Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/4ecbd47d-5fc3-3dd8-9230-ad07f34af24a.roa
File:                     4ecbd47d-5fc3-3dd8-9230-ad07f34af24a.roa (raw, json)
Hash identifier:          PI0fVpqisJzCxnm6etRfbFMr1xsvsMIgQd5rppkfJeA=
Subject key identifier:   A2:78:89:DF:B1:88:D0:F0:7B:64:8C:C6:C5:D9:D1:29:E5:28:0F:15
Certificate issuer:       /CN=71d0ad91-658e-4240-8d73-8592460b61a7
Certificate serial:       010D0C9F4328583FB91B8DCA285A66ED41DA9C00
Authority key identifier: 2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/4ecbd47d-5fc3-3dd8-9230-ad07f34af24a.roa
Signing time:             Fri 28 Oct 2022 18:06:42 +0000
ROA not before:           Fri 28 Oct 2022 18:06:42 +0000
ROA not after:            Thu 30 Jan 2025 05:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:f00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b9:1b:8d:ca:28:5a:66:ed:41:da:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d0ad91-658e-4240-8d73-8592460b61a7
        Validity
            Not Before: Oct 28 18:06:42 2022 GMT
            Not After : Jan 30 05:00:00 2025 GMT
        Subject: CN=a5a8430b-cef1-44bb-8fd7-f9277d590233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cc:46:58:57:1e:f5:6e:44:a5:1b:c0:23:2b:
                    41:68:35:68:17:32:74:c7:ed:7d:1f:12:db:a8:54:
                    fa:2d:43:86:f6:b8:5f:4e:4c:00:82:63:bb:d5:f6:
                    a0:d3:b5:8f:98:a7:4b:db:fa:53:d9:89:7d:01:5d:
                    13:47:f6:88:e2:e5:cf:18:fc:14:02:b4:d1:b3:e9:
                    7d:de:c1:53:c7:71:7f:87:ac:0f:e1:79:ba:c1:6f:
                    b9:61:c7:2e:68:96:f9:5a:73:dd:8c:4a:60:b3:db:
                    6e:e5:c8:4c:39:4b:7c:4b:47:a8:ee:e9:34:11:1e:
                    2f:eb:04:d7:43:71:90:8b:af:85:8c:71:61:5e:38:
                    57:4b:0a:2f:83:d4:28:e9:d1:8c:a2:d8:50:63:54:
                    20:05:cd:0b:63:a8:fb:60:ac:87:58:3e:37:2d:43:
                    3e:5f:1a:10:bb:29:87:fa:36:ef:25:12:54:b5:86:
                    9f:3e:b2:98:a5:e5:39:b8:c3:f9:e3:f4:c5:c7:72:
                    ee:d5:56:15:1c:fe:93:cb:47:01:f4:14:01:e1:50:
                    d8:f5:fb:8b:06:20:e7:4c:f0:00:d2:3d:e5:07:be:
                    5d:7f:7b:f5:bd:84:2f:b1:29:ac:1d:8c:b5:af:4f:
                    74:a4:e6:4a:79:0e:88:6a:d6:01:31:ba:7d:b4:44:
                    b1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:78:89:DF:B1:88:D0:F0:7B:64:8C:C6:C5:D9:D1:29:E5:28:0F:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/4ecbd47d-5fc3-3dd8-9230-ad07f34af24a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/71d0ad91-658e-4240-8d73-8592460b61a7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:f1:76:2e:3a:11:75:50:92:66:3e:aa:ec:85:6c:a9:b0:1b:
         97:9b:6c:fd:af:16:74:59:fa:28:53:2b:74:5f:93:08:3e:69:
         da:ba:94:bd:eb:f9:5a:77:eb:4d:4c:82:1e:4e:d9:2a:3e:48:
         eb:c7:a6:f0:e9:7b:07:67:b7:6c:ba:16:b4:42:04:0f:6c:56:
         e7:05:2c:b7:34:61:0a:ff:7f:71:ac:b3:2d:9c:5a:e0:56:07:
         c0:69:94:bc:dc:d6:a2:b7:8a:cb:5f:82:3b:ad:f9:bd:ad:15:
         fe:a4:cc:9c:cd:53:16:c8:01:ba:7e:87:4f:69:ec:46:7a:1d:
         83:cf:c7:60:1c:58:8b:4c:4f:c8:7a:e8:54:65:85:4e:de:cc:
         74:a6:87:ea:fc:5b:c5:ae:2b:9b:f5:f0:e0:27:cf:60:4a:16:
         67:a6:ea:69:36:2f:64:b5:8e:af:86:e8:cd:79:af:e3:04:22:
         92:a5:ce:72:52:e6:16:7f:ff:76:37:13:56:82:f2:9d:29:b5:
         b2:54:40:fd:58:5d:6d:fc:ed:9a:8d:81:95:ef:9e:9c:fa:fb:
         04:05:c9:9c:f8:92:8c:98:6b:4d:70:bb:5d:90:5a:3e:61:9e:
         9b:b3:b5:ce:93:e4:60:f3:4a:3b:81:50:38:42:f3:a3:3b:c1:
         a2:a1:00:04
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD+5G43KKFpm7UHanAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFkMGFkOTEtNjU4ZS00MjQwLThkNzMtODU5MjQ2MGI2
MWE3MB4XDTIyMTAyODE4MDY0MloXDTI1MDEzMDA1MDAwMFowLzEtMCsGA1UEAxMk
YTVhODQzMGItY2VmMS00NGJiLThmZDctZjkyNzdkNTkwMjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcxGWFce9W5EpRvAIytBaDVoFzJ0x+19HxLb
qFT6LUOG9rhfTkwAgmO71fag07WPmKdL2/pT2Yl9AV0TR/aI4uXPGPwUArTRs+l9
3sFTx3F/h6wP4Xm6wW+5YccuaJb5WnPdjEpgs9tu5chMOUt8S0eo7uk0ER4v6wTX
Q3GQi6+FjHFhXjhXSwovg9Qo6dGMothQY1QgBc0LY6j7YKyHWD43LUM+XxoQuymH
+jbvJRJUtYafPrKYpeU5uMP54/TFx3Lu1VYVHP6Ty0cB9BQB4VDY9fuLBiDnTPAA
0j3lB75df3v1vYQvsSmsHYy1r090pOZKeQ6IatYBMbp9tESxCQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKJ4id+xiNDwe2SMxsXZ0SnlKA8VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83MWQw
YWQ5MS02NThlLTQyNDAtOGQ3My04NTkyNDYwYjYxYTcvNGVjYmQ0N2QtNWZjMy0z
ZGQ4LTkyMzAtYWQwN2YzNGFmMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzFkMGFkOTEtNjU4ZS00MjQwLThk
NzMtODU5MjQ2MGI2MWE3LzcxZDBhZDkxLTY1OGUtNDI0MC04ZDczLTg1OTI0NjBi
NjFhNy5jcmwwHwYDVR0jBBgwFoAULTUJuofoVGbcea2HMHjPIBILvxUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83MWQwYWQ5MS02NThlLTQyNDAtOGQ3My04NTky
NDYwYjYxYTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8Ow8A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ3xdi46EXVQkmY+quyFbKmwG5ebbP2vFnRZ+ihTK3Rfkwg+adq6
lL3r+Vp3601Mgh5O2So+SOvHpvDpewdnt2y6FrRCBA9sVucFLLc0YQr/f3Gssy2c
WuBWB8BplLzc1qK3istfgjut+b2tFf6kzJzNUxbIAbp+h09p7EZ6HYPPx2AcWItM
T8h66FRlhU7ezHSmh+r8W8WuK5v18OAnz2BKFmem6mk2L2S1jq+G6M15r+MEIpKl
znJS5hZ//3Y3E1aC8p0ptbJUQP1YXW387ZqNgZXvnpz6+wQFyZz4koyYa01wu12Q
Wj5hnpuztc6T5GDzSjuBUDhC86M7waKhAAQ=
-----END CERTIFICATE-----