Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/34374ad4-858b-3b80-ae9c-716c1a9e8a06.roa
File:                     34374ad4-858b-3b80-ae9c-716c1a9e8a06.roa (raw, json)
Hash identifier:          u9HcNSSB9Y2ODnjI1UqHqqZ8GSPhEzgzXctQnIJNONo=
Subject key identifier:   D6:4E:99:80:97:29:F1:6B:F4:79:85:D8:F3:F6:D8:2F:1A:B8:E3:54
Certificate issuer:       /CN=66da5668-93e1-42c6-ade5-962632fe800a
Certificate serial:       010D0C9F4328583E6AEC7583B6DB4A732AFFB700
Authority key identifier: 17:59:A5:6E:DF:B3:DE:D7:0A:20:4C:E0:40:C4:8D:52:8F:84:B8:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/34374ad4-858b-3b80-ae9c-716c1a9e8a06.roa
Signing time:             Thu 30 Jun 2022 12:00:00 +0000
ROA not before:           Thu 30 Jun 2022 12:00:00 +0000
ROA not after:            Fri 05 Aug 2022 04:00:00 +0000
asID:                     54113
IP address blocks:        2606:2cc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6a:ec:75:83:b6:db:4a:73:2a:ff:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66da5668-93e1-42c6-ade5-962632fe800a
        Validity
            Not Before: Jun 30 12:00:00 2022 GMT
            Not After : Aug  5 04:00:00 2022 GMT
        Subject: CN=1c0a30c7-22d5-4208-bbd5-b7d7f3556fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:db:bf:e9:d0:c6:b5:71:fa:85:06:14:47:
                    c0:73:a4:82:ba:b3:7a:24:73:16:a7:b0:e2:11:5d:
                    e4:fb:91:e8:4f:9b:ca:8f:46:34:78:8c:40:e3:83:
                    9f:38:72:98:ac:86:8c:a5:b5:d3:12:3f:c0:d4:4f:
                    48:14:b3:dd:d6:f7:6c:d0:e8:64:bc:10:e5:c1:92:
                    c3:5b:cd:82:eb:cc:90:06:2c:0b:1c:57:55:41:f4:
                    1d:65:71:bc:c4:fd:3c:82:68:6c:5d:16:ce:d2:c3:
                    7b:88:ac:0d:6d:19:c8:5b:50:16:d7:54:f0:d7:e8:
                    c9:38:83:0b:3b:aa:62:1a:d9:c7:ac:d2:10:97:1a:
                    17:dc:24:2d:22:7d:63:b7:c0:f6:a9:68:c4:bd:89:
                    da:31:e9:75:6a:1a:c8:b6:cc:af:c0:5d:6b:21:8b:
                    1f:f2:94:d4:1f:9c:a5:3b:7c:5f:82:90:8c:75:91:
                    79:8c:e8:81:87:5f:bd:43:9f:6b:ab:99:54:5c:c8:
                    d5:76:47:f6:a0:48:db:29:20:cb:87:e7:e4:16:cd:
                    e4:1e:94:f7:1e:ce:00:75:53:1b:e1:39:8c:29:75:
                    ea:e0:36:00:a0:37:a0:42:3c:f7:9a:41:af:ec:94:
                    7a:c7:66:ab:79:7b:21:a6:ee:4a:62:20:9d:a6:00:
                    f9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4E:99:80:97:29:F1:6B:F4:79:85:D8:F3:F6:D8:2F:1A:B8:E3:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/34374ad4-858b-3b80-ae9c-716c1a9e8a06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/66da5668-93e1-42c6-ade5-962632fe800a.crl

            X509v3 Authority Key Identifier:
                keyid:17:59:A5:6E:DF:B3:DE:D7:0A:20:4C:E0:40:C4:8D:52:8F:84:B8:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:22:ab:e4:52:7b:bb:b4:3b:d7:00:62:29:86:93:7d:7e:ac:
         63:f0:e5:24:f1:13:b3:0f:bd:1c:59:13:24:07:72:3a:80:49:
         9e:99:05:f9:9e:61:42:a4:74:4f:a1:50:d4:fe:40:cf:d1:f0:
         05:a1:48:70:23:93:58:14:74:fa:d7:c8:d9:1a:a1:e0:d2:63:
         38:9e:5d:31:0b:e3:d9:34:3c:63:9d:76:b1:b4:f4:4e:03:cf:
         74:a2:46:dc:3d:c0:00:e6:ca:54:80:de:24:87:ea:43:6f:f5:
         1f:c6:38:e5:d4:fd:8b:2b:86:2e:da:02:0b:bc:f3:50:38:a3:
         32:55:fe:e8:22:71:4f:7d:6a:b5:47:06:5a:2e:33:d7:ec:5f:
         4b:eb:1b:03:d8:29:0c:6d:b8:f9:52:54:a5:10:ce:0d:14:bc:
         f8:06:90:ff:4f:59:6b:ee:87:51:87:ce:70:0e:46:1b:9e:19:
         44:fd:be:49:6c:67:cb:d4:a7:d3:5a:b4:eb:e6:85:89:18:2d:
         b8:c7:3b:d3:dc:8c:53:6c:6c:98:5a:36:38:b9:31:80:88:9b:
         c5:c5:f6:69:b7:3b:5c:e0:8c:00:27:0c:55:dd:c2:4c:40:60:
         86:2d:65:27:d9:4a:4b:07:b3:3f:14:65:b5:28:16:62:b5:e5:
         00:14:12:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----