Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/6cb398d4-f1f0-3c6f-8d9f-a956d91a3f20.roa
File:                     6cb398d4-f1f0-3c6f-8d9f-a956d91a3f20.roa (raw, json)
Hash identifier:          cKmyb+8/CPYoqa9GEnxIZjXy6TkAw/mVo0PVDTRqyk0=
Subject key identifier:   69:84:8B:F9:CA:14:7F:EE:DF:5D:5D:8C:4C:71:02:DE:01:4F:46:61
Certificate issuer:       /CN=dc969dfb-52db-45b6-9244-62c3f7ddf514
Certificate serial:       010D0C9F4328583D192A7FC8CBC3C4C05A4CE708
Authority key identifier: CA:DC:79:A9:69:34:E9:AF:17:2E:50:66:00:0A:A1:30:0D:EC:61:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/6cb398d4-f1f0-3c6f-8d9f-a956d91a3f20.roa
Signing time:             Wed 31 Jul 2019 04:00:00 +0000
ROA not before:           Wed 31 Jul 2019 04:00:00 +0000
ROA not after:            Sun 03 Jun 2029 04:00:00 +0000
asID:                     61138
IP address blocks:        2606:b940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:19:2a:7f:c8:cb:c3:c4:c0:5a:4c:e7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc969dfb-52db-45b6-9244-62c3f7ddf514
        Validity
            Not Before: Jul 31 04:00:00 2019 GMT
            Not After : Jun  3 04:00:00 2029 GMT
        Subject: CN=73cbbf92-c13a-4607-804f-2e26824b7d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e1:6e:1c:25:9a:18:de:de:c8:07:5f:5b:a2:
                    f7:26:89:3b:41:72:d5:e3:d1:89:94:8e:11:ac:a0:
                    55:57:8b:bc:4a:c8:ba:c6:92:af:02:15:c5:ef:ec:
                    d8:ac:55:dc:5e:74:a9:2c:77:ac:0f:9a:32:ca:cc:
                    9c:a8:16:9c:20:50:e8:70:38:7b:83:62:b7:68:63:
                    3f:f4:3b:4d:e0:14:84:f4:8e:5b:ab:ad:ef:47:77:
                    33:ba:89:ee:c2:2c:2f:e6:65:96:53:62:f7:f1:f9:
                    bc:d2:b9:85:24:11:41:46:82:20:5e:1e:61:c9:8e:
                    22:e5:5c:8e:ef:85:e1:4c:d7:8c:ef:57:f2:50:4d:
                    8b:c9:98:ed:36:5e:23:28:5e:1a:d5:cf:30:b5:2f:
                    f8:de:55:22:3b:70:5f:84:74:ae:97:b2:9d:d7:f8:
                    1f:57:17:4e:32:b8:3c:df:d1:eb:8d:fb:ea:bb:83:
                    80:dd:fd:41:c7:74:c3:29:f4:59:1f:79:8e:f3:5b:
                    ea:95:89:af:82:2e:8f:23:4c:a9:f2:e8:ab:c6:05:
                    05:53:1c:3b:12:ab:18:60:01:25:b5:f7:2a:81:b1:
                    91:d5:55:d8:ca:47:85:1a:2b:6f:23:8f:fe:91:39:
                    ad:2e:5b:cd:38:0d:e9:31:0f:c2:69:95:7c:5d:fd:
                    7b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:84:8B:F9:CA:14:7F:EE:DF:5D:5D:8C:4C:71:02:DE:01:4F:46:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/6cb398d4-f1f0-3c6f-8d9f-a956d91a3f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/dc969dfb-52db-45b6-9244-62c3f7ddf514.crl

            X509v3 Authority Key Identifier:
                keyid:CA:DC:79:A9:69:34:E9:AF:17:2E:50:66:00:0A:A1:30:0D:EC:61:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:f0:b3:ee:eb:2c:0b:e4:50:4a:2a:03:2d:65:60:9f:fd:a6:
         02:dd:c8:f3:ec:41:aa:cc:04:e9:08:2e:a9:49:c3:0f:f4:fd:
         17:4c:94:27:28:16:3d:eb:06:08:92:b9:4f:6a:32:16:48:1f:
         e1:e6:b6:b3:c9:b7:a8:61:9f:ea:ae:ee:f7:83:b3:2b:78:c3:
         e1:fd:c8:1e:99:9e:2a:ad:cf:21:31:c8:54:7d:63:13:a6:97:
         4a:d6:16:6a:ad:21:8b:f6:29:fe:51:f0:23:e3:ef:7c:08:24:
         3c:2c:e7:91:02:50:ad:86:42:75:1c:44:de:f4:08:0b:21:cc:
         16:e2:d3:f4:82:d1:a1:07:e8:ad:33:3b:57:94:56:1a:ed:af:
         eb:99:66:bb:bf:0c:3e:c5:8d:65:81:0f:02:ca:96:b6:8c:d9:
         8e:78:07:c6:f5:fa:08:bb:6f:47:76:4c:d5:8e:7b:da:82:ad:
         dc:76:b9:58:55:9e:8b:03:ff:ad:1c:4b:5b:c4:dd:a4:f5:c9:
         01:be:7b:92:7e:d3:da:00:2d:73:de:8a:a4:dd:15:bb:65:ae:
         e5:c2:65:df:cf:69:f7:0f:5d:16:1b:92:58:bc:0b:dd:5b:1e:
         26:78:78:c5:a5:8f:37:e5:fb:88:67:fb:59:aa:9e:7c:d8:75:
         c1:33:95:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----