Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/2db84035-7cd8-3701-9de2-84b033a7fb00.roa
File:                     2db84035-7cd8-3701-9de2-84b033a7fb00.roa (raw, json)
Hash identifier:          Mxj0J6NWaRMg6KAP2tkQkusU4hZZArZyS/uLoqagigU=
Subject key identifier:   81:5F:42:A2:04:84:1B:F9:CD:11:26:28:C8:64:93:FF:2A:94:6B:7D
Certificate issuer:       /CN=83692920-ea82-48fe-a503-dce277a7ef99
Certificate serial:       010D0C9F4328583F747D131FB16A96107A7047C0
Authority key identifier: 0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/2db84035-7cd8-3701-9de2-84b033a7fb00.roa
Signing time:             Mon 03 Oct 2022 12:00:00 +0000
ROA not before:           Mon 03 Oct 2022 12:00:00 +0000
ROA not after:            Tue 08 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        2606:f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:74:7d:13:1f:b1:6a:96:10:7a:70:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83692920-ea82-48fe-a503-dce277a7ef99
        Validity
            Not Before: Oct  3 12:00:00 2022 GMT
            Not After : Nov  8 05:00:00 2022 GMT
        Subject: CN=2f77e283-43cc-4672-8ef6-e5cca38ce61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fd:b2:cd:22:be:40:d7:ac:b1:00:77:b8:ed:
                    d0:91:94:e0:ba:17:a7:4f:82:bb:7d:37:71:d9:b4:
                    f5:3e:a1:26:29:19:38:1b:04:8a:a0:8f:cf:3d:11:
                    7d:0f:6c:9d:ed:b4:f7:8f:30:11:af:03:9c:dc:e6:
                    34:c9:49:1c:01:b8:98:dd:a6:03:3a:5c:a3:81:a4:
                    e8:23:55:16:19:ca:9c:ff:33:e8:fc:9d:e5:00:b9:
                    a1:0b:65:29:e5:25:b1:1a:d9:7d:5d:6e:b4:96:60:
                    d6:1a:f6:e6:32:74:a3:c0:d4:89:4b:83:21:78:3c:
                    6b:ac:7b:3e:72:e2:9b:33:8b:8c:32:01:e3:32:c9:
                    ec:59:5c:37:da:15:4f:de:c4:07:eb:6d:22:da:84:
                    cf:4b:bc:93:bb:f1:cd:7a:da:17:4d:0a:f3:ee:3c:
                    8f:2d:17:2e:f6:34:d6:43:24:0a:b8:78:35:8c:7a:
                    de:fb:3d:6e:59:b4:f9:8a:57:66:66:df:56:53:c2:
                    c4:bc:d8:ad:01:e0:cd:e7:d0:8e:6a:00:72:af:bd:
                    7c:1b:4b:26:0e:fe:fd:84:69:7b:db:f2:1d:73:9a:
                    28:c3:f7:23:48:22:a6:82:a2:9d:5d:77:18:43:21:
                    49:ca:52:20:ad:fc:0e:08:0a:68:5e:00:4a:e8:32:
                    88:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5F:42:A2:04:84:1B:F9:CD:11:26:28:C8:64:93:FF:2A:94:6B:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/2db84035-7cd8-3701-9de2-84b033a7fb00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/83692920-ea82-48fe-a503-dce277a7ef99.crl

            X509v3 Authority Key Identifier:
                keyid:0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:1c:8e:6c:06:28:5a:5d:52:08:44:eb:b2:f3:3f:d3:83:0f:
         2a:21:29:44:ca:4c:2c:bb:9e:42:64:ee:32:e1:b1:0a:30:ff:
         29:e1:50:ea:a8:bc:0e:f9:25:bf:8c:4e:3e:b0:4f:dc:5a:c3:
         00:cb:c8:99:e5:7c:21:53:91:1b:08:09:d5:66:f5:43:35:2a:
         b0:18:30:6b:ce:c1:88:01:ef:47:fc:57:d6:47:59:26:e2:46:
         4d:ab:17:ac:34:69:8b:32:b6:53:d5:f5:de:17:1a:fe:ff:f3:
         b7:1e:a9:ab:c1:3e:b9:b2:5b:07:cf:90:05:1d:16:6f:31:77:
         2e:7f:ec:73:b7:cd:97:71:a6:62:38:9d:f9:36:22:88:06:88:
         6c:cd:4d:0b:d1:1a:d6:0a:fe:cd:b2:61:78:27:4c:03:2f:20:
         f4:9e:14:d3:11:75:ef:d1:d1:49:14:cb:95:cd:62:fd:79:27:
         e2:eb:4e:7a:14:90:e9:d0:cf:3f:a5:cc:39:48:95:f9:3f:3e:
         5b:c8:83:82:ac:2c:68:4b:11:ac:fc:05:3e:8d:a5:21:60:8c:
         1c:9e:b5:bb:9e:cd:63:9e:e7:c1:39:54:0f:f4:e3:3b:6d:66:
         d3:71:59:c7:33:22:62:f3:e4:f1:76:fa:8f:c9:dd:08:24:10:
         71:a6:08:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----