Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/41538133-b600-3fb4-9ef3-67feeea9bc26.roa
File:                     41538133-b600-3fb4-9ef3-67feeea9bc26.roa (raw, json)
Hash identifier:          XFa3KwsSezPuo3ReSTT3LLIk3qA+8wpH8Y0n3nSpQvk=
Subject key identifier:   5D:D6:0C:42:C3:30:6A:4E:69:AF:6D:35:3D:B0:1F:33:3D:81:1E:73
Certificate issuer:       /CN=71d0ad91-658e-4240-8d73-8592460b61a7
Certificate serial:       010D0C9F4328583FB915C35C759D4FD09C0C5100
Authority key identifier: 2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/41538133-b600-3fb4-9ef3-67feeea9bc26.roa
Signing time:             Fri 28 Oct 2022 18:06:42 +0000
ROA not before:           Fri 28 Oct 2022 18:06:42 +0000
ROA not after:            Thu 30 Jan 2025 05:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b9:15:c3:5c:75:9d:4f:d0:9c:0c:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d0ad91-658e-4240-8d73-8592460b61a7
        Validity
            Not Before: Oct 28 18:06:42 2022 GMT
            Not After : Jan 30 05:00:00 2025 GMT
        Subject: CN=dd0e439c-ecb7-4e6c-8206-f64ae8bf2b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:24:04:8d:6a:0d:19:2b:9f:b1:77:b5:22:30:
                    3f:b4:a9:6a:fd:4d:72:e6:7b:0e:74:c0:1d:21:05:
                    d6:ec:62:e8:59:7e:20:8e:c4:1b:a5:10:25:20:75:
                    d5:12:15:4c:44:67:39:d4:17:9e:ab:9b:91:01:a3:
                    91:66:05:79:e3:3e:2a:60:58:7a:ed:c5:09:e8:6f:
                    f4:61:c6:6e:9c:e9:d0:2a:b3:35:13:cf:e3:2d:d2:
                    78:27:c2:99:11:c9:b4:44:1f:62:44:7e:f3:f3:a8:
                    8d:96:7a:c1:61:03:fe:c4:ab:73:b7:c5:0c:15:ad:
                    68:a9:ba:60:61:d0:10:db:39:36:5f:3f:6a:a1:cf:
                    ee:4d:62:49:6c:51:fb:fc:59:1c:54:91:06:d5:1a:
                    c3:f6:ef:17:52:59:89:e1:16:90:f9:3e:1c:0f:3a:
                    3b:a7:c5:5e:35:6b:6e:35:2d:f6:96:b8:45:66:99:
                    a4:44:af:cc:92:f9:6a:c5:6a:a2:b4:ee:c2:fa:de:
                    1c:7f:38:f0:67:4b:f6:50:5f:86:59:f7:13:40:39:
                    76:79:aa:52:c4:cf:83:6f:95:3a:79:12:e1:f4:13:
                    fd:cf:b8:80:cf:9c:25:8e:ea:15:f5:f9:24:ae:01:
                    ed:97:cd:58:ef:9a:9c:ed:45:86:42:0d:fe:d3:bc:
                    5a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D6:0C:42:C3:30:6A:4E:69:AF:6D:35:3D:B0:1F:33:3D:81:1E:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/41538133-b600-3fb4-9ef3-67feeea9bc26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/71d0ad91-658e-4240-8d73-8592460b61a7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:83:5a:ac:d4:31:2c:df:78:87:50:42:6e:08:7a:ad:04:01:
         f0:fa:81:1a:27:b0:b4:fd:f6:a5:ac:36:da:5a:67:f5:f4:cf:
         3b:7a:12:17:7b:fa:22:39:bb:5b:20:1b:94:5b:a3:19:27:d7:
         a4:a0:d5:76:06:f8:7e:c4:53:5c:ed:2c:1d:25:32:12:0b:22:
         3a:43:bd:51:74:7b:13:24:b0:e6:41:a3:6b:44:74:b2:97:5a:
         f5:f7:14:c9:3e:45:31:3b:a1:22:1a:b9:8c:70:6e:ee:4b:07:
         dd:78:74:87:4e:9c:31:cf:30:ff:74:51:fd:f8:5c:18:a6:ec:
         24:e6:ac:a8:1f:cf:ae:40:d8:d7:ca:9e:9d:ee:cf:09:38:5f:
         23:e9:df:3e:80:35:2e:1b:10:b3:ab:46:d0:74:3c:a2:8c:1f:
         27:10:18:b1:70:9a:60:78:dd:21:4f:7e:6f:1b:65:38:94:dd:
         db:fa:bf:e0:7a:94:82:32:1a:e6:77:e9:77:48:72:b2:1c:48:
         87:df:64:4e:29:90:42:30:99:05:56:74:82:ee:5f:80:cc:90:
         01:17:70:23:42:4b:3b:8e:63:33:41:a5:7f:d3:ed:af:71:7d:
         39:cf:29:fd:8b:0c:a9:e2:48:2d:61:76:ee:7a:bf:57:c2:82:
         84:99:ba:b5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD+5FcNcdZ1P0JwMUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFkMGFkOTEtNjU4ZS00MjQwLThkNzMtODU5MjQ2MGI2
MWE3MB4XDTIyMTAyODE4MDY0MloXDTI1MDEzMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZGQwZTQzOWMtZWNiNy00ZTZjLTgyMDYtZjY0YWU4YmYyYjhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCQEjWoNGSufsXe1IjA/tKlq/U1y5nsOdMAd
IQXW7GLoWX4gjsQbpRAlIHXVEhVMRGc51Beeq5uRAaORZgV54z4qYFh67cUJ6G/0
YcZunOnQKrM1E8/jLdJ4J8KZEcm0RB9iRH7z86iNlnrBYQP+xKtzt8UMFa1oqbpg
YdAQ2zk2Xz9qoc/uTWJJbFH7/FkcVJEG1RrD9u8XUlmJ4RaQ+T4cDzo7p8VeNWtu
NS32lrhFZpmkRK/MkvlqxWqitO7C+t4cfzjwZ0v2UF+GWfcTQDl2eapSxM+Db5U6
eRLh9BP9z7iAz5wljuoV9fkkrgHtl81Y75qc7UWGQg3+07xaaQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF3WDELDMGpOaa9tNT2wHzM9gR5zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83MWQw
YWQ5MS02NThlLTQyNDAtOGQ3My04NTkyNDYwYjYxYTcvNDE1MzgxMzMtYjYwMC0z
ZmI0LTllZjMtNjdmZWVlYTliYzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzFkMGFkOTEtNjU4ZS00MjQwLThk
NzMtODU5MjQ2MGI2MWE3LzcxZDBhZDkxLTY1OGUtNDI0MC04ZDczLTg1OTI0NjBi
NjFhNy5jcmwwHwYDVR0jBBgwFoAULTUJuofoVGbcea2HMHjPIBILvxUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83MWQwYWQ5MS02NThlLTQyNDAtOGQ3My04NTky
NDYwYjYxYTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwIA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFGDWqzUMSzfeIdQQm4Ieq0EAfD6gRonsLT99qWsNtpaZ/X0zzt6
Ehd7+iI5u1sgG5Rboxkn16Sg1XYG+H7EU1ztLB0lMhILIjpDvVF0exMksOZBo2tE
dLKXWvX3FMk+RTE7oSIauYxwbu5LB914dIdOnDHPMP90Uf34XBim7CTmrKgfz65A
2NfKnp3uzwk4XyPp3z6ANS4bELOrRtB0PKKMHycQGLFwmmB43SFPfm8bZTiU3dv6
v+B6lIIyGuZ36XdIcrIcSIffZE4pkEIwmQVWdILuX4DMkAEXcCNCSzuOYzNBpX/T
7a9xfTnPKf2LDKniSC1hdu56v1fCgoSZurU=
-----END CERTIFICATE-----