Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/bd07d12f-1951-3900-9a09-9facd3c287a0.roa
File:                     bd07d12f-1951-3900-9a09-9facd3c287a0.roa (raw, json)
Hash identifier:          Ye5MeYowbnQUNeX19si+19QqlnvJmpBVNaQDMxs2rVs=
Subject key identifier:   4B:0F:17:9A:FE:45:3B:9F:32:07:66:25:B2:FC:CE:D9:11:5B:20:0D
Certificate issuer:       /CN=83692920-ea82-48fe-a503-dce277a7ef99
Certificate serial:       010D0C9F4328583CB49066A8BA3FE60FB26C3D00
Authority key identifier: 0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/bd07d12f-1951-3900-9a09-9facd3c287a0.roa
Signing time:             Tue 25 Jan 2022 05:00:00 +0000
ROA not before:           Tue 25 Jan 2022 05:00:00 +0000
ROA not after:            Tue 01 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        2606:f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b4:90:66:a8:ba:3f:e6:0f:b2:6c:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83692920-ea82-48fe-a503-dce277a7ef99
        Validity
            Not Before: Jan 25 05:00:00 2022 GMT
            Not After : Mar  1 05:00:00 2022 GMT
        Subject: CN=e54330a7-3f68-4bcf-ad89-ff98c54bedad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:98:7c:6b:19:1d:ea:37:4b:f1:5c:70:23:98:
                    dd:57:17:48:0f:27:e6:47:14:91:a0:9d:4e:ec:27:
                    24:95:0d:19:76:40:de:ab:34:eb:63:e4:40:aa:f1:
                    e1:bc:e5:66:4b:71:a3:ac:ad:65:b2:30:ef:38:f0:
                    ef:21:21:5e:a9:a1:26:8d:b8:b0:97:f5:c4:b7:eb:
                    9e:f4:90:68:3b:11:af:4e:ce:bf:5f:0a:ef:47:5c:
                    7f:80:3a:18:37:6d:62:40:98:19:72:34:a0:3a:83:
                    a0:9e:79:03:e9:a1:45:d6:02:79:bf:e9:58:65:9a:
                    30:45:60:66:1f:36:3c:99:1f:f2:9d:2d:76:a8:b4:
                    0c:1e:71:5b:40:73:0a:4d:d8:7e:a6:ad:0c:93:c3:
                    a4:09:c9:21:14:f0:29:e6:b3:49:c4:22:87:94:8d:
                    cd:ba:c6:3a:5e:0d:6f:86:ef:eb:4f:eb:64:2a:c5:
                    b9:01:01:f1:b5:7f:2d:42:2d:21:92:0e:9f:c2:51:
                    16:a3:38:95:2c:e5:7b:7d:f9:81:fc:29:39:11:cb:
                    ce:2f:47:e0:a2:5a:27:83:ed:76:23:4f:2d:a3:35:
                    dd:5f:1d:0f:d2:aa:4e:be:47:c6:73:d5:5f:7a:87:
                    8c:86:cd:ad:6e:4c:d7:9e:e3:49:0c:cb:9c:fb:69:
                    03:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0F:17:9A:FE:45:3B:9F:32:07:66:25:B2:FC:CE:D9:11:5B:20:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/bd07d12f-1951-3900-9a09-9facd3c287a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/83692920-ea82-48fe-a503-dce277a7ef99.crl

            X509v3 Authority Key Identifier:
                keyid:0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:2e:35:3e:e7:32:47:74:7b:a5:46:c4:12:89:09:5f:94:d8:
         0f:70:2d:fe:fa:8a:86:93:67:a4:3b:f1:28:b3:13:96:04:3f:
         6a:e6:03:32:e0:fa:31:60:63:19:6c:81:2e:f7:3a:ec:85:52:
         1b:13:c8:fa:5a:2b:00:23:03:ce:8f:28:f6:3a:10:cb:10:bc:
         dd:95:7f:f6:56:58:28:f0:26:94:71:81:d0:bc:ce:af:ce:84:
         38:d2:f9:9e:6f:20:72:d8:44:e3:cd:81:dd:e7:34:38:3f:6e:
         29:b2:ab:26:20:c2:4b:46:54:10:fb:b9:ac:5b:a1:66:7f:95:
         e2:a6:a7:15:fe:66:3f:d1:a6:5a:1e:4e:f4:44:e1:9b:f5:8e:
         e6:86:6b:40:31:73:b1:52:93:78:0b:94:22:78:ee:23:3a:bc:
         1a:59:9e:c4:10:7e:42:e6:dd:aa:a9:8d:59:c8:5c:44:3c:c4:
         20:a3:e7:49:dd:77:91:eb:66:af:a8:cd:69:1b:f7:9d:23:f9:
         32:1c:1e:6d:23:e3:2b:eb:cf:b0:00:7c:43:6d:e5:a6:81:ea:
         c3:bc:11:7f:3b:d8:78:e7:5a:4d:8c:0e:cf:be:3c:2d:24:1b:
         6a:5e:18:2a:24:f0:65:6b:c4:1f:3b:3d:6b:c9:5f:06:2e:a7:
         26:c1:51:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----