Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/da6a5ace-2d73-35b6-9dab-9b86dc44468d.roa
File:                     da6a5ace-2d73-35b6-9dab-9b86dc44468d.roa (raw, json)
Hash identifier:          1dlEjPUXLyV+WiH0xQ/tDLPPtHyGuLmer3KCq+oGoV4=
Subject key identifier:   B1:63:7D:1E:11:53:97:B0:21:DD:52:9F:8C:A4:A7:EF:F2:2A:E7:DF
Certificate issuer:       /CN=66da5668-93e1-42c6-ade5-962632fe800a
Certificate serial:       010D0C9F4328583EB9267EA84A558D56D08B0000
Authority key identifier: 17:59:A5:6E:DF:B3:DE:D7:0A:20:4C:E0:40:C4:8D:52:8F:84:B8:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/da6a5ace-2d73-35b6-9dab-9b86dc44468d.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     54113
IP address blocks:        2606:2cc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b9:26:7e:a8:4a:55:8d:56:d0:8b:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66da5668-93e1-42c6-ade5-962632fe800a
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=d50caf87-c1bb-4cbb-b204-9f72d41abe05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:91:c0:41:43:d2:29:6b:25:b7:80:33:9e:
                    70:a5:90:f2:4a:46:45:7c:42:15:3f:08:89:2a:f6:
                    f2:d2:34:4c:35:00:51:ba:0b:f7:1e:16:89:e8:f5:
                    94:1e:4a:23:f3:24:7c:dd:c2:3d:21:0a:98:52:c5:
                    52:f8:ad:06:8a:37:ef:c1:4a:2c:cf:ad:e3:f0:cf:
                    07:ab:7a:46:ac:fc:ec:8b:51:5e:a9:e0:47:88:29:
                    f9:92:fe:87:78:80:c7:f1:4f:6f:83:56:56:89:1f:
                    01:82:9e:05:e4:e6:47:da:a3:9a:fc:00:84:2c:4d:
                    e9:72:7a:78:9f:0e:c8:a5:be:5b:e6:d1:13:e3:49:
                    04:1a:1b:12:36:15:d6:be:e2:d7:60:60:43:ed:bd:
                    de:6c:ee:d3:04:6c:f9:64:a8:2c:f0:4d:75:34:ca:
                    9a:3f:22:91:ee:f0:9c:a1:cf:7f:eb:15:40:6b:7a:
                    87:c4:b0:83:51:46:f8:50:ad:3a:22:8f:67:71:d3:
                    e5:16:8b:24:e4:7c:3f:21:6e:5f:ba:de:97:62:f3:
                    10:02:be:28:fc:97:97:47:9c:ba:52:c6:f3:32:a0:
                    e3:7e:24:17:2d:d8:15:8e:9e:bd:f9:fb:21:26:4e:
                    8f:92:0e:ae:09:56:f4:56:9e:9c:94:9a:93:b3:6c:
                    7e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:63:7D:1E:11:53:97:B0:21:DD:52:9F:8C:A4:A7:EF:F2:2A:E7:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/da6a5ace-2d73-35b6-9dab-9b86dc44468d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/66da5668-93e1-42c6-ade5-962632fe800a.crl

            X509v3 Authority Key Identifier:
                keyid:17:59:A5:6E:DF:B3:DE:D7:0A:20:4C:E0:40:C4:8D:52:8F:84:B8:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ee:03:ad:32:fe:63:87:dc:d8:50:11:81:c7:28:9a:ec:50:
         d3:f6:a1:91:78:d5:9e:fd:9d:b0:de:7e:50:2e:79:42:1e:f0:
         7b:1a:08:a9:b9:04:e2:58:5b:6e:a1:1a:10:2f:bd:0d:ac:1b:
         e3:1c:33:8e:08:84:17:9b:c6:1f:d8:82:06:ae:ec:c5:cb:09:
         7a:fa:af:e3:61:be:08:6b:c6:b0:2c:e1:33:1d:be:30:5d:7c:
         a7:3c:b0:9c:fb:ed:f6:4a:f7:3f:8f:ef:49:0d:b5:26:00:0e:
         c4:d6:95:21:fd:e0:10:8f:2c:a4:01:d1:bb:6e:42:ea:1d:19:
         56:72:65:dc:ba:02:3e:80:81:30:5c:4e:c3:2c:c9:a8:cc:b3:
         53:a2:0a:01:6b:77:73:a2:12:84:be:01:32:59:e5:06:25:4e:
         89:64:dd:b8:44:89:67:bd:4f:06:4f:81:46:c9:eb:51:f0:4b:
         94:90:94:04:a0:78:ae:60:5b:04:f3:59:a0:1c:59:95:eb:96:
         66:7a:83:96:52:1f:0d:94:b8:d3:d7:b5:d0:2c:7c:fb:68:66:
         59:8b:24:62:2c:62:ba:61:da:2f:fe:5f:20:b4:ed:51:cf:5a:
         34:a7:a2:ed:a0:e4:76:8e:0a:1c:87:10:d8:2f:a7:1f:e8:d1:
         26:57:33:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----