Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/0fda9e52-a662-301e-b479-9326d235fcd3.roa
File:                     0fda9e52-a662-301e-b479-9326d235fcd3.roa (raw, json)
Hash identifier:          kY8n0Et/8uaEMT2LT5nJVTNRzrYNBKp81Eypljzp1jI=
Subject key identifier:   F5:30:66:C3:1C:A2:D8:82:0F:48:25:28:39:3F:1F:FA:56:29:D0:C0
Certificate issuer:       /CN=7e2fdf07-a7cd-43db-86a0-386dddefb544
Certificate serial:       010D0C9F4328584218E205D9F8EB213338FF8200
Authority key identifier: 4E:36:07:5A:5E:C0:8D:A5:79:75:92:46:29:00:87:29:2A:46:86:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/0fda9e52-a662-301e-b479-9326d235fcd3.roa
Signing time:             Sat 03 Jun 2023 13:20:04 +0000
ROA not before:           Sat 03 Jun 2023 13:20:04 +0000
ROA not after:            Fri 01 Sep 2023 13:20:04 +0000
asID:                     399970
IP address blocks:        2602:fc3b:800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:18:e2:05:d9:f8:eb:21:33:38:ff:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2fdf07-a7cd-43db-86a0-386dddefb544
        Validity
            Not Before: Jun  3 13:20:04 2023 GMT
            Not After : Sep  1 13:20:04 2023 GMT
        Subject: CN=807561ec-46fa-4a44-984e-f54c47789ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5c:aa:55:17:85:2f:e7:8b:8c:0b:86:1c:b8:
                    86:1f:23:b4:c8:6d:5c:ed:df:a7:3e:f7:15:09:8f:
                    71:f3:0a:3b:43:5a:86:02:19:de:ee:19:51:39:a2:
                    b3:c7:af:4e:e3:83:aa:0c:dc:57:fa:01:7d:5c:a6:
                    bd:1c:b2:7c:c3:fd:3b:7b:65:df:26:1b:f2:97:bd:
                    c1:12:61:58:6c:6c:55:fc:2a:3c:34:1e:8e:bb:ed:
                    f1:43:cd:89:58:11:c4:19:05:51:e9:af:3b:31:7f:
                    90:ca:e7:b2:e7:1c:04:d4:63:0f:48:07:06:ac:88:
                    f9:d8:b5:a0:e1:c9:9d:ab:51:ae:b5:47:bd:88:c5:
                    ac:41:45:17:bd:2b:49:80:8a:1e:ca:d9:4c:2c:79:
                    ef:c7:a9:77:89:23:15:27:c3:31:70:92:eb:de:55:
                    25:08:e1:1f:77:0d:d6:55:88:d2:5c:f5:bc:b2:b6:
                    3e:bc:c8:1d:bf:b5:2c:6b:32:90:ba:a4:9b:93:c4:
                    ab:46:20:b8:cb:f1:a9:61:e7:ef:9d:38:08:c3:70:
                    c7:66:54:da:06:aa:ec:4a:33:c1:3d:da:4e:ed:cf:
                    be:a5:b7:31:78:90:51:2c:85:3b:28:e4:a6:26:b7:
                    03:ac:aa:43:5c:e8:e1:d7:3e:b9:22:41:87:40:f1:
                    e9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:30:66:C3:1C:A2:D8:82:0F:48:25:28:39:3F:1F:FA:56:29:D0:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/0fda9e52-a662-301e-b479-9326d235fcd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/7e2fdf07-a7cd-43db-86a0-386dddefb544.crl

            X509v3 Authority Key Identifier:
                keyid:4E:36:07:5A:5E:C0:8D:A5:79:75:92:46:29:00:87:29:2A:46:86:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:8c:02:07:5d:ec:5b:45:2e:d7:ba:7c:a0:ac:6a:b7:14:dd:
         f8:15:a3:5b:d2:7c:9b:c7:1a:05:d5:4f:4c:cd:2b:91:73:85:
         3b:6a:5f:d1:f8:03:8f:d6:1f:54:83:5d:2d:61:26:94:07:44:
         42:2e:07:2f:cf:d1:60:a5:8d:65:85:ef:10:21:48:1f:03:6d:
         55:f8:e2:25:46:21:5e:71:d5:db:08:77:9f:5e:47:a7:1a:fb:
         f9:02:b4:d2:c2:f1:85:80:cd:8c:e9:e3:36:77:7f:8c:27:01:
         62:15:df:3e:0c:fc:1f:a7:b1:d1:83:9a:e1:34:27:8f:24:8a:
         56:db:d7:4b:df:de:4e:3e:ff:58:02:d1:20:a5:0a:6e:b0:51:
         33:0e:24:09:c7:de:6f:fc:15:d7:8d:78:d9:53:b4:14:47:22:
         c8:3b:f8:74:c4:82:3d:21:59:0e:5b:61:9e:d2:5a:b7:f6:e0:
         1a:54:a0:97:8f:36:68:50:54:43:2b:8c:3f:b2:8a:a6:3f:ed:
         5a:87:23:b7:ed:d0:7e:f4:6b:8a:5d:5e:cf:2e:28:34:1d:dd:
         2c:e2:b6:fb:af:e1:c0:32:3f:b5:1b:36:81:6f:5d:b1:7d:20:
         94:cc:b8:da:f2:15:3f:c5:30:05:bd:9a:08:86:b5:7d:e5:4c:
         63:54:d6:90
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEIY4gXZ+OshMzj/ggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2UyZmRmMDctYTdjZC00M2RiLTg2YTAtMzg2ZGRkZWZi
NTQ0MB4XDTIzMDYwMzEzMjAwNFoXDTIzMDkwMTEzMjAwNFowLzEtMCsGA1UEAxMk
ODA3NTYxZWMtNDZmYS00YTQ0LTk4NGUtZjU0YzQ3Nzg5Y2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71yqVReFL+eLjAuGHLiGHyO0yG1c7d+nPvcV
CY9x8wo7Q1qGAhne7hlROaKzx69O44OqDNxX+gF9XKa9HLJ8w/07e2XfJhvyl73B
EmFYbGxV/Co8NB6Ou+3xQ82JWBHEGQVR6a87MX+Qyuey5xwE1GMPSAcGrIj52LWg
4cmdq1GutUe9iMWsQUUXvStJgIoeytlMLHnvx6l3iSMVJ8MxcJLr3lUlCOEfdw3W
VYjSXPW8srY+vMgdv7UsazKQuqSbk8SrRiC4y/GpYefvnTgIw3DHZlTaBqrsSjPB
PdpO7c++pbcxeJBRLIU7KOSmJrcDrKpDXOjh1z65IkGHQPHpcwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPUwZsMcotiCD0glKDk/H/pWKdDAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83ZTJm
ZGYwNy1hN2NkLTQzZGItODZhMC0zODZkZGRlZmI1NDQvMGZkYTllNTItYTY2Mi0z
MDFlLWI0NzktOTMyNmQyMzVmY2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvN2UyZmRmMDctYTdjZC00M2RiLTg2
YTAtMzg2ZGRkZWZiNTQ0LzdlMmZkZjA3LWE3Y2QtNDNkYi04NmEwLTM4NmRkZGVm
YjU0NC5jcmwwHwYDVR0jBBgwFoAUTjYHWl7AjaV5dZJGKQCHKSpGhlIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83ZTJmZGYwNy1hN2NkLTQzZGItODZhMC0zODZk
ZGRlZmI1NDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA6MAgdd7FtFLte6fKCsarcU3fgVo1vSfJvHGgXVT0zNK5FzhTtq
X9H4A4/WH1SDXS1hJpQHREIuBy/P0WCljWWF7xAhSB8DbVX44iVGIV5x1dsId59e
R6ca+/kCtNLC8YWAzYzp4zZ3f4wnAWIV3z4M/B+nsdGDmuE0J48kilbb10vf3k4+
/1gC0SClCm6wUTMOJAnH3m/8FdeNeNlTtBRHIsg7+HTEgj0hWQ5bYZ7SWrf24BpU
oJePNmhQVEMrjD+yiqY/7VqHI7ft0H70a4pdXs8uKDQd3Szitvuv4cAyP7UbNoFv
XbF9IJTMuNryFT/FMAW9mgiGtX3lTGNU1pA=
-----END CERTIFICATE-----