7efd593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c4:7b:9a:93:c4:82:da:18:28:93:97:50:f2:
                    46:7f:59:d1:e6:f5:17:28:11:f6:f1:57:44:4a:49:
                    9e:45:dc:5b:bb:2a:0c:60:76:f1:0b:f1:2d:95:27:
                    7e:30:79:a4:cd:c8:23:f5:dc:3b:43:02:79:c5:53:
                    8e:9d:e4:d0:ba:b6:c7:50:80:03:1b:82:aa:85:d5:
                    29:08:d2:ea:bb:a4:0b:d6:70:84:eb:4f:e5:19:ff:
                    48:1b:c0:4e:c7:b2:99:9d:db:bf:ca:3d:ed:f7:fb:
                    21:c3:d3:b3:79:8b:38:3d:60:5f:cc:b7:0e:b4:e6:
                    a3:ae:25:3f:8f:da:fe:24:b5:99:78:6e:b8:7a:c1:
                    2a:97:5d:42:e7:b0:e2:b3:e7:ce:39:fe:1b:26:d8:
                    c2:1a:f8:f1:65:c6:04:ad:49:6a:63:8e:64:a2:a1:
                    33:9f:f4:84:e2:2c:b0:40:0b:02:00:10:9d:2d:59:
                    ee:be:17:01:11:27:b5:eb:9d:17:25:55:10:94:69:
                    32:90:6b:bc:c1:5a:e8:b8:8a:a4:e5:44:40:1b:8f:
                    b0:50:31:fa:c3:9d:b5:19:c2:3a:4c:f6:ff:48:f7:
                    31:4f:42:50:3f:47:20:59:4b:73:6b:b8:b2:a5:e9:
                    d3:bf:84:cc:b7:ab:21:91:b3:2e:24:77:97:28:6e:
                    49:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4E:8C:97:6F:B8:09:9C:93:23:BE:AB:B7:A0:EA:B9:4F:01:55:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fc0dbd6-e42c-4fe2-a169-62fb3a90494f/c2a42a57-8732-3290-b566-86cd494e4103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fc0dbd6-e42c-4fe2-a169-62fb3a90494f/6fc0dbd6-e42c-4fe2-a169-62fb3a90494f.crl

            X509v3 Authority Key Identifier:
                keyid:63:B3:6A:70:16:C6:38:F4:DE:52:A5:60:12:B1:B7:99:FA:22:FB:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fc0dbd6-e42c-4fe2-a169-62fb3a90494f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:16:da:b4:e6:9f:35:f0:da:e5:16:28:46:0b:2a:45:5e:ef:
         f0:c1:1a:d2:84:6c:d9:6a:71:6b:e8:90:65:6e:e8:24:6f:c0:
         83:ed:f4:25:64:bd:26:29:50:a8:c7:36:39:5d:86:a8:c7:cd:
         99:c5:25:7d:37:de:09:1d:e5:90:7e:57:8c:38:3e:61:b1:8c:
         c3:11:ab:ed:f0:fb:5b:28:10:d6:86:bd:e9:3a:dd:b7:34:0e:
         54:82:8e:46:35:ac:c2:79:25:6c:07:30:54:c3:ea:81:2d:2b:
         3c:8d:e9:36:5f:3d:06:dd:7e:bb:94:68:7e:9c:b0:64:a3:2a:
         22:ea:65:79:93:86:0b:c3:98:d7:90:85:69:ad:ff:c5:e4:ad:
         d6:36:ec:a4:44:2f:3a:4c:78:08:65:9a:4d:9a:e3:df:a5:6e:
         34:a3:5d:1e:76:e1:2f:83:fe:bf:a6:3a:32:ab:94:35:3a:21:
         87:2f:9b:78:52:d7:1e:e1:f0:b4:81:cd:e6:04:4a:62:ea:58:
         97:56:8c:50:bc:d8:c6:76:ad:01:2c:cd:d1:b6:4b:a0:e5:07:
         6b:1a:94:65:a4:77:f7:3d:2c:17:b4:d1:90:4a:0b:58:dc:fc:
         83:01:55:d8:56:56:e8:f5:f0:9b:d5:34:0a:58:05:5d:0b:ba:
         c6:2d:8b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----