Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/4d4fa25e-65f0-3970-aaed-01e4e3e85d6a.roa
File:                     4d4fa25e-65f0-3970-aaed-01e4e3e85d6a.roa (raw, json)
Hash identifier:          Q07yYUw6LAIdOg/6jG4wkGXzYhCejBX3cHrP9r2nemI=
Subject key identifier:   C1:40:9C:B7:16:15:62:68:1D:FA:2E:C0:34:95:34:C8:AE:54:C4:0D
Certificate issuer:       /CN=83692920-ea82-48fe-a503-dce277a7ef99
Certificate serial:       010D0C9F4328583CDBAD5EFA681EA95A05E53540
Authority key identifier: 0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/4d4fa25e-65f0-3970-aaed-01e4e3e85d6a.roa
Signing time:             Tue 08 Feb 2022 05:00:00 +0000
ROA not before:           Tue 08 Feb 2022 05:00:00 +0000
ROA not after:            Tue 15 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2606:f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:db:ad:5e:fa:68:1e:a9:5a:05:e5:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83692920-ea82-48fe-a503-dce277a7ef99
        Validity
            Not Before: Feb  8 05:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2022 GMT
        Subject: CN=ccdcddfb-a50d-4d04-93e3-2b050340cede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:70:c6:de:b0:50:9f:1c:ee:a3:f6:3c:3f:3d:
                    42:57:b3:d2:29:d8:b9:54:2c:c2:43:1a:83:49:6d:
                    74:56:19:d6:99:aa:47:89:0e:6d:70:0a:d2:23:e5:
                    e9:21:3e:75:98:c4:dd:0e:fe:09:03:7c:51:8f:53:
                    28:d7:3f:87:91:ee:bd:21:76:36:6f:fe:63:f5:60:
                    fe:01:af:0a:c7:f5:38:5e:aa:5f:eb:56:7e:b2:0f:
                    d4:74:75:d9:45:b6:7b:84:a6:88:f3:92:be:75:cf:
                    8e:0b:b4:c2:db:23:de:27:56:e0:a4:15:99:33:13:
                    59:c1:3f:90:dd:6e:b9:aa:3f:51:79:1d:ac:b8:4e:
                    26:9c:13:04:34:07:10:ca:3a:54:67:d8:29:c6:c1:
                    6e:b9:c4:b4:57:30:e4:bd:18:7c:b3:2e:3c:5e:29:
                    86:f3:15:c6:d3:d5:8c:02:65:f5:a7:9c:10:0c:eb:
                    c5:d6:dc:65:ee:56:ab:c1:8d:bd:1b:ec:07:5b:d7:
                    e1:65:3d:75:5c:8a:31:18:87:d9:b2:c8:0f:60:bb:
                    13:36:5d:27:e5:a4:56:23:fa:ea:c4:f9:e0:47:13:
                    26:c2:7f:e4:4e:12:f4:2e:38:12:bf:6f:5c:46:47:
                    20:e4:12:0c:84:e0:9e:25:59:d7:77:4a:eb:aa:d9:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:40:9C:B7:16:15:62:68:1D:FA:2E:C0:34:95:34:C8:AE:54:C4:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/4d4fa25e-65f0-3970-aaed-01e4e3e85d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/83692920-ea82-48fe-a503-dce277a7ef99.crl

            X509v3 Authority Key Identifier:
                keyid:0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d8:fa:79:c9:d0:e5:a9:df:c9:5e:d0:90:3c:d7:f0:ed:20:
         51:0d:8e:26:62:56:e9:99:b3:7e:91:8a:21:59:56:b9:dc:1f:
         2d:17:a0:09:c0:b1:c5:33:18:4a:05:5c:a9:37:5d:bf:87:2e:
         0d:5e:f1:77:9b:3d:1c:99:ba:81:99:99:9e:03:c0:b1:2c:18:
         fd:5e:d6:c9:c4:20:39:74:e2:a9:23:cd:10:d5:47:d5:a8:cb:
         ba:15:79:1a:03:73:db:1b:fe:fd:e2:ed:ff:ad:d7:1b:39:24:
         d7:6e:5e:86:4d:63:05:24:14:fe:ba:c6:ac:4d:80:64:97:81:
         52:5c:d4:ba:ab:82:16:1d:cf:bd:32:42:ff:88:18:30:d6:a8:
         a6:13:46:8d:c5:cf:93:13:9e:83:f7:44:85:76:4a:f4:ac:ae:
         9f:49:68:b2:42:1f:ae:02:b6:35:3c:0b:46:27:ee:3a:1e:1c:
         0b:30:ca:85:90:e5:63:8c:a6:09:38:0c:24:bf:f6:c1:a0:e1:
         b4:30:1e:f2:51:f1:30:40:fc:b3:29:1e:95:2f:d3:94:ae:8b:
         bc:48:5c:7a:79:3b:ad:25:2f:d9:a0:0b:e6:d6:b6:55:c1:6e:
         ae:79:09:ea:ef:40:4f:da:b1:e1:c6:be:fd:46:0c:99:8e:16:
         3d:42:f5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----