Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/53ea319d-8a29-30e4-a9c0-8c2720af6c8e.roa
File:                     53ea319d-8a29-30e4-a9c0-8c2720af6c8e.roa (raw, json)
Hash identifier:          N+/38jZV6hSy9xx7322+Oziew4sj6NxCcLDUUfTJ3v4=
Subject key identifier:   86:22:72:C7:A5:59:89:51:13:68:7E:59:C2:4E:E9:C0:6B:AB:25:D4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583E3AEB1E3433E42F49A9949D80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/53ea319d-8a29-30e4-a9c0-8c2720af6c8e.roa
Signing time:             Sun 12 Jun 2022 12:00:00 +0000
ROA not before:           Sun 12 Jun 2022 12:00:00 +0000
ROA not after:            Mon 05 Jun 2028 04:00:00 +0000
asID:                     20115
IP address blocks:        2600:6c08:667::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:3a:eb:1e:34:33:e4:2f:49:a9:94:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 12 12:00:00 2022 GMT
            Not After : Jun  5 04:00:00 2028 GMT
        Subject: CN=2bb6011e-c534-4c52-8819-852bd6cc6ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ac:1f:8c:e0:c7:53:fa:e4:d6:b2:b5:cb:e8:
                    f3:01:71:3e:8a:82:1b:b0:14:f3:58:78:30:a4:1d:
                    8a:fd:25:33:47:64:53:69:f4:35:ba:3e:89:1b:26:
                    b1:de:01:b1:a6:a0:25:04:af:fb:6c:1a:10:09:26:
                    2a:fb:a3:3a:db:ed:e9:dc:07:62:d5:52:78:09:9a:
                    bb:ec:0c:49:80:b4:22:8f:d7:49:75:39:0d:02:d8:
                    66:bc:0e:9c:80:b7:97:13:05:24:8a:95:40:77:af:
                    21:f5:bc:b0:09:28:81:e9:38:93:77:71:69:9e:79:
                    f2:a4:f3:07:c8:ee:ae:23:a0:c7:2a:6d:a1:07:2a:
                    3e:b0:bb:55:f3:1b:36:ac:89:a5:23:22:6e:84:b0:
                    f8:39:52:a7:b6:22:26:d1:2e:cc:f5:3d:a7:81:94:
                    97:5f:4d:78:81:4c:15:be:62:76:41:ec:11:57:fb:
                    8d:3d:05:ef:51:6a:09:dd:f2:b7:39:ee:fa:a8:f8:
                    7a:8e:8b:50:d0:a6:3f:f6:fc:07:1f:a5:55:25:e9:
                    d1:c5:8c:e1:96:05:e6:f1:52:1b:32:de:c9:ed:e6:
                    68:f8:45:c9:f6:b7:da:ef:a8:47:97:67:e8:9f:08:
                    a2:4e:75:83:31:cd:f9:e7:44:54:e1:55:ef:7c:e2:
                    23:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:22:72:C7:A5:59:89:51:13:68:7E:59:C2:4E:E9:C0:6B:AB:25:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/53ea319d-8a29-30e4-a9c0-8c2720af6c8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c08:667::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:63:74:3c:7c:63:08:07:50:31:f6:d9:65:df:63:e8:5e:be:
         85:26:c4:26:77:ad:0e:e9:28:a5:74:61:e2:4c:7e:82:ae:75:
         37:67:13:65:37:5b:64:6d:88:6f:02:1d:31:ee:af:c0:29:81:
         01:a3:0e:d4:0c:59:fe:ef:60:a0:be:49:99:db:df:e9:c4:04:
         76:5f:08:34:c0:66:85:46:91:c0:41:e8:4c:34:d8:1e:5b:7d:
         e5:7b:ff:91:5e:b2:67:29:56:9f:a7:7a:f5:99:1a:12:08:6f:
         d7:59:cc:87:c3:73:e7:fa:a6:2e:a9:53:b6:e1:6c:66:d2:9a:
         39:d5:a5:8e:e6:9a:19:52:50:d5:97:06:dc:ba:9e:3b:32:a6:
         02:57:2c:17:77:31:e1:24:a7:1e:41:ea:c2:da:12:01:43:70:
         c0:86:b1:5e:52:e9:8f:aa:0e:1b:99:ee:36:62:f5:67:47:ca:
         0b:39:93:b7:2f:e2:f3:61:e4:ff:b0:46:a3:14:26:25:0f:dc:
         64:b8:52:7d:e8:b0:e1:bb:c0:c9:7f:26:5f:a1:94:5e:e4:91:
         86:18:99:1e:c9:57:40:b5:b3:e0:e8:0e:c7:3d:93:91:05:8f:
         46:32:a8:be:e9:cd:9e:be:85:86:0d:14:ff:c6:94:bc:89:d3:
         63:e0:7a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----