Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/40679a53-fc0a-3d3c-a74a-e7356b5951cc.roa
File:                     40679a53-fc0a-3d3c-a74a-e7356b5951cc.roa (raw, json)
Hash identifier:          G+VGcvU2cyDW2kRQaqqZ/RcYMZb2cp3Qlj1Tnba9qes=
Subject key identifier:   22:B4:8C:18:6F:F4:B9:85:30:E1:4A:71:28:56:12:83:16:62:2B:2F
Certificate issuer:       /CN=71d0ad91-658e-4240-8d73-8592460b61a7
Certificate serial:       010D0C9F4328583FB919D434B84E0F133D7E6E80
Authority key identifier: 2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/40679a53-fc0a-3d3c-a74a-e7356b5951cc.roa
Signing time:             Fri 28 Oct 2022 18:06:42 +0000
ROA not before:           Fri 28 Oct 2022 18:06:42 +0000
ROA not after:            Thu 30 Jan 2025 05:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:b00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b9:19:d4:34:b8:4e:0f:13:3d:7e:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d0ad91-658e-4240-8d73-8592460b61a7
        Validity
            Not Before: Oct 28 18:06:42 2022 GMT
            Not After : Jan 30 05:00:00 2025 GMT
        Subject: CN=8f87e855-78e2-43f9-86db-b4c9b8b64c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:86:64:b3:91:4c:f6:ee:6b:6a:8f:69:34:7c:
                    b6:f4:e2:ba:54:c5:53:15:54:d6:36:80:fb:89:77:
                    29:11:2f:ce:b9:ea:a2:af:02:aa:89:ad:12:1c:be:
                    c2:30:44:01:87:fa:55:13:32:66:95:29:f8:75:b6:
                    22:04:26:77:18:83:96:59:15:bb:24:30:8c:c0:57:
                    08:c4:de:83:91:d9:49:8a:df:19:1d:6f:4d:9d:c3:
                    37:16:80:d1:74:d2:e2:c4:1b:28:fd:c4:58:f3:0d:
                    c0:7c:4e:26:8e:9d:f4:5b:7c:44:1b:cc:ab:bc:e1:
                    54:40:3b:70:af:af:b9:b7:2e:d8:8f:76:d9:e3:43:
                    fc:63:4f:10:95:14:c5:41:d5:86:bb:f1:e8:cd:b4:
                    7e:ad:7e:20:68:b3:87:58:d1:cf:87:bc:6c:14:74:
                    76:c6:f8:6a:90:28:00:2e:81:9e:78:b8:1a:6b:f8:
                    d2:39:3e:a7:d2:5b:70:28:bd:92:d4:08:77:3f:2b:
                    15:76:a3:c4:26:50:19:92:3b:76:8c:df:4d:3c:42:
                    e7:83:8a:a4:f9:c6:1f:03:7a:7a:6f:4b:0f:44:91:
                    5e:a8:80:81:22:bd:87:e6:b4:59:34:10:f6:eb:87:
                    0f:94:6d:d5:6b:28:c4:70:8b:99:08:25:ff:59:2a:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B4:8C:18:6F:F4:B9:85:30:E1:4A:71:28:56:12:83:16:62:2B:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/40679a53-fc0a-3d3c-a74a-e7356b5951cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/71d0ad91-658e-4240-8d73-8592460b61a7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:b00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a5:af:5d:7f:d3:26:df:e9:79:74:18:1e:96:b2:c0:bc:ff:
         a0:38:8f:73:54:63:81:59:39:2a:d9:09:0e:86:eb:6c:af:4d:
         4b:e0:fe:db:51:fc:60:d7:50:1c:5a:1e:a4:07:3a:5b:ba:54:
         ae:e8:6f:e0:a1:ec:90:62:95:d9:f0:7e:8a:ef:5d:0f:a2:d0:
         0f:62:08:d6:3e:89:c6:98:29:80:ff:96:29:ce:16:1f:51:40:
         15:b2:bc:79:5b:8e:d2:12:0c:c3:7a:a4:a3:50:34:48:4e:af:
         f5:df:e1:c5:01:78:87:a8:31:a5:92:08:c9:d2:3e:6c:a2:eb:
         ae:43:02:73:5d:db:b0:35:0a:41:8a:0f:a3:29:9e:21:83:64:
         e9:8a:2f:fe:be:13:72:13:a5:1f:32:41:3f:9e:31:9c:16:cc:
         55:53:3c:00:f9:a3:e8:80:f1:f0:ec:a2:e5:6e:55:ed:84:4b:
         7f:fb:a3:aa:ff:7d:4f:6d:64:cd:a7:08:6f:f6:63:21:6a:90:
         4f:6a:b4:72:58:90:a1:33:20:f0:31:d4:cc:13:bb:a1:33:26:
         64:ad:62:9d:a8:76:77:b0:43:6f:d6:58:4b:b6:43:5d:41:cf:
         b7:85:a2:a1:c0:c7:30:05:36:a6:40:5b:fa:a3:2e:f5:4e:4d:
         a0:84:4a:2a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD+5GdQ0uE4PEz1+boAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFkMGFkOTEtNjU4ZS00MjQwLThkNzMtODU5MjQ2MGI2
MWE3MB4XDTIyMTAyODE4MDY0MloXDTI1MDEzMDA1MDAwMFowLzEtMCsGA1UEAxMk
OGY4N2U4NTUtNzhlMi00M2Y5LTg2ZGItYjRjOWI4YjY0YzNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04Zks5FM9u5rao9pNHy29OK6VMVTFVTWNoD7
iXcpES/OueqirwKqia0SHL7CMEQBh/pVEzJmlSn4dbYiBCZ3GIOWWRW7JDCMwFcI
xN6DkdlJit8ZHW9NncM3FoDRdNLixBso/cRY8w3AfE4mjp30W3xEG8yrvOFUQDtw
r6+5ty7Yj3bZ40P8Y08QlRTFQdWGu/HozbR+rX4gaLOHWNHPh7xsFHR2xvhqkCgA
LoGeeLgaa/jSOT6n0ltwKL2S1Ah3PysVdqPEJlAZkjt2jN9NPELng4qk+cYfA3p6
b0sPRJFeqICBIr2H5rRZNBD264cPlG3VayjEcIuZCCX/WSp/wwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCK0jBhv9LmFMOFKcShWEoMWYisvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83MWQw
YWQ5MS02NThlLTQyNDAtOGQ3My04NTkyNDYwYjYxYTcvNDA2NzlhNTMtZmMwYS0z
ZDNjLWE3NGEtZTczNTZiNTk1MWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzFkMGFkOTEtNjU4ZS00MjQwLThk
NzMtODU5MjQ2MGI2MWE3LzcxZDBhZDkxLTY1OGUtNDI0MC04ZDczLTg1OTI0NjBi
NjFhNy5jcmwwHwYDVR0jBBgwFoAULTUJuofoVGbcea2HMHjPIBILvxUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83MWQwYWQ5MS02NThlLTQyNDAtOGQ3My04NTky
NDYwYjYxYTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwsA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABmlr11/0ybf6Xl0GB6WssC8/6A4j3NUY4FZOSrZCQ6G62yvTUvg
/ttR/GDXUBxaHqQHOlu6VK7ob+Ch7JBildnwforvXQ+i0A9iCNY+icaYKYD/linO
Fh9RQBWyvHlbjtISDMN6pKNQNEhOr/Xf4cUBeIeoMaWSCMnSPmyi665DAnNd27A1
CkGKD6MpniGDZOmKL/6+E3ITpR8yQT+eMZwWzFVTPAD5o+iA8fDsouVuVe2ES3/7
o6r/fU9tZM2nCG/2YyFqkE9qtHJYkKEzIPAx1MwTu6EzJmStYp2odnewQ2/WWEu2
Q11Bz7eFoqHAxzAFNqZAW/qjLvVOTaCESio=
-----END CERTIFICATE-----