Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/fe17d003-314b-3c8b-b05f-acce4f1d5c80.roa
File:                     fe17d003-314b-3c8b-b05f-acce4f1d5c80.roa (raw, json)
Hash identifier:          o1On2fHlFbThc4HVs22z7AlU/XL6N+QACAK76nCLTtY=
Subject key identifier:   33:E8:8B:A0:F2:0C:D6:C7:C9:92:5F:28:EA:EE:32:7C:9C:C1:7F:FC
Certificate issuer:       /CN=83692920-ea82-48fe-a503-dce277a7ef99
Certificate serial:       010D0C9F4328583CDBAD38CF0855861983375140
Authority key identifier: 0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/fe17d003-314b-3c8b-b05f-acce4f1d5c80.roa
Signing time:             Tue 08 Feb 2022 05:00:00 +0000
ROA not before:           Tue 08 Feb 2022 05:00:00 +0000
ROA not after:            Tue 15 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2606:f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:db:ad:38:cf:08:55:86:19:83:37:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83692920-ea82-48fe-a503-dce277a7ef99
        Validity
            Not Before: Feb  8 05:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2022 GMT
        Subject: CN=6b1c81cd-3fa4-4ad6-8cb6-694a4c39f4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:53:36:59:69:bd:5a:f1:8e:3c:40:dd:92:17:
                    ac:35:d9:86:95:fd:46:22:46:3a:b2:b0:9b:9a:46:
                    20:34:f7:06:a5:c1:e6:98:3d:5a:aa:3b:78:ac:74:
                    77:6c:d6:7c:54:df:7f:6b:b0:0e:74:69:07:e8:3c:
                    45:8f:5c:3e:06:92:54:4b:f4:94:c1:98:36:91:42:
                    e9:ed:f9:ad:e4:77:da:0b:79:e1:6e:bc:15:2e:e5:
                    94:cc:1d:1f:02:0f:7c:34:ce:0a:1f:15:c7:0c:8f:
                    e3:23:1e:51:36:02:1e:9a:ce:f5:fb:90:69:7c:d8:
                    ab:30:e0:e4:b4:50:7e:6d:3d:6c:d4:66:28:10:03:
                    b7:b7:e6:6c:b3:2d:49:03:25:0b:0d:27:7f:6a:73:
                    0d:00:5f:1c:bf:f1:dc:e8:6a:96:ae:2c:06:eb:b4:
                    8d:be:c1:d4:be:4c:a6:f5:10:26:b7:74:13:c5:2d:
                    a5:4c:84:d8:52:a6:a7:48:b3:69:88:f9:02:8b:a9:
                    7c:7d:a4:ac:a2:d8:d2:78:82:26:2b:30:6e:ff:75:
                    81:17:ab:ae:f6:82:e9:08:1f:ee:1e:36:c9:b5:e7:
                    43:3a:e9:2e:06:64:a9:48:eb:25:14:d6:48:38:dd:
                    e6:18:e9:4a:a6:38:a0:a9:d0:67:b2:42:7d:e0:83:
                    e0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E8:8B:A0:F2:0C:D6:C7:C9:92:5F:28:EA:EE:32:7C:9C:C1:7F:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/fe17d003-314b-3c8b-b05f-acce4f1d5c80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/83692920-ea82-48fe-a503-dce277a7ef99.crl

            X509v3 Authority Key Identifier:
                keyid:0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:fb:ae:68:ac:bf:f8:15:c1:cd:61:bb:5a:1c:3e:cc:cf:2f:
         d2:51:60:5a:35:3c:7a:e6:c1:e1:44:9e:6b:44:3d:ce:a3:52:
         88:e1:ee:cd:9f:2f:b9:9b:67:f5:ef:20:c2:6a:fc:a2:da:fe:
         9c:e3:68:78:5a:2e:a1:01:47:06:16:ea:7e:04:c6:46:4d:4e:
         ea:14:06:68:45:bc:25:f5:bc:af:68:93:b0:73:0d:bd:95:f3:
         b6:5d:79:78:fc:2e:7f:9e:f5:d0:53:16:dc:d6:91:02:5f:0c:
         bf:77:86:3b:f5:79:64:54:e4:e5:3d:4c:41:54:9d:1d:b4:ff:
         39:bb:ce:43:74:f3:52:34:c2:a5:c6:5f:20:f4:57:f8:bc:ec:
         74:82:85:e9:d4:99:6f:8b:15:f7:68:ce:9a:26:dd:b1:d8:a8:
         7e:03:66:d3:9b:8a:5d:9c:16:84:73:58:f7:4d:df:d5:e0:8a:
         f5:e2:47:8f:88:46:21:2a:76:56:12:fc:cd:70:48:1a:f6:69:
         cf:2c:b0:51:3d:87:57:81:49:9d:bb:a0:08:42:a5:f6:68:4d:
         7d:c7:27:10:a4:6c:8c:4a:a3:0e:a1:cd:2d:ae:1c:eb:63:60:
         30:53:5d:4b:47:ec:40:90:2f:79:96:e8:61:1a:5d:0a:ae:1d:
         3b:d1:08:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----