Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/86c9ff93-d120-3cdb-aa29-b9ea09f25838.roa
File:                     86c9ff93-d120-3cdb-aa29-b9ea09f25838.roa (raw, json)
Hash identifier:          ChtKbaHscNtRSfAwr3L2YzM1g17cSVJnWBCEVM80lfw=
Subject key identifier:   B6:4D:0D:BB:77:C8:03:DF:73:6F:B6:07:64:C7:7B:9C:6D:23:AD:AE
Certificate issuer:       /CN=83692920-ea82-48fe-a503-dce277a7ef99
Certificate serial:       010D0C9F4328583C8D732AB44FB7F2D789C25580
Authority key identifier: 0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/86c9ff93-d120-3cdb-aa29-b9ea09f25838.roa
Signing time:             Tue 11 Jan 2022 05:00:00 +0000
ROA not before:           Tue 11 Jan 2022 05:00:00 +0000
ROA not after:            Tue 15 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        2606:f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:8d:73:2a:b4:4f:b7:f2:d7:89:c2:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83692920-ea82-48fe-a503-dce277a7ef99
        Validity
            Not Before: Jan 11 05:00:00 2022 GMT
            Not After : Feb 15 05:00:00 2022 GMT
        Subject: CN=f54676c5-1101-4a3d-8135-b3ec6f204eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f1:8b:ba:b1:65:a7:53:93:2d:05:57:2a:a8:
                    3a:4b:1b:20:88:db:b4:c0:2b:12:8c:dd:2b:02:05:
                    c4:ea:59:80:8c:c0:99:ab:e8:14:6a:9a:4f:ef:6b:
                    37:66:82:0e:46:34:06:a4:08:8e:9c:5d:32:6c:1b:
                    ef:c1:9e:14:79:66:2e:d8:30:15:94:f8:8e:0a:65:
                    40:91:b6:f3:a0:05:f4:a8:87:01:79:f9:84:b0:9e:
                    c3:b3:2e:30:d2:da:d7:b1:0d:0f:de:67:70:f3:ab:
                    92:fb:0f:96:34:1f:7f:5c:6a:e5:e2:bd:d3:cf:89:
                    86:c8:24:45:37:7e:4e:d0:b6:0b:75:47:eb:fa:90:
                    7d:86:54:dc:8d:51:a0:5f:18:dd:83:2c:a8:33:99:
                    12:66:be:7e:44:c9:a3:27:42:fc:e3:a2:9c:f4:ef:
                    7f:6d:9c:6e:26:08:49:43:f5:7e:4f:0b:68:51:74:
                    5b:e2:6b:3e:97:f2:ee:1c:af:57:6a:19:67:58:02:
                    38:2d:19:c7:99:8c:dc:cb:4d:71:b9:61:87:21:9e:
                    b0:89:36:99:d0:6c:2a:ac:08:52:ad:6a:07:92:0f:
                    77:5e:e7:45:54:b1:ef:8a:28:50:b0:90:91:a5:66:
                    d2:75:a4:8a:fb:2f:1f:43:ee:01:c4:0d:9e:4c:d2:
                    6e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4D:0D:BB:77:C8:03:DF:73:6F:B6:07:64:C7:7B:9C:6D:23:AD:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/86c9ff93-d120-3cdb-aa29-b9ea09f25838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/83692920-ea82-48fe-a503-dce277a7ef99.crl

            X509v3 Authority Key Identifier:
                keyid:0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:25:10:c6:4c:c3:77:b2:d1:4a:b6:e3:3d:96:9d:66:10:ee:
         a9:eb:c2:50:0d:3c:70:02:07:1a:92:25:21:a7:82:2c:9c:8d:
         8d:4f:60:aa:1d:83:9d:3c:e1:45:80:78:03:96:9d:d4:69:79:
         bb:8a:fd:90:f7:c8:41:2e:ba:65:38:50:cc:79:3f:8a:15:46:
         71:12:59:2a:6c:eb:41:fe:fa:5f:fc:37:ed:13:d3:8b:90:68:
         9b:09:f8:36:23:92:a7:80:95:d0:df:a3:45:32:68:26:e5:b7:
         24:11:94:bb:d6:db:63:00:33:f8:17:bf:59:bc:96:c5:58:b0:
         3b:79:a0:ca:2c:1b:17:e5:c2:64:e1:d6:26:d0:89:35:40:c9:
         2a:28:eb:92:30:84:04:fe:a6:ed:a9:80:2a:0b:04:20:7e:df:
         b9:db:fe:46:73:38:de:a9:e3:4c:04:e5:dc:45:ae:01:5b:a9:
         88:55:5e:42:45:88:cc:46:14:e7:df:a0:30:e4:2d:ca:da:e6:
         10:f8:9e:d2:87:0b:da:c3:e1:16:a3:a3:60:59:1d:51:e3:af:
         5a:e1:6e:99:e8:fb:63:93:a8:45:ab:81:3e:6a:0f:26:94:1b:
         dc:db:26:8a:24:03:1f:51:a5:5f:99:7a:61:be:22:c6:39:88:
         be:74:68:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----