Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/3937206f-e3c5-3a85-b693-c2d846236b51.roa
File:                     3937206f-e3c5-3a85-b693-c2d846236b51.roa (raw, json)
Hash identifier:          dr6ESreiYRuEHx6N9XXrTGVkffM0Og7Xy8u8xbnCFT0=
Subject key identifier:   09:5F:F6:5D:DA:E8:4A:EC:F8:1B:28:7C:41:D2:BF:4A:24:A0:EF:29
Certificate issuer:       /CN=64f91b98-4962-41cc-b646-3985b83da365
Certificate serial:       010D0C9F4328584278C0872ABE27F3BC4CA99900
Authority key identifier: 4A:EE:88:BF:5D:7C:6C:25:65:71:9E:AB:62:1C:AC:A1:84:26:07:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/3937206f-e3c5-3a85-b693-c2d846236b51.roa
Signing time:             Fri 07 Jul 2023 21:30:11 +0000
ROA not before:           Fri 07 Jul 2023 21:30:11 +0000
ROA not after:            Thu 05 Oct 2023 21:30:11 +0000
asID:                     399970
IP address blocks:        2602:fc3b:fff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:78:c0:87:2a:be:27:f3:bc:4c:a9:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f91b98-4962-41cc-b646-3985b83da365
        Validity
            Not Before: Jul  7 21:30:11 2023 GMT
            Not After : Oct  5 21:30:11 2023 GMT
        Subject: CN=282fa842-3757-4dcc-861f-47c45a73056b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:8b:93:10:63:d0:8f:51:6d:17:ff:66:f1:
                    3f:1b:e4:c3:ee:4e:de:12:2a:ec:86:aa:42:a2:97:
                    72:78:c7:ad:36:16:e7:b3:72:18:1a:3e:82:2f:69:
                    aa:bc:a7:04:b7:45:7a:7c:ba:7a:76:3f:46:55:47:
                    3a:80:bb:35:ec:da:1a:e5:38:12:29:88:84:6f:11:
                    31:c1:7c:50:b6:26:bb:21:21:44:c7:97:91:79:fc:
                    25:90:45:44:50:2e:1e:88:3a:62:af:c2:26:dd:0a:
                    ff:38:c2:03:f0:1b:2b:b5:60:ef:61:bd:db:09:a5:
                    38:ab:67:49:ef:ad:29:0e:cd:7d:4b:38:c4:e2:f5:
                    da:01:19:02:6e:f3:b1:0c:a4:fd:8b:70:d0:a4:ea:
                    2a:03:28:00:21:64:60:54:39:bc:ca:e3:f1:1e:e5:
                    f0:ac:e2:d0:49:7b:4c:00:da:e2:7b:13:60:bd:62:
                    06:8e:e5:b0:a4:94:18:bb:6b:fa:99:36:e1:a2:f5:
                    93:cb:63:e3:cb:29:23:f1:ef:63:49:04:a0:b9:7b:
                    cc:50:88:f6:8a:d4:4e:d7:2b:b4:69:0e:7c:18:fe:
                    ac:7d:03:38:d1:f6:52:04:b2:7e:c2:cd:3a:4f:4f:
                    c9:ea:91:e4:2b:db:6f:56:b6:18:82:7c:ad:70:19:
                    7e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5F:F6:5D:DA:E8:4A:EC:F8:1B:28:7C:41:D2:BF:4A:24:A0:EF:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/3937206f-e3c5-3a85-b693-c2d846236b51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/64f91b98-4962-41cc-b646-3985b83da365.crl

            X509v3 Authority Key Identifier:
                keyid:4A:EE:88:BF:5D:7C:6C:25:65:71:9E:AB:62:1C:AC:A1:84:26:07:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:fff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:81:ff:f4:12:34:0c:13:f0:f1:ac:d3:50:49:0a:8a:9c:a3:
         db:65:74:2b:99:65:f3:af:58:47:92:61:c9:e2:3f:44:14:7c:
         ca:87:6e:d6:2d:71:a3:cf:b9:e6:59:6d:cb:c0:50:ef:88:01:
         bb:d0:40:e6:7e:ae:39:1b:ee:f5:d8:a3:72:24:7c:b2:65:8e:
         6d:73:3a:a0:b2:b5:c2:83:6a:8a:e8:a7:dc:08:40:0a:d3:6f:
         e3:08:39:c2:b9:d0:88:10:e7:42:e4:f5:a1:bc:ed:01:a6:65:
         a2:bb:5b:95:d6:38:00:f9:e6:ad:8d:31:f2:ae:29:30:9f:54:
         91:64:70:cb:d2:e0:33:8a:c2:cf:44:40:25:77:3d:81:a6:b7:
         14:b9:ac:a1:74:dd:68:fa:98:24:36:ff:f0:a2:a5:fc:9d:f1:
         a2:de:c2:6f:70:87:83:c1:16:8c:c6:e6:b1:21:eb:47:74:8e:
         59:50:6d:3b:68:1f:7a:02:8e:e5:da:b5:43:5e:32:55:85:b1:
         de:e2:1e:54:01:21:3c:38:17:e5:43:d8:0e:e7:e2:b8:87:7e:
         16:77:e0:df:df:01:b4:a4:8c:51:31:e6:06:f7:5e:9c:e4:7f:
         e6:c5:bf:f5:a2:c2:78:54:a7:c9:c7:a7:2c:5b:e9:77:58:87:
         2e:c8:15:08
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEJ4wIcqvifzvEypmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjRmOTFiOTgtNDk2Mi00MWNjLWI2NDYtMzk4NWI4M2Rh
MzY1MB4XDTIzMDcwNzIxMzAxMVoXDTIzMTAwNTIxMzAxMVowLzEtMCsGA1UEAxMk
MjgyZmE4NDItMzc1Ny00ZGNjLTg2MWYtNDdjNDVhNzMwNTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynuLkxBj0I9RbRf/ZvE/G+TD7k7eEirshqpC
opdyeMetNhbns3IYGj6CL2mqvKcEt0V6fLp6dj9GVUc6gLs17Noa5TgSKYiEbxEx
wXxQtia7ISFEx5eRefwlkEVEUC4eiDpir8Im3Qr/OMID8BsrtWDvYb3bCaU4q2dJ
760pDs19SzjE4vXaARkCbvOxDKT9i3DQpOoqAygAIWRgVDm8yuPxHuXwrOLQSXtM
ANriexNgvWIGjuWwpJQYu2v6mTbhovWTy2Pjyykj8e9jSQSguXvMUIj2itRO1yu0
aQ58GP6sfQM40fZSBLJ+ws06T0/J6pHkK9tvVrYYgnytcBl+qQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAlf9l3a6Ers+BsofEHSv0okoO8pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NGY5
MWI5OC00OTYyLTQxY2MtYjY0Ni0zOTg1YjgzZGEzNjUvMzkzNzIwNmYtZTNjNS0z
YTg1LWI2OTMtYzJkODQ2MjM2YjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjRmOTFiOTgtNDk2Mi00MWNjLWI2
NDYtMzk4NWI4M2RhMzY1LzY0ZjkxYjk4LTQ5NjItNDFjYy1iNjQ2LTM5ODViODNk
YTM2NS5jcmwwHwYDVR0jBBgwFoAUSu6Iv118bCVlcZ6rYhysoYQmB2AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82NGY5MWI5OC00OTYyLTQxY2MtYjY0Ni0zOTg1
YjgzZGEzNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8Ow//
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAmB//QSNAwT8PGs01BJCoqco9tldCuZZfOvWEeSYcniP0QUfMqH
btYtcaPPueZZbcvAUO+IAbvQQOZ+rjkb7vXYo3IkfLJljm1zOqCytcKDaorop9wI
QArTb+MIOcK50IgQ50Lk9aG87QGmZaK7W5XWOAD55q2NMfKuKTCfVJFkcMvS4DOK
ws9EQCV3PYGmtxS5rKF03Wj6mCQ2//Cipfyd8aLewm9wh4PBFozG5rEh60d0jllQ
bTtoH3oCjuXatUNeMlWFsd7iHlQBITw4F+VD2A7n4riHfhZ34N/fAbSkjFEx5gb3
Xpzkf+bFv/WiwnhUp8nHpyxb6XdYhy7IFQg=
-----END CERTIFICATE-----