Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/2cbe26f9-93a2-3c4b-b587-c7c1e58750b4.roa
File:                     2cbe26f9-93a2-3c4b-b587-c7c1e58750b4.roa (raw, json)
Hash identifier:          LCa3XJfe7e/er+zfI/HSdBLq7SlRqlCwpf7CEPvOOBg=
Subject key identifier:   08:01:D1:26:CC:6E:E1:29:F1:20:46:C0:17:3F:7D:E2:CC:9C:12:09
Certificate issuer:       /CN=18ccca26-f6c3-490d-aea1-56ccca162855
Certificate serial:       010D0C9F4328583C882D5752324F36E104FFA500
Authority key identifier: F7:AF:BB:DE:1B:20:72:2F:96:C0:4F:B3:92:FD:F4:88:C6:3E:EA:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/2cbe26f9-93a2-3c4b-b587-c7c1e58750b4.roa
Signing time:             Mon 13 Sep 2021 04:00:00 +0000
ROA not before:           Mon 13 Sep 2021 04:00:00 +0000
ROA not after:            Sat 13 Apr 2024 04:00:00 +0000
asID:                     7719
IP address blocks:        2602:fc23::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:88:2d:57:52:32:4f:36:e1:04:ff:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ccca26-f6c3-490d-aea1-56ccca162855
        Validity
            Not Before: Sep 13 04:00:00 2021 GMT
            Not After : Apr 13 04:00:00 2024 GMT
        Subject: CN=96e64f93-e479-4c09-94f6-bed9de93e59b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:29:e1:70:0b:fa:a6:8c:9b:20:8b:17:fb:04:
                    ae:6c:94:18:6f:eb:11:45:19:00:a7:29:bb:11:8b:
                    9a:4b:f1:17:95:3a:35:6d:7a:a2:cc:88:38:4d:7b:
                    3c:fe:51:1c:b5:5c:c9:11:58:01:ca:70:7a:45:2a:
                    67:26:bd:89:c6:a1:83:e9:65:5e:b2:99:3c:3b:02:
                    89:4f:38:df:ef:4b:c6:04:98:e2:b2:4e:8a:84:cb:
                    98:15:3a:b6:5f:f7:6d:b4:e2:b5:6b:f7:af:8c:17:
                    e5:2b:09:c0:30:a3:1a:20:1c:98:c8:cc:aa:7e:91:
                    68:5b:3d:bb:d9:bb:ff:47:ff:5d:69:b4:7f:62:cd:
                    1d:a1:25:dd:4d:a6:ff:94:e4:c9:bd:31:11:80:98:
                    ab:e3:c6:72:41:26:19:e2:8e:40:83:ff:bc:eb:54:
                    d8:08:5b:36:0a:be:cc:7f:f2:ac:b1:0f:cd:b1:7d:
                    73:e3:47:c9:60:76:88:53:ef:cf:0b:df:15:d0:ef:
                    53:12:ba:4a:3b:34:f0:9e:c1:5a:99:bf:7e:34:ae:
                    6b:87:9e:fe:12:5b:14:67:e9:f2:c4:00:f6:02:d3:
                    43:29:e2:15:c9:d3:30:8a:99:b3:c5:02:ba:ce:13:
                    e4:fd:95:66:76:f4:cd:e7:a7:93:41:37:f5:9b:a7:
                    2c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:01:D1:26:CC:6E:E1:29:F1:20:46:C0:17:3F:7D:E2:CC:9C:12:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/2cbe26f9-93a2-3c4b-b587-c7c1e58750b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/18ccca26-f6c3-490d-aea1-56ccca162855.crl

            X509v3 Authority Key Identifier:
                keyid:F7:AF:BB:DE:1B:20:72:2F:96:C0:4F:B3:92:FD:F4:88:C6:3E:EA:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:47:95:92:01:7f:3e:28:4f:ec:79:98:d5:a1:4f:c7:d4:8e:
         85:c4:60:42:0e:d9:d7:6f:a7:44:6c:d0:72:66:a1:bb:65:11:
         02:36:ae:23:a3:52:b6:c3:d6:d2:25:eb:e0:53:bb:af:a5:93:
         45:1d:48:8a:30:9d:5b:db:f5:cd:7f:a5:e3:3d:ac:8a:5c:b3:
         59:f5:e4:17:19:45:fb:24:76:7a:ff:9c:66:ab:8e:60:57:68:
         3b:30:89:7b:e0:6a:18:60:f5:55:3d:3b:54:a5:12:33:57:f4:
         07:7c:e0:e9:05:7d:52:66:df:45:d4:80:3f:47:13:53:ac:f0:
         17:6e:63:48:67:16:45:66:c6:25:a4:8d:ca:bf:54:e0:c0:74:
         1b:02:66:19:2c:51:9a:99:84:d9:6f:5a:95:71:48:52:99:25:
         a5:af:fa:57:af:3c:40:12:da:5b:aa:61:39:98:e8:78:80:d0:
         4e:b8:2e:da:65:c5:2a:31:86:a6:df:9f:ca:5c:d8:7c:14:23:
         3d:5d:e2:47:10:e0:04:1d:a5:38:78:e0:b3:bf:db:20:b7:11:
         cf:74:6a:61:be:2c:2f:e7:44:25:6c:e7:f9:15:f2:a7:61:bb:
         01:c0:08:53:a7:d9:cb:6b:c8:3d:55:b5:54:eb:73:ec:ce:93:
         df:b2:67:af
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWDyILVdSMk824QT/pQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMThjY2NhMjYtZjZjMy00OTBkLWFlYTEtNTZjY2NhMTYy
ODU1MB4XDTIxMDkxMzA0MDAwMFoXDTI0MDQxMzA0MDAwMFowLzEtMCsGA1UEAxMk
OTZlNjRmOTMtZTQ3OS00YzA5LTk0ZjYtYmVkOWRlOTNlNTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlinhcAv6poybIIsX+wSubJQYb+sRRRkApym7
EYuaS/EXlTo1bXqizIg4TXs8/lEctVzJEVgBynB6RSpnJr2JxqGD6WVespk8OwKJ
Tzjf70vGBJjisk6KhMuYFTq2X/dttOK1a/evjBflKwnAMKMaIByYyMyqfpFoWz27
2bv/R/9dabR/Ys0doSXdTab/lOTJvTERgJir48ZyQSYZ4o5Ag/+861TYCFs2Cr7M
f/KssQ/NsX1z40fJYHaIU+/PC98V0O9TErpKOzTwnsFamb9+NK5rh57+ElsUZ+ny
xAD2AtNDKeIVydMwipmzxQK6zhPk/ZVmdvTN56eTQTf1m6cswQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAgB0SbMbuEp8SBGwBc/feLMnBIJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xOGNj
Y2EyNi1mNmMzLTQ5MGQtYWVhMS01NmNjY2ExNjI4NTUvMmNiZTI2ZjktOTNhMi0z
YzRiLWI1ODctYzdjMWU1ODc1MGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMThjY2NhMjYtZjZjMy00OTBkLWFl
YTEtNTZjY2NhMTYyODU1LzE4Y2NjYTI2LWY2YzMtNDkwZC1hZWExLTU2Y2NjYTE2
Mjg1NS5jcmwwHwYDVR0jBBgwFoAU96+73hsgci+WwE+zkv30iMY+6l0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xOGNjY2EyNi1mNmMzLTQ5MGQtYWVhMS01NmNj
Y2ExNjI4NTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8IwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcEeVkgF/PihP7HmY1aFPx9SOhcRgQg7Z12+nRGzQcmahu2URAjau
I6NStsPW0iXr4FO7r6WTRR1IijCdW9v1zX+l4z2silyzWfXkFxlF+yR2ev+cZquO
YFdoOzCJe+BqGGD1VT07VKUSM1f0B3zg6QV9UmbfRdSAP0cTU6zwF25jSGcWRWbG
JaSNyr9U4MB0GwJmGSxRmpmE2W9alXFIUpklpa/6V688QBLaW6phOZjoeIDQTrgu
2mXFKjGGpt+fylzYfBQjPV3iRxDgBB2lOHjgs7/bILcRz3RqYb4sL+dEJWzn+RXy
p2G7AcAIU6fZy2vIPVW1VOtz7M6T37Jnrw==
-----END CERTIFICATE-----