Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/dca45955-e52c-3421-85fe-d1281b5276b6.roa
File:                     dca45955-e52c-3421-85fe-d1281b5276b6.roa (raw, json)
Hash identifier:          9dFMsT+kc/7X8xG/HM98pTiHUpdxWjVr7l8EG8lJ9Rw=
Subject key identifier:   FF:25:15:A6:41:CA:53:58:3B:85:BC:D3:97:FA:1B:64:C1:25:3F:30
Certificate issuer:       /CN=71d0ad91-658e-4240-8d73-8592460b61a7
Certificate serial:       010D0C9F4328583FB91BFE4FC84F786C2A354900
Authority key identifier: 2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/dca45955-e52c-3421-85fe-d1281b5276b6.roa
Signing time:             Fri 28 Oct 2022 18:06:42 +0000
ROA not before:           Fri 28 Oct 2022 18:06:42 +0000
ROA not after:            Thu 30 Jan 2025 05:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b9:1b:fe:4f:c8:4f:78:6c:2a:35:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d0ad91-658e-4240-8d73-8592460b61a7
        Validity
            Not Before: Oct 28 18:06:42 2022 GMT
            Not After : Jan 30 05:00:00 2025 GMT
        Subject: CN=287a535a-f669-4ba5-842a-8a726bbba772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e5:52:76:6e:95:e9:1e:9f:12:22:e0:8d:98:
                    a9:4d:81:4b:14:78:b8:3c:70:a1:5a:07:4e:25:4e:
                    e1:61:13:4c:31:82:10:38:a1:ed:f9:60:3e:b1:da:
                    c0:c7:ae:5e:5a:5c:f8:5a:5a:e7:4d:dc:6d:45:39:
                    06:00:bf:3b:a9:25:cd:8d:37:d6:61:d7:cf:87:ab:
                    b2:7d:87:93:f5:d5:e0:f8:49:37:0f:e4:d4:0a:07:
                    9b:2f:c0:a7:ed:1f:81:80:b6:52:86:9b:8c:a8:b8:
                    b4:9d:68:b9:52:54:2d:f6:3e:66:78:ac:44:39:f4:
                    11:2b:4c:1a:c3:72:52:c3:e4:48:1f:70:2a:c6:e4:
                    c1:79:19:08:b3:76:38:6b:3a:57:db:67:84:c5:0e:
                    73:ec:18:bf:a0:be:2d:2e:5f:fc:4f:af:38:79:a9:
                    d1:07:f9:bb:ba:13:6a:ce:15:cc:1c:af:f8:84:f4:
                    6d:0c:23:ea:61:4f:0b:fb:5a:ff:5a:4a:c4:9b:ae:
                    69:2d:56:6b:8a:df:73:2f:b7:c4:fb:1c:8e:0e:61:
                    37:fd:1c:45:f8:ff:3a:eb:89:a7:8d:1c:9c:a5:10:
                    2a:fd:21:44:eb:38:47:dd:8a:a3:d2:ef:c9:1e:1b:
                    c9:47:83:1c:ff:9f:1b:8f:43:18:12:b3:33:7a:0a:
                    5a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:25:15:A6:41:CA:53:58:3B:85:BC:D3:97:FA:1B:64:C1:25:3F:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/dca45955-e52c-3421-85fe-d1281b5276b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/71d0ad91-658e-4240-8d73-8592460b61a7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:2a:b3:8a:2d:ce:e9:6c:f6:7b:f5:13:e4:63:e1:15:a8:ac:
         82:b6:f8:cf:54:23:65:1c:90:ce:e7:f7:36:27:0a:83:08:67:
         bd:7f:bd:9e:df:de:75:1d:63:03:fd:43:c0:0f:4c:4c:ff:ea:
         9e:4e:f6:38:da:fd:a5:1b:34:53:ea:aa:12:f1:1c:0a:62:c9:
         c5:23:03:f0:9a:9d:fe:c5:49:b3:21:29:ff:7e:96:78:e0:35:
         10:df:1e:d9:21:03:ec:77:18:1a:6e:b2:80:e9:f8:c7:d5:e3:
         7d:54:58:85:9b:19:3b:31:69:62:a9:34:da:cd:7f:0d:86:68:
         f0:78:54:9b:87:8a:43:d5:1b:29:48:13:da:0d:dc:05:79:56:
         80:73:67:4a:c0:ee:8f:31:63:d8:ca:af:02:78:6e:18:b9:17:
         7e:cb:20:0b:73:f1:a3:1e:99:d3:77:61:0b:33:e1:dd:fc:73:
         1a:45:64:36:10:d1:2c:ea:4f:ee:9f:97:c5:55:39:1a:e7:22:
         49:5c:03:80:3d:e1:a3:10:de:85:8f:ae:e8:85:1f:68:58:24:
         2f:40:c5:df:20:85:00:b2:d6:6d:c8:8f:45:08:f2:3c:10:e0:
         be:53:7f:d7:49:5c:ef:c6:4b:5a:f5:19:75:e9:df:66:fa:15:
         02:34:0f:b5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWD+5G/5PyE94bCo1SQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFkMGFkOTEtNjU4ZS00MjQwLThkNzMtODU5MjQ2MGI2
MWE3MB4XDTIyMTAyODE4MDY0MloXDTI1MDEzMDA1MDAwMFowLzEtMCsGA1UEAxMk
Mjg3YTUzNWEtZjY2OS00YmE1LTg0MmEtOGE3MjZiYmJhNzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuVSdm6V6R6fEiLgjZipTYFLFHi4PHChWgdO
JU7hYRNMMYIQOKHt+WA+sdrAx65eWlz4WlrnTdxtRTkGAL87qSXNjTfWYdfPh6uy
fYeT9dXg+Ek3D+TUCgebL8Cn7R+BgLZShpuMqLi0nWi5UlQt9j5meKxEOfQRK0wa
w3JSw+RIH3AqxuTBeRkIs3Y4azpX22eExQ5z7Bi/oL4tLl/8T684eanRB/m7uhNq
zhXMHK/4hPRtDCPqYU8L+1r/WkrEm65pLVZrit9zL7fE+xyODmE3/RxF+P8664mn
jRycpRAq/SFE6zhH3Yqj0u/JHhvJR4Mc/58bj0MYErMzegpaXQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFP8lFaZBylNYO4W805f6G2TBJT8wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83MWQw
YWQ5MS02NThlLTQyNDAtOGQ3My04NTkyNDYwYjYxYTcvZGNhNDU5NTUtZTUyYy0z
NDIxLTg1ZmUtZDEyODFiNTI3NmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzFkMGFkOTEtNjU4ZS00MjQwLThk
NzMtODU5MjQ2MGI2MWE3LzcxZDBhZDkxLTY1OGUtNDI0MC04ZDczLTg1OTI0NjBi
NjFhNy5jcmwwHwYDVR0jBBgwFoAULTUJuofoVGbcea2HMHjPIBILvxUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83MWQwYWQ5MS02NThlLTQyNDAtOGQ3My04NTky
NDYwYjYxYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8OwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAkCqzii3O6Wz2e/UT5GPhFaisgrb4z1QjZRyQzuf3NicKgwhnvX+9
nt/edR1jA/1DwA9MTP/qnk72ONr9pRs0U+qqEvEcCmLJxSMD8Jqd/sVJsyEp/36W
eOA1EN8e2SED7HcYGm6ygOn4x9XjfVRYhZsZOzFpYqk02s1/DYZo8HhUm4eKQ9Ub
KUgT2g3cBXlWgHNnSsDujzFj2MqvAnhuGLkXfssgC3Pxox6Z03dhCzPh3fxzGkVk
NhDRLOpP7p+XxVU5GuciSVwDgD3hoxDehY+u6IUfaFgkL0DF3yCFALLWbciPRQjy
PBDgvlN/10lc78ZLWvUZdenfZvoVAjQPtQ==
-----END CERTIFICATE-----