Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fb74dea0-e755-3d85-8983-2e04ab4e2976.roa
File:                     fb74dea0-e755-3d85-8983-2e04ab4e2976.roa (raw, json)
Hash identifier:          8diewhiE4l1616oYvf9Y6JOe43zgNBvWA7pEkpmKf7w=
Subject key identifier:   CB:38:5E:60:37:BB:15:EC:16:58:D4:29:D6:F0:08:00:05:7C:4B:A4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858384D0CA8894F7BFAD8B7110480
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fb74dea0-e755-3d85-8983-2e04ab4e2976.roa
Signing time:             Wed 16 Dec 2020 05:00:00 +0000
ROA not before:           Wed 16 Dec 2020 05:00:00 +0000
ROA not after:            Wed 09 Dec 2026 05:00:00 +0000
asID:                     20115
IP address blocks:        47.6.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4d:0c:a8:89:4f:7b:fa:d8:b7:11:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Dec 16 05:00:00 2020 GMT
            Not After : Dec  9 05:00:00 2026 GMT
        Subject: CN=6a1c94f5-5c6f-46b8-94ad-872eb2f664de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:40:7f:bf:f5:c8:9c:4e:eb:70:ad:65:01:
                    77:7b:4e:1a:64:ec:b5:20:ea:60:dc:d6:ba:8c:53:
                    cf:cb:71:49:73:57:d5:da:68:57:e6:c4:fb:d9:f9:
                    f6:85:35:4e:c4:e6:38:96:3e:a0:12:73:c6:de:50:
                    25:b6:8f:41:3e:f8:3f:ef:81:e1:b1:db:38:7f:0b:
                    57:19:7a:7b:5c:54:8f:d2:33:09:89:d5:f9:9d:5b:
                    ec:38:48:20:f2:6a:27:34:53:6d:01:30:9d:21:fb:
                    55:ee:71:b2:40:c7:0c:e2:7a:b5:c0:da:83:20:5f:
                    57:b7:4e:d5:f6:6f:e2:a2:cf:8c:3b:79:ee:68:e0:
                    c4:3f:d5:4f:0c:f1:4f:fc:b8:84:21:4d:c5:ec:02:
                    06:e0:df:3b:16:6d:12:58:07:33:78:41:5e:94:81:
                    32:2a:a1:e5:85:24:ff:c5:cf:9b:e9:39:79:0d:58:
                    10:5e:c6:38:00:fb:f0:0d:ab:cc:66:52:46:8e:12:
                    a9:68:75:e6:7e:f4:12:ec:56:d0:84:25:f1:a7:3e:
                    c7:08:2b:5b:99:de:de:4a:a7:94:11:68:3c:65:ba:
                    0b:cd:2e:a9:b7:45:e2:e9:6b:ee:0a:c3:24:47:63:
                    d1:e8:00:9f:ea:c1:5c:b0:9a:d4:41:95:71:9b:b2:
                    19:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:38:5E:60:37:BB:15:EC:16:58:D4:29:D6:F0:08:00:05:7C:4B:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fb74dea0-e755-3d85-8983-2e04ab4e2976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.6.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e4:a6:b3:e4:23:f7:2a:ad:c5:d4:e7:cc:f0:c4:74:4a:c5:
         19:53:fe:b9:e2:da:f8:11:74:e3:a8:e1:15:13:3f:7f:f9:f4:
         89:6d:5d:32:59:63:08:53:df:f6:92:c2:8e:41:2a:3d:a5:b6:
         7f:66:9e:2a:18:57:8c:fa:1f:b4:d4:07:c7:95:ed:7f:f8:d9:
         4a:10:a4:6d:3e:af:1a:d1:c2:f4:9d:55:58:b1:28:3a:96:a6:
         24:f5:e7:19:f0:3b:b7:e5:43:8b:57:78:cc:32:03:4c:ce:b3:
         4d:d5:7a:12:f7:c3:2b:91:33:d6:6b:d9:78:34:8a:43:bc:25:
         ac:b8:7f:c8:29:16:08:b0:d4:4e:3e:c2:4c:46:84:c3:f7:e8:
         59:a0:60:93:12:20:67:e8:2b:4e:a2:05:10:e4:b9:33:66:42:
         9c:cf:bf:ca:28:2b:26:55:0e:c2:5c:b0:d3:a3:37:77:e9:16:
         4b:a5:13:ab:55:86:5d:36:fa:37:01:82:52:1a:96:f7:2e:a9:
         c3:fe:dd:8a:d1:29:71:4c:e1:cc:0d:bc:d6:3e:e6:ff:62:d3:
         12:ad:10:c9:a9:e2:45:3c:80:fc:64:7a:1c:06:c8:7c:a7:6f:
         7e:1f:ca:cb:c7:95:0d:08:59:ae:a3:28:cb:a8:97:3e:79:56:
         aa:78:1d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----