Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2daa05d7-4212-40cc-8395-01a754675daf/91f3fc1f-f25d-3379-be8d-666574fae90d.roa
File:                     91f3fc1f-f25d-3379-be8d-666574fae90d.roa (raw, json)
Hash identifier:          tdtHaClYv5dv5RxOFLGSlAGXa/wsHYQ5snl+DP7p7/g=
Subject key identifier:   51:B6:63:E0:7C:90:4C:DE:C9:26:F9:E3:D5:AC:8C:53:64:4F:AF:32
Certificate issuer:       /CN=2daa05d7-4212-40cc-8395-01a754675daf
Certificate serial:       010D0C9F43285844F46555B6B0BCFC82F327BC00
Authority key identifier: 4F:7D:86:6B:7E:5B:E8:BF:67:ED:EF:A5:5E:49:3F:C7:B3:69:65:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2daa05d7-4212-40cc-8395-01a754675daf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2daa05d7-4212-40cc-8395-01a754675daf/91f3fc1f-f25d-3379-be8d-666574fae90d.roa
Signing time:             Tue 20 Feb 2024 14:00:31 +0000
ROA not before:           Tue 20 Feb 2024 14:00:31 +0000
ROA not after:            Mon 20 May 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        2602:fbcc::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:65:55:b6:b0:bc:fc:82:f3:27:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2daa05d7-4212-40cc-8395-01a754675daf
        Validity
            Not Before: Feb 20 14:00:31 2024 GMT
            Not After : May 20 13:00:31 2024 GMT
        Subject: CN=e68a5b4d-80f4-4453-a67d-db7f46d2f18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ca:20:1b:1b:4b:37:97:3b:c0:39:de:df:71:
                    80:90:28:b8:d3:4e:5b:a8:07:5c:87:c5:7c:65:25:
                    50:ff:7c:06:50:e2:a1:ed:56:ea:1c:2c:e4:08:0a:
                    b3:64:f6:2c:d5:87:a3:04:17:f0:9b:26:5a:3a:d4:
                    fe:c5:94:94:f8:06:d2:57:8d:d0:66:35:25:af:2e:
                    2a:49:22:8f:34:dc:16:73:11:ae:d7:6c:39:2b:dd:
                    a9:5f:b5:03:38:80:58:bc:d5:44:76:a6:48:79:0e:
                    cf:0a:ba:83:a6:6b:88:27:5c:3a:26:65:e9:4c:a6:
                    c9:96:c3:ac:b3:b4:74:94:ea:2e:6b:a1:71:6a:3f:
                    c4:17:f0:b5:9a:9e:e1:98:77:45:60:f1:4b:89:07:
                    d1:78:96:37:44:b5:4e:1a:4a:16:d2:d9:c8:54:2f:
                    53:3f:90:2a:9d:ae:ca:6c:13:e8:c0:47:90:3e:26:
                    f9:a5:00:b9:7c:25:a1:32:05:82:60:48:16:8a:d8:
                    90:fe:b4:39:77:60:ed:23:ea:d1:80:ee:fc:bf:f9:
                    eb:5a:49:43:93:4d:93:4b:c8:49:4d:9d:e9:a7:c0:
                    e2:c3:89:73:d4:d4:49:b9:79:72:38:56:9a:98:66:
                    10:d1:68:93:6e:6f:95:e8:53:d8:61:48:31:e6:01:
                    f3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B6:63:E0:7C:90:4C:DE:C9:26:F9:E3:D5:AC:8C:53:64:4F:AF:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2daa05d7-4212-40cc-8395-01a754675daf/91f3fc1f-f25d-3379-be8d-666574fae90d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2daa05d7-4212-40cc-8395-01a754675daf/2daa05d7-4212-40cc-8395-01a754675daf.crl

            X509v3 Authority Key Identifier:
                keyid:4F:7D:86:6B:7E:5B:E8:BF:67:ED:EF:A5:5E:49:3F:C7:B3:69:65:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2daa05d7-4212-40cc-8395-01a754675daf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbcc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f5:c6:fd:a7:f6:96:10:c1:6a:aa:25:91:16:c4:0f:15:67:
         bc:37:21:b9:1a:3a:69:ed:b5:dc:57:e6:ef:3e:27:76:06:cc:
         99:cb:bc:13:7f:ab:5b:ff:61:0d:d8:bf:03:1e:bc:63:a1:9a:
         5c:c4:ed:ae:db:86:ae:d6:31:36:bb:5e:ce:39:4b:93:0a:99:
         51:b5:b5:03:93:4d:92:ad:6c:d0:c1:a8:35:2f:cc:e2:8b:50:
         90:10:70:d7:f7:1e:87:03:3d:b4:e0:d9:77:21:3c:e9:d4:d1:
         ee:93:24:14:a3:a9:ac:ce:7c:4a:0b:17:0d:9c:b3:e2:bb:0b:
         99:eb:7e:b1:33:36:41:37:64:1e:49:e7:aa:8a:fe:13:1f:d5:
         dd:f9:f2:52:fb:d6:97:2a:0a:b9:55:39:4b:46:6c:da:72:03:
         68:dd:64:cc:3b:ae:e0:0b:0a:6a:1c:1a:9d:19:46:52:dc:e2:
         4e:17:48:75:35:21:59:54:95:61:27:64:75:83:f9:7a:49:e6:
         a7:57:6c:98:5d:6f:c0:fc:07:9e:14:17:39:8e:1b:c6:46:94:
         aa:eb:8a:8d:3a:b3:6b:31:ad:0e:16:41:40:5b:3a:bb:d0:a0:
         ad:4c:ed:b2:27:23:29:c4:c7:06:4d:6e:80:db:57:11:ad:5b:
         93:5e:ac:fc
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWET0ZVW2sLz8gvMnvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRhYTA1ZDctNDIxMi00MGNjLTgzOTUtMDFhNzU0Njc1
ZGFmMB4XDTI0MDIyMDE0MDAzMVoXDTI0MDUyMDEzMDAzMVowLzEtMCsGA1UEAxMk
ZTY4YTViNGQtODBmNC00NDUzLWE2N2QtZGI3ZjQ2ZDJmMThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMogGxtLN5c7wDne33GAkCi4005bqAdch8V8
ZSVQ/3wGUOKh7VbqHCzkCAqzZPYs1YejBBfwmyZaOtT+xZSU+AbSV43QZjUlry4q
SSKPNNwWcxGu12w5K92pX7UDOIBYvNVEdqZIeQ7PCrqDpmuIJ1w6JmXpTKbJlsOs
s7R0lOoua6Fxaj/EF/C1mp7hmHdFYPFLiQfReJY3RLVOGkoW0tnIVC9TP5Aqna7K
bBPowEeQPib5pQC5fCWhMgWCYEgWitiQ/rQ5d2DtI+rRgO78v/nrWklDk02TS8hJ
TZ3pp8Diw4lz1NRJuXlyOFaamGYQ0WiTbm+V6FPYYUgx5gHz3QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFG2Y+B8kEzeySb549WsjFNkT68yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZGFh
MDVkNy00MjEyLTQwY2MtODM5NS0wMWE3NTQ2NzVkYWYvOTFmM2ZjMWYtZjI1ZC0z
Mzc5LWJlOGQtNjY2NTc0ZmFlOTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmRhYTA1ZDctNDIxMi00MGNjLTgz
OTUtMDFhNzU0Njc1ZGFmLzJkYWEwNWQ3LTQyMTItNDBjYy04Mzk1LTAxYTc1NDY3
NWRhZi5jcmwwHwYDVR0jBBgwFoAUT32Ga35b6L9n7e+lXkk/x7NpZRAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZGFhMDVkNy00MjEyLTQwY2MtODM5NS0wMWE3
NTQ2NzVkYWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL7zAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAEfXG/af2lhDBaqolkRbEDxVnvDchuRo6ae213Ffm7z4ndgbMmcu8
E3+rW/9hDdi/Ax68Y6GaXMTtrtuGrtYxNrtezjlLkwqZUbW1A5NNkq1s0MGoNS/M
4otQkBBw1/cehwM9tODZdyE86dTR7pMkFKOprM58SgsXDZyz4rsLmet+sTM2QTdk
Hknnqor+Ex/V3fnyUvvWlyoKuVU5S0Zs2nIDaN1kzDuu4AsKahwanRlGUtziThdI
dTUhWVSVYSdkdYP5eknmp1dsmF1vwPwHnhQXOY4bxkaUquuKjTqzazGtDhZBQFs6
u9CgrUztsicjKcTHBk1ugNtXEa1bk16s/A==
-----END CERTIFICATE-----