Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/9cabf865-8bef-3f22-afd9-294f8356805b.roa
File:                     9cabf865-8bef-3f22-afd9-294f8356805b.roa (raw, json)
Hash identifier:          7mMDTiA4PyXrUC9oGYWpjgCEk1koWW+3SFJNitTaSGE=
Subject key identifier:   19:84:64:B5:77:91:5F:F6:3E:E4:15:BB:0C:A0:29:02:E5:D6:BC:71
Certificate issuer:       /CN=ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca
Certificate serial:       010D0C9F4328583FBC9B13B1F2A80DA048C52250
Authority key identifier: E2:CD:EF:01:C2:EA:42:8D:BA:29:6A:9F:7F:B0:26:4C:98:46:C4:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/9cabf865-8bef-3f22-afd9-294f8356805b.roa
Signing time:             Thu 13 Oct 2022 21:21:08 +0000
ROA not before:           Thu 13 Oct 2022 21:21:08 +0000
ROA not after:            Sun 15 Dec 2024 05:00:00 +0000
asID:                     210537
IP address blocks:        2602:fafd:f02::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:bc:9b:13:b1:f2:a8:0d:a0:48:c5:22:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca
        Validity
            Not Before: Oct 13 21:21:08 2022 GMT
            Not After : Dec 15 05:00:00 2024 GMT
        Subject: CN=156ac6b1-390f-440a-a62c-23e3c1036a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d4:38:6d:61:1e:8d:a1:80:30:a7:11:e8:4d:
                    26:e3:1a:70:6f:14:ab:d3:92:d2:b3:b6:59:ca:20:
                    58:7f:36:e9:16:30:fc:46:94:50:b3:9d:ef:27:43:
                    2f:97:de:98:36:ec:8e:df:59:62:61:c4:ad:f4:3a:
                    14:7e:f1:e0:50:bd:88:3b:d8:3e:fe:d0:50:02:09:
                    11:59:f7:f3:e4:c0:65:91:36:53:09:94:44:28:8c:
                    66:78:3d:d8:a0:99:ca:88:27:1a:69:63:3d:a9:55:
                    9c:b2:32:dd:d4:9f:27:25:cc:a4:4d:d6:44:0e:8b:
                    2d:57:ab:03:f9:27:e0:fb:3c:89:a8:60:b5:6e:e7:
                    ae:64:98:14:ab:37:ef:64:7d:bd:c2:74:8f:6c:f5:
                    68:ac:c0:cc:eb:98:a6:99:c1:89:72:fb:f8:a0:ba:
                    2e:11:33:7d:2c:9d:00:35:cd:e9:4d:70:7c:f2:d6:
                    8c:e2:e5:5c:59:8d:ba:6b:24:24:1a:58:72:86:1c:
                    a9:90:9b:29:6f:c2:77:1a:d0:bd:b8:64:68:0f:6a:
                    f5:75:bf:0e:69:a9:b7:7f:9e:1c:a3:f6:47:da:52:
                    09:8b:59:80:15:2b:14:33:29:d1:34:94:aa:bb:fe:
                    58:2c:b6:0f:a7:ab:8d:6f:95:b5:6e:ce:ca:3f:57:
                    b8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:84:64:B5:77:91:5F:F6:3E:E4:15:BB:0C:A0:29:02:E5:D6:BC:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/9cabf865-8bef-3f22-afd9-294f8356805b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca.crl

            X509v3 Authority Key Identifier:
                keyid:E2:CD:EF:01:C2:EA:42:8D:BA:29:6A:9F:7F:B0:26:4C:98:46:C4:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f02::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ea:03:5e:e9:8e:37:f1:77:c5:4f:77:05:ae:7e:3e:9f:41:
         f1:1d:b3:94:f0:c1:1d:0b:90:22:13:dd:1d:91:04:72:bf:c8:
         a6:a6:30:ec:db:b3:4c:6e:74:37:b7:b1:32:43:a0:b2:e2:fd:
         03:f5:6a:e5:78:0d:1d:96:87:43:89:58:67:6f:d8:9f:68:22:
         f1:7f:a1:ad:f2:0c:cf:a8:6a:56:0e:24:02:a0:5a:d4:9f:f3:
         1b:08:4b:57:8a:fe:05:43:9f:a4:5d:9e:b2:77:be:85:a6:6a:
         56:ce:de:5c:60:fc:47:d6:3e:2b:68:70:77:37:6d:f9:f8:17:
         11:41:78:2e:32:9b:25:d9:5b:7a:a1:3c:da:0b:87:6c:af:45:
         04:40:58:fa:03:db:a4:43:1c:3e:a9:10:93:a7:df:28:fc:a0:
         3a:6c:c9:2f:ba:c9:3b:5f:2a:3a:6f:5f:d0:9f:47:30:96:69:
         a5:7c:7e:c1:de:12:13:40:c6:66:c5:55:b6:dd:7f:de:30:e5:
         c6:7d:be:e8:83:a6:e9:a1:d0:63:bb:34:3d:cb:1a:32:4f:d6:
         0b:31:23:72:19:55:1b:7f:46:aa:2d:94:a3:0a:2e:ba:4c:18:
         5b:57:e3:13:cc:78:19:58:6f:73:b9:09:37:ef:d5:1c:52:a3:
         45:ce:7a:b3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD+8mxOx8qgNoEjFIlAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGRiMGYwZDEtZjNmOC00MzY3LWE2NjAtZTlmODdiNGYy
Y2NhMB4XDTIyMTAxMzIxMjEwOFoXDTI0MTIxNTA1MDAwMFowLzEtMCsGA1UEAxMk
MTU2YWM2YjEtMzkwZi00NDBhLWE2MmMtMjNlM2MxMDM2YTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktQ4bWEejaGAMKcR6E0m4xpwbxSr05LSs7ZZ
yiBYfzbpFjD8RpRQs53vJ0Mvl96YNuyO31liYcSt9DoUfvHgUL2IO9g+/tBQAgkR
Wffz5MBlkTZTCZREKIxmeD3YoJnKiCcaaWM9qVWcsjLd1J8nJcykTdZEDostV6sD
+Sfg+zyJqGC1bueuZJgUqzfvZH29wnSPbPVorMDM65immcGJcvv4oLouETN9LJ0A
Nc3pTXB88taM4uVcWY26ayQkGlhyhhypkJspb8J3GtC9uGRoD2r1db8Oaam3f54c
o/ZH2lIJi1mAFSsUMynRNJSqu/5YLLYPp6uNb5W1bs7KP1e4UwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBmEZLV3kV/2PuQVuwygKQLl1rxxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGIw
ZjBkMS1mM2Y4LTQzNjctYTY2MC1lOWY4N2I0ZjJjY2EvOWNhYmY4NjUtOGJlZi0z
ZjIyLWFmZDktMjk0ZjgzNTY4MDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRiMGYwZDEtZjNmOC00MzY3LWE2
NjAtZTlmODdiNGYyY2NhL2RkYjBmMGQxLWYzZjgtNDM2Ny1hNjYwLWU5Zjg3YjRm
MmNjYS5jcmwwHwYDVR0jBBgwFoAU4s3vAcLqQo26KWqff7AmTJhGxIYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGIwZjBkMS1mM2Y4LTQzNjctYTY2MC1lOWY4
N2I0ZjJjY2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6/Q8C
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABfqA17pjjfxd8VPdwWufj6fQfEds5TwwR0LkCIT3R2RBHK/yKam
MOzbs0xudDe3sTJDoLLi/QP1auV4DR2Wh0OJWGdv2J9oIvF/oa3yDM+oalYOJAKg
WtSf8xsIS1eK/gVDn6RdnrJ3voWmalbO3lxg/EfWPitocHc3bfn4FxFBeC4ymyXZ
W3qhPNoLh2yvRQRAWPoD26RDHD6pEJOn3yj8oDpsyS+6yTtfKjpvX9CfRzCWaaV8
fsHeEhNAxmbFVbbdf94w5cZ9vuiDpumh0GO7ND3LGjJP1gsxI3IZVRt/RqotlKMK
LrpMGFtX4xPMeBlYb3O5CTfv1RxSo0XOerM=
-----END CERTIFICATE-----