Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/5ab62adf-588c-3835-b6b8-d949a57ddc25.roa
File:                     5ab62adf-588c-3835-b6b8-d949a57ddc25.roa (raw, json)
Hash identifier:          TP9jdWddR0MCKEDEu0NnfDx5MVewO7WM1hMTuIDPQ5g=
Subject key identifier:   57:9B:39:D8:D3:54:64:CD:59:EB:91:AD:E2:15:39:6F:07:90:05:25
Certificate issuer:       /CN=fdfe6ca2-0d77-412e-903f-e021fa67bf97
Certificate serial:       010D0C9F43285841E471992782E1F5613E8E4400
Authority key identifier: 5C:C8:57:6C:36:D0:68:2D:19:19:71:F8:DB:D8:38:83:0E:DA:16:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/5ab62adf-588c-3835-b6b8-d949a57ddc25.roa
Signing time:             Mon 15 May 2023 18:31:13 +0000
ROA not before:           Mon 15 May 2023 18:31:13 +0000
ROA not after:            Fri 28 Jul 2023 03:59:31 +0000
asID:                     50755
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:71:99:27:82:e1:f5:61:3e:8e:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdfe6ca2-0d77-412e-903f-e021fa67bf97
        Validity
            Not Before: May 15 18:31:13 2023 GMT
            Not After : Jul 28 03:59:31 2023 GMT
        Subject: CN=376418b6-49e2-461d-9a32-0edc16601772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:55:7f:87:29:02:d5:43:7d:03:c8:91:9d:b9:
                    aa:d3:f6:9a:db:db:1b:28:3d:a4:2f:c1:22:a9:a2:
                    0c:15:b7:02:f3:43:ac:a7:4d:bd:5e:28:b7:a5:9b:
                    a5:21:3d:80:1d:1b:21:99:57:6f:f9:7b:9f:01:98:
                    c0:b0:bc:ef:2e:fd:eb:a2:92:4c:a6:64:32:f6:05:
                    cb:4c:43:5d:cc:79:f8:90:c2:6f:9e:09:c5:f8:e2:
                    e8:4b:69:a6:0d:68:fe:30:44:3d:b5:32:8a:b5:26:
                    5a:e8:a9:ea:93:6e:6c:a2:c9:83:9f:a0:0f:48:05:
                    0b:c4:fb:18:bf:21:9d:38:61:66:78:38:7c:2a:9f:
                    c3:17:d0:fd:49:1f:4d:c6:3f:5d:cc:02:8b:51:db:
                    9f:19:7b:83:bc:f1:f1:b1:66:93:d7:58:03:f0:1d:
                    e5:f7:5e:3e:18:8a:66:64:52:25:fc:86:5f:6c:dd:
                    a9:a0:60:33:fc:93:45:f7:ad:12:83:c8:48:85:f1:
                    a7:60:eb:aa:b7:25:41:0e:dd:67:ac:e3:ba:d9:cd:
                    ed:49:d9:fc:41:7c:a2:bb:5c:f6:3a:1c:57:08:91:
                    18:1c:c1:ba:24:d7:a1:c1:f2:03:cc:7b:48:66:46:
                    c2:7c:e3:e1:cf:d3:25:a2:26:44:e5:31:c7:3b:f8:
                    7b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9B:39:D8:D3:54:64:CD:59:EB:91:AD:E2:15:39:6F:07:90:05:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/5ab62adf-588c-3835-b6b8-d949a57ddc25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/fdfe6ca2-0d77-412e-903f-e021fa67bf97.crl

            X509v3 Authority Key Identifier:
                keyid:5C:C8:57:6C:36:D0:68:2D:19:19:71:F8:DB:D8:38:83:0E:DA:16:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:29:1e:cc:df:f1:ec:b1:45:62:dc:be:57:8f:6f:38:b5:0f:
         7b:0d:85:6e:1c:ec:75:11:bc:1b:e4:79:ce:65:86:94:11:bf:
         7b:96:c4:f6:86:cb:a5:e0:ca:41:e2:01:a6:f2:3f:ab:a7:cc:
         58:ab:ab:2d:91:d1:cf:b5:fc:b7:1d:3d:78:2e:96:47:a9:d0:
         58:50:d8:34:4c:dc:5f:bc:3e:4d:8f:d5:3a:1d:a1:f8:e8:73:
         96:3e:14:58:04:0c:0b:b6:c5:fe:cb:8a:af:77:f6:33:91:70:
         92:fe:fd:8c:f5:a6:c0:8c:d9:47:9d:dd:8b:7b:fa:b8:3d:0a:
         a9:ae:50:f0:21:b0:59:8e:64:b3:05:14:f8:e1:bd:9e:91:44:
         bd:fa:cf:fe:ba:91:37:d6:c3:d5:4f:38:0e:a2:ba:78:9a:f2:
         23:50:a2:2c:2d:dd:22:c2:14:eb:30:e6:4e:d5:c8:81:3a:fd:
         88:12:66:75:6f:a1:5d:6c:ad:30:24:6b:67:43:9b:69:08:49:
         56:e7:cb:65:4e:3c:ed:4b:96:6a:4a:ac:aa:01:44:55:68:6e:
         23:b7:70:10:44:f7:84:4c:40:50:69:90:36:21:86:0b:3e:38:
         58:8d:38:6b:7c:bd:89:1c:fe:22:3a:f9:e6:a0:00:30:91:96:
         b6:d7:4a:86
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEHkcZknguH1YT6ORAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRmZTZjYTItMGQ3Ny00MTJlLTkwM2YtZTAyMWZhNjdi
Zjk3MB4XDTIzMDUxNTE4MzExM1oXDTIzMDcyODAzNTkzMVowLzEtMCsGA1UEAxMk
Mzc2NDE4YjYtNDllMi00NjFkLTlhMzItMGVkYzE2NjAxNzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFV/hykC1UN9A8iRnbmq0/aa29sbKD2kL8Ei
qaIMFbcC80Osp029Xii3pZulIT2AHRshmVdv+XufAZjAsLzvLv3ropJMpmQy9gXL
TENdzHn4kMJvngnF+OLoS2mmDWj+MEQ9tTKKtSZa6Knqk25sosmDn6APSAULxPsY
vyGdOGFmeDh8Kp/DF9D9SR9Nxj9dzAKLUdufGXuDvPHxsWaT11gD8B3l914+GIpm
ZFIl/IZfbN2poGAz/JNF960Sg8hIhfGnYOuqtyVBDt1nrOO62c3tSdn8QXyiu1z2
OhxXCJEYHMG6JNehwfIDzHtIZkbCfOPhz9MloiZE5THHO/h7hQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFebOdjTVGTNWeuRreIVOW8HkAUlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZGZl
NmNhMi0wZDc3LTQxMmUtOTAzZi1lMDIxZmE2N2JmOTcvNWFiNjJhZGYtNTg4Yy0z
ODM1LWI2YjgtZDk0OWE1N2RkYzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmRmZTZjYTItMGQ3Ny00MTJlLTkw
M2YtZTAyMWZhNjdiZjk3L2ZkZmU2Y2EyLTBkNzctNDEyZS05MDNmLWUwMjFmYTY3
YmY5Ny5jcmwwHwYDVR0jBBgwFoAUXMhXbDbQaC0ZGXH429g4gw7aFkswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mZGZlNmNhMi0wZDc3LTQxMmUtOTAzZi1lMDIx
ZmE2N2JmOTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6mwDA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFcpHszf8eyxRWLcvlePbzi1D3sNhW4c7HURvBvkec5lhpQRv3uW
xPaGy6XgykHiAabyP6unzFirqy2R0c+1/LcdPXgulkep0FhQ2DRM3F+8Pk2P1Tod
ofjoc5Y+FFgEDAu2xf7Liq939jORcJL+/Yz1psCM2Ued3Yt7+rg9CqmuUPAhsFmO
ZLMFFPjhvZ6RRL36z/66kTfWw9VPOA6iunia8iNQoiwt3SLCFOsw5k7VyIE6/YgS
ZnVvoV1srTAka2dDm2kISVbny2VOPO1LlmpKrKoBRFVobiO3cBBE94RMQFBpkDYh
hgs+OFiNOGt8vYkc/iI6+eagADCRlrbXSoY=
-----END CERTIFICATE-----