Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/8a97d1a1-3d54-3be0-baac-d27c8586ba24.roa
File:                     8a97d1a1-3d54-3be0-baac-d27c8586ba24.roa (raw, json)
Hash identifier:          +YOwxyBdibsUA+qsROuWpR/N73R5tzEmg5oCLQeCIDs=
Subject key identifier:   98:5C:EF:F4:BE:A0:E1:F8:6E:F3:98:BB:3B:F7:76:DC:7A:9D:3D:90
Certificate issuer:       /CN=ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca
Certificate serial:       010D0C9F4328583FBF2EF267922361A2EA225880
Authority key identifier: E2:CD:EF:01:C2:EA:42:8D:BA:29:6A:9F:7F:B0:26:4C:98:46:C4:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/8a97d1a1-3d54-3be0-baac-d27c8586ba24.roa
Signing time:             Thu 13 Oct 2022 21:21:08 +0000
ROA not before:           Thu 13 Oct 2022 21:21:08 +0000
ROA not after:            Sun 15 Dec 2024 05:00:00 +0000
asID:                     54681
IP address blocks:        2602:fafd:faf::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:bf:2e:f2:67:92:23:61:a2:ea:22:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca
        Validity
            Not Before: Oct 13 21:21:08 2022 GMT
            Not After : Dec 15 05:00:00 2024 GMT
        Subject: CN=8dea08f6-608c-4232-a55c-cb9a5a6928e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bf:2a:f4:a1:2c:f7:9a:16:45:b3:f1:ea:ef:
                    8a:43:9f:51:a6:77:7e:ea:33:10:bb:ab:4c:f8:ad:
                    7e:97:82:89:96:b6:96:3a:71:a3:55:3e:1f:a7:16:
                    27:ed:f2:49:d2:4d:64:bf:af:a5:3b:02:df:4f:07:
                    f9:2a:bd:a2:fa:3f:c4:f2:70:20:e2:d7:8b:d3:68:
                    96:2f:fc:99:7e:89:3f:8f:9e:a2:76:e3:ac:bc:ae:
                    a1:e9:a6:21:15:ce:c6:33:1c:4d:37:fa:13:05:56:
                    4c:18:fc:ee:d1:00:62:50:fa:c0:36:6a:20:53:e3:
                    68:79:59:97:5a:6c:da:31:ea:bd:ad:b5:8c:5b:7e:
                    66:3e:dd:b9:f5:41:b5:42:26:ec:3a:5f:53:12:07:
                    34:a9:1a:58:54:76:1f:f5:a5:ee:b3:9c:c7:76:1e:
                    1b:a5:6a:18:0b:f5:4f:91:27:06:40:6b:fb:66:33:
                    6d:d3:17:2a:9f:64:5f:39:3f:56:53:91:6b:cb:d5:
                    aa:e3:c1:3a:46:90:94:1c:26:fd:3f:b7:26:f3:66:
                    5b:69:f4:98:8c:6e:60:18:1c:f6:e4:de:01:94:12:
                    35:3b:8d:d3:b0:ba:63:d5:21:8b:52:78:2c:37:6b:
                    1c:cf:0e:76:23:2d:45:a3:cc:27:2d:13:da:98:47:
                    11:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5C:EF:F4:BE:A0:E1:F8:6E:F3:98:BB:3B:F7:76:DC:7A:9D:3D:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/8a97d1a1-3d54-3be0-baac-d27c8586ba24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca.crl

            X509v3 Authority Key Identifier:
                keyid:E2:CD:EF:01:C2:EA:42:8D:BA:29:6A:9F:7F:B0:26:4C:98:46:C4:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:faf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:41:fe:a7:87:5e:06:7b:9c:fd:9d:03:6a:d9:8f:45:16:bf:
         8f:a2:51:14:ea:82:0f:17:6a:99:9a:b2:a4:b4:c6:76:9b:13:
         5a:cf:d0:9d:6a:ad:22:2f:43:6d:e9:3e:ba:76:60:07:18:34:
         47:86:85:01:b5:80:8c:6a:f8:b9:3d:0d:48:c3:12:6f:ed:fb:
         4e:ed:af:a0:47:7a:de:aa:af:1b:58:8f:35:b6:20:b5:81:1f:
         1d:cc:7f:33:28:ac:b3:f2:15:cb:aa:18:ed:d0:5c:7d:f9:d8:
         a0:74:d5:52:6b:80:ff:26:53:36:db:6f:f5:13:5a:8a:17:7e:
         9c:56:50:a7:12:f7:99:1b:ab:75:e1:96:d0:88:43:6d:ad:5f:
         fd:95:76:c5:50:16:88:64:9f:0a:0b:1f:23:2e:a0:72:de:bf:
         92:10:df:bf:36:ec:09:e4:a7:79:94:68:59:60:56:70:1b:94:
         90:b9:cd:74:ad:a9:42:a4:e3:26:e0:be:04:e3:cc:e1:2d:10:
         42:bd:c1:66:49:17:8b:14:5d:b6:42:5f:c1:1b:a6:74:5e:52:
         75:44:81:8c:b9:11:a3:97:50:ff:ab:a5:eb:b8:1f:00:4c:80:
         47:06:b1:82:12:64:9c:49:b5:67:cf:99:62:af:25:43:d8:95:
         d7:46:9b:d2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD+/LvJnkiNhouoiWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGRiMGYwZDEtZjNmOC00MzY3LWE2NjAtZTlmODdiNGYy
Y2NhMB4XDTIyMTAxMzIxMjEwOFoXDTI0MTIxNTA1MDAwMFowLzEtMCsGA1UEAxMk
OGRlYTA4ZjYtNjA4Yy00MjMyLWE1NWMtY2I5YTVhNjkyOGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr8q9KEs95oWRbPx6u+KQ59Rpnd+6jMQu6tM
+K1+l4KJlraWOnGjVT4fpxYn7fJJ0k1kv6+lOwLfTwf5Kr2i+j/E8nAg4teL02iW
L/yZfok/j56iduOsvK6h6aYhFc7GMxxNN/oTBVZMGPzu0QBiUPrANmogU+NoeVmX
WmzaMeq9rbWMW35mPt259UG1QibsOl9TEgc0qRpYVHYf9aXus5zHdh4bpWoYC/VP
kScGQGv7ZjNt0xcqn2RfOT9WU5Fry9Wq48E6RpCUHCb9P7cm82ZbafSYjG5gGBz2
5N4BlBI1O43TsLpj1SGLUngsN2sczw52Iy1Fo8wnLRPamEcRoQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJhc7/S+oOH4bvOYuzv3dtx6nT2QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGIw
ZjBkMS1mM2Y4LTQzNjctYTY2MC1lOWY4N2I0ZjJjY2EvOGE5N2QxYTEtM2Q1NC0z
YmUwLWJhYWMtZDI3Yzg1ODZiYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRiMGYwZDEtZjNmOC00MzY3LWE2
NjAtZTlmODdiNGYyY2NhL2RkYjBmMGQxLWYzZjgtNDM2Ny1hNjYwLWU5Zjg3YjRm
MmNjYS5jcmwwHwYDVR0jBBgwFoAU4s3vAcLqQo26KWqff7AmTJhGxIYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGIwZjBkMS1mM2Y4LTQzNjctYTY2MC1lOWY4
N2I0ZjJjY2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6/Q+v
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAK1B/qeHXgZ7nP2dA2rZj0UWv4+iURTqgg8XapmasqS0xnabE1rP
0J1qrSIvQ23pPrp2YAcYNEeGhQG1gIxq+Lk9DUjDEm/t+07tr6BHet6qrxtYjzW2
ILWBHx3MfzMorLPyFcuqGO3QXH352KB01VJrgP8mUzbbb/UTWooXfpxWUKcS95kb
q3XhltCIQ22tX/2VdsVQFohknwoLHyMuoHLev5IQ37827Ankp3mUaFlgVnAblJC5
zXStqUKk4ybgvgTjzOEtEEK9wWZJF4sUXbZCX8EbpnReUnVEgYy5EaOXUP+rpeu4
HwBMgEcGsYISZJxJtWfPmWKvJUPYlddGm9I=
-----END CERTIFICATE-----