Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/8727f0fe-6971-3d67-9c42-d375f78a4e95.roa
File:                     8727f0fe-6971-3d67-9c42-d375f78a4e95.roa (raw, json)
Hash identifier:          E8QtvxjE9ricnEff+AwUYhx2CdfLA9SOiE7FplcfBsA=
Subject key identifier:   62:EE:7D:3F:B5:F1:56:87:1D:7D:0A:99:A0:DA:F6:01:9F:D1:12:49
Certificate issuer:       /CN=66da5668-93e1-42c6-ade5-962632fe800a
Certificate serial:       010D0C9F4328583F579C43CF5CD1BF1831CB2F10
Authority key identifier: 17:59:A5:6E:DF:B3:DE:D7:0A:20:4C:E0:40:C4:8D:52:8F:84:B8:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/8727f0fe-6971-3d67-9c42-d375f78a4e95.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     54113
IP address blocks:        2606:2cc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:57:9c:43:cf:5c:d1:bf:18:31:cb:2f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66da5668-93e1-42c6-ade5-962632fe800a
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=3127659e-1bd8-4c2c-87d2-1cf367fce46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:9e:f7:19:79:49:59:12:49:7f:cc:0f:0d:
                    2f:fb:73:4b:78:fc:8c:49:49:2c:bd:cf:90:f8:0a:
                    d9:44:bb:d8:0b:f2:b0:e7:e0:8b:89:0d:2d:25:1d:
                    80:43:2c:51:b1:45:b3:44:6d:3c:ca:87:8a:17:9d:
                    68:4c:e4:58:44:6e:5a:3d:d1:7c:09:dd:37:b7:8a:
                    7a:f7:09:49:f1:27:85:2a:cd:10:ac:f2:fb:1c:d6:
                    85:01:d2:de:42:73:a0:c4:72:6e:71:c6:b7:d2:68:
                    58:d1:5d:78:b5:88:ae:52:91:47:40:de:e1:28:3b:
                    25:0d:d9:f5:b1:7e:d4:8d:1e:5b:55:0c:cf:1e:44:
                    dc:27:d6:36:b5:1e:65:20:69:09:df:99:8c:06:80:
                    ec:56:60:63:b0:1c:a6:3d:94:d4:e6:0d:7a:08:a2:
                    d3:24:be:18:5f:cb:4f:48:da:7d:f8:7e:62:ce:03:
                    7d:ed:51:3f:e2:9c:8b:ea:26:09:eb:d0:67:bd:46:
                    6f:f1:e6:27:36:5e:1a:00:2a:53:b0:bc:d0:d5:76:
                    9e:b8:c1:60:eb:2f:08:2c:9f:4d:a8:d1:93:29:5c:
                    c8:f4:67:9e:80:cb:3e:38:f2:e5:c6:1a:24:90:78:
                    71:81:fa:17:dd:7c:60:da:50:ac:61:6b:c3:53:e5:
                    84:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EE:7D:3F:B5:F1:56:87:1D:7D:0A:99:A0:DA:F6:01:9F:D1:12:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/8727f0fe-6971-3d67-9c42-d375f78a4e95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/66da5668-93e1-42c6-ade5-962632fe800a.crl

            X509v3 Authority Key Identifier:
                keyid:17:59:A5:6E:DF:B3:DE:D7:0A:20:4C:E0:40:C4:8D:52:8F:84:B8:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:b8:e8:52:22:16:15:9d:6d:7f:2c:4e:9f:3e:10:f2:d3:76:
         64:bd:25:73:c9:4b:2f:65:96:31:87:70:bd:fe:16:b6:7b:41:
         02:b6:8b:1f:44:e5:a9:80:17:60:a5:66:92:4d:f0:93:23:d3:
         12:17:4c:57:7d:2f:6a:0c:6e:49:e5:60:82:e0:da:ab:d9:00:
         9d:ab:91:58:ae:72:2e:ab:0f:44:ed:6e:09:e6:1d:6a:2c:a6:
         72:f8:a8:9b:64:0c:f4:65:7a:74:fc:66:d9:80:46:e2:55:dc:
         c7:40:fd:53:63:fb:75:0c:91:1c:83:4b:aa:1e:82:6b:0c:a9:
         f5:0f:12:f9:ec:8f:c1:71:10:41:9f:82:31:ef:52:6b:f5:93:
         fd:29:ee:07:6e:f1:ff:08:ab:67:a6:1b:2c:e5:76:79:1e:45:
         53:db:73:3e:0c:60:5f:73:97:cd:80:55:9e:08:f4:d3:e8:69:
         03:54:a7:64:46:bd:df:ff:1a:b4:ad:19:6b:d2:bc:a7:24:fc:
         6a:b1:ca:48:99:2d:b1:93:2e:85:a4:cd:74:ee:f8:93:ea:f3:
         61:a1:11:f7:66:39:f7:99:df:c7:33:8d:19:d6:07:b6:30:44:
         fa:c7:5d:32:3a:c2:ed:3c:33:67:e4:e1:67:38:b3:22:f2:4b:
         4d:e2:f4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----