Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/bc33ba4b-7831-384b-9c31-3466c31ddbdb.roa
File:                     bc33ba4b-7831-384b-9c31-3466c31ddbdb.roa (raw, json)
Hash identifier:          jXnG/DDwlbi65kW1eqJFFdizi3VMXCogIIvLX5ZiMoQ=
Subject key identifier:   EE:3D:42:E2:BE:39:A1:83:CF:4D:3E:FF:32:FA:78:84:6C:49:2C:B8
Certificate issuer:       /CN=66da5668-93e1-42c6-ade5-962632fe800a
Certificate serial:       010D0C9F4328583D0AE74F6F69405972975DEF20
Authority key identifier: 17:59:A5:6E:DF:B3:DE:D7:0A:20:4C:E0:40:C4:8D:52:8F:84:B8:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/bc33ba4b-7831-384b-9c31-3466c31ddbdb.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     54113
IP address blocks:        2606:2cc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0a:e7:4f:6f:69:40:59:72:97:5d:ef:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66da5668-93e1-42c6-ade5-962632fe800a
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=353a3cd2-3afe-4985-be81-31451091b781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:84:f6:5d:a2:dd:11:a3:a5:d8:26:bd:5e:4a:
                    b5:8d:c2:f5:f3:e4:f1:de:5c:e3:04:da:01:8a:71:
                    f5:8b:46:cd:b3:0d:e2:53:e4:3e:e7:b3:b8:c3:47:
                    28:b3:cf:22:17:27:bd:6d:05:5c:fa:42:58:ac:2c:
                    11:24:9a:f3:4f:71:53:03:89:50:0c:90:4f:41:d9:
                    e2:dd:3d:c4:92:2d:66:50:87:6c:1d:99:60:55:cc:
                    83:be:00:b2:b0:35:cb:a0:bd:45:d7:8d:90:00:f1:
                    8f:9c:3c:7a:32:c6:f2:8d:69:83:60:49:99:23:50:
                    9a:67:e8:01:7a:04:e4:81:d8:09:a0:f0:ad:de:73:
                    28:b7:3d:98:ac:3c:c8:a2:2b:b8:41:b2:d0:31:00:
                    91:05:cd:66:08:26:f1:2b:14:7c:ed:16:4e:d3:c4:
                    9e:24:08:83:34:10:cf:03:8b:cd:3f:65:4e:6c:35:
                    5b:a3:5d:f8:f3:61:50:37:ff:44:08:72:da:05:25:
                    ad:a4:dc:0f:cf:db:44:61:a9:7a:c0:c8:8d:4e:ab:
                    64:64:41:58:b9:ca:f9:36:b6:90:85:b4:48:b4:f6:
                    a4:b1:11:95:00:ad:dc:44:32:88:b0:41:a2:a1:ac:
                    3e:8e:a1:70:b7:52:a3:f8:10:1b:17:04:01:d6:04:
                    08:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3D:42:E2:BE:39:A1:83:CF:4D:3E:FF:32:FA:78:84:6C:49:2C:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/bc33ba4b-7831-384b-9c31-3466c31ddbdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/66da5668-93e1-42c6-ade5-962632fe800a.crl

            X509v3 Authority Key Identifier:
                keyid:17:59:A5:6E:DF:B3:DE:D7:0A:20:4C:E0:40:C4:8D:52:8F:84:B8:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:d6:64:79:a1:13:11:c8:77:a7:9f:eb:b9:e1:0b:f4:17:b4:
         30:ae:01:de:c8:ee:71:38:c6:55:f7:80:58:7c:f9:db:d1:35:
         af:de:95:8c:4c:09:0a:ae:f0:56:77:42:0c:54:51:e6:ff:6d:
         74:bd:ee:d7:21:24:c1:81:12:b1:e9:6a:90:2d:fd:cd:f2:12:
         3c:cc:9d:cf:c3:a8:12:00:97:cf:bd:3f:2b:8f:50:0c:38:81:
         4c:f7:54:cd:30:48:85:54:9c:57:72:18:7d:ce:90:c6:02:7f:
         5f:aa:39:b9:d6:12:70:5f:70:bd:09:cb:47:21:07:f1:11:24:
         9c:78:1d:51:20:34:17:01:a1:6c:a5:33:c5:52:3f:5a:10:ad:
         f0:61:6b:23:9b:98:f6:3d:fd:16:39:26:92:96:e3:8d:89:4d:
         e6:49:ca:e4:c2:50:08:92:3c:fd:44:22:04:2d:3f:07:09:d1:
         d3:41:3c:16:cc:94:61:09:a7:ab:7a:0c:de:48:4a:e1:3d:92:
         d6:d3:33:2d:f3:a7:10:9e:db:6c:ed:cc:6b:53:64:6b:a2:79:
         25:65:cf:4a:fe:96:f9:78:ed:4f:06:18:3c:53:28:70:f6:c7:
         97:40:5e:42:ab:1a:61:bc:0c:30:26:84:3b:c8:e9:02:2e:b1:
         95:26:d8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----