Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f101d29e-15f2-3e5f-b282-70348feffada.roa
File:                     f101d29e-15f2-3e5f-b282-70348feffada.roa (raw, json)
Hash identifier:          OPNKUTXdifEY+42Ziu+uReziIamqpPFVK0T7LP8jQ1c=
Subject key identifier:   56:5D:AA:86:20:F4:F7:86:73:D7:5A:A0:35:01:6F:91:1D:01:0C:29
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858409012668B659C378C1907EF30
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f101d29e-15f2-3e5f-b282-70348feffada.roa
Signing time:             Wed 26 Jun 2019 20:53:56 +0000
ROA not before:           Wed 26 Jun 2019 20:53:56 +0000
ROA not after:            Mon 17 Apr 2028 04:00:00 +0000
asID:                     33363
IP address blocks:        2602:107:1800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:90:12:66:8b:65:9c:37:8c:19:07:ef:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 26 20:53:56 2019 GMT
            Not After : Apr 17 04:00:00 2028 GMT
        Subject: CN=84339292-2147-4aa0-a10f-292365483ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d0:8d:6e:0d:d2:03:0f:a4:42:6e:dc:30:c3:
                    d6:2a:6f:b0:4c:30:29:07:85:53:fd:be:88:b6:b7:
                    db:42:71:e9:da:dd:6d:35:fe:4f:ea:96:45:bd:53:
                    4a:0c:d4:17:2f:e8:3b:fe:18:5c:33:38:c2:d1:77:
                    c6:59:fa:65:b8:94:b0:41:f8:35:55:84:65:33:1c:
                    dd:b6:7e:34:91:db:99:0b:00:b7:63:56:6e:51:0b:
                    d0:6b:74:cd:1c:fd:45:05:11:f9:ec:e9:74:46:9c:
                    49:32:f6:03:b1:8c:c0:76:44:b4:7c:c3:04:a4:d2:
                    ca:fc:2a:28:e9:83:98:84:37:19:88:f9:28:68:25:
                    c1:35:6d:3f:36:7a:fe:72:43:55:76:29:fa:15:0f:
                    60:3e:7c:4d:dc:d7:35:44:bf:2b:6d:0a:95:8c:22:
                    d2:55:e3:21:e4:1d:18:35:2e:e3:0a:06:29:d1:97:
                    7d:96:d6:b7:26:f0:0f:7b:f6:03:20:ff:b0:f8:25:
                    c1:30:87:66:01:74:2e:48:97:7e:bf:45:a2:eb:dc:
                    ae:de:36:cc:fc:a5:d3:0c:ac:70:38:19:f8:30:f4:
                    e6:af:36:75:a0:3b:3a:87:a2:aa:d4:73:1f:bf:1c:
                    c0:0f:cb:96:46:c2:a9:24:6b:61:c0:ef:16:92:3e:
                    cf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5D:AA:86:20:F4:F7:86:73:D7:5A:A0:35:01:6F:91:1D:01:0C:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f101d29e-15f2-3e5f-b282-70348feffada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:1800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:94:a3:c5:68:f9:fe:fa:38:92:2e:80:38:9f:85:2a:32:c9:
         05:4c:0f:73:6e:0c:57:24:4a:42:92:52:a7:ed:2b:4c:fb:13:
         87:76:63:03:e9:fe:68:d5:1a:a9:ec:37:2e:7f:1d:b8:ec:12:
         16:b3:35:de:da:be:f9:00:d1:1c:58:ce:19:3b:b9:6c:57:ed:
         85:73:42:38:ef:cf:8f:8a:8e:2f:4a:7d:40:f7:30:b2:16:61:
         ad:75:aa:07:90:fa:22:85:73:41:0d:cc:2b:b9:70:da:07:14:
         4c:32:70:c3:79:60:fc:46:2e:bc:af:34:08:aa:8a:7a:a0:b7:
         54:00:d2:5e:ad:db:79:ac:78:a1:3d:11:47:b2:35:60:a6:b6:
         a5:c6:69:ed:54:81:bb:2f:e6:84:56:7c:40:83:c0:29:2d:18:
         f4:7a:a3:3a:9a:b6:19:1b:a4:06:22:8a:f2:fe:c2:45:f1:63:
         67:2d:37:a0:56:17:17:57:8c:8e:63:cd:9c:a6:a4:79:fe:f9:
         04:47:0f:91:3f:ea:ee:1d:00:dd:1f:fc:b8:ed:95:00:ab:9e:
         71:74:51:de:46:bf:3d:1d:20:b0:93:0a:8a:6e:d5:47:90:8d:
         ef:6e:55:39:cd:82:10:e1:a6:3e:c4:82:60:9e:06:2b:18:32:
         7f:72:08:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----