Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/a3d30ceb-aee1-3782-8a80-d096fe2ca939.roa
File:                     a3d30ceb-aee1-3782-8a80-d096fe2ca939.roa (raw, json)
Hash identifier:          tD4Ktvn8B6gVGnKllJr8qTeN3/tlcr8apDTCDI7oEfw=
Subject key identifier:   EC:21:12:87:27:A2:99:8D:CA:1C:5A:06:79:6D:A7:6E:48:FF:35:AC
Certificate issuer:       /CN=ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca
Certificate serial:       010D0C9F432858402EA28BE42D38D498950D0200
Authority key identifier: E2:CD:EF:01:C2:EA:42:8D:BA:29:6A:9F:7F:B0:26:4C:98:46:C4:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/a3d30ceb-aee1-3782-8a80-d096fe2ca939.roa
Signing time:             Thu 13 Oct 2022 21:21:08 +0000
ROA not before:           Thu 13 Oct 2022 21:21:08 +0000
ROA not after:            Sun 15 Dec 2024 05:00:00 +0000
asID:                     200775
IP address blocks:        2602:fafd:f0c::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:2e:a2:8b:e4:2d:38:d4:98:95:0d:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca
        Validity
            Not Before: Oct 13 21:21:08 2022 GMT
            Not After : Dec 15 05:00:00 2024 GMT
        Subject: CN=d89d48ed-f7b6-422d-99eb-3100db910346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:32:bd:81:b4:82:31:fe:eb:9b:17:a4:82:
                    a1:37:6b:8b:79:28:50:9f:d4:b5:4a:7c:17:7b:cf:
                    21:ce:ad:48:bb:8e:e6:1b:75:59:ad:8c:6e:4c:27:
                    e8:94:62:2d:28:06:d6:7d:34:a8:d4:fb:74:df:21:
                    6c:a2:3d:02:9e:f8:65:ea:67:43:f5:94:cf:4c:4d:
                    0d:f2:9e:ed:01:15:32:c9:d9:2f:cc:6b:84:8e:11:
                    7f:6e:e5:e0:a0:c0:a4:f0:c5:d6:2a:35:ef:9e:e5:
                    70:07:11:47:11:21:45:56:ed:7d:1b:ef:88:be:31:
                    7c:ca:a8:1a:12:08:2a:2d:63:06:fb:1f:5c:88:10:
                    ec:f0:2f:0d:ce:2f:eb:05:eb:dd:79:21:b4:7b:8f:
                    a0:09:44:b4:9b:80:de:76:cb:8e:e0:95:87:9b:ac:
                    b9:35:3f:7c:11:fe:ba:1f:4b:20:93:c4:6a:0d:3e:
                    ec:9f:80:0c:69:da:d0:c3:a2:c7:f8:2d:d2:06:40:
                    01:67:ea:d1:73:2e:8b:4e:42:fc:98:57:98:91:88:
                    31:13:7a:e4:a7:ca:ed:d2:59:f1:c1:6b:7f:1f:56:
                    25:65:07:97:2d:34:3f:22:fe:60:33:05:a6:f8:ff:
                    c6:ea:45:0f:20:20:bc:4a:73:ec:05:71:b4:dc:ca:
                    98:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:21:12:87:27:A2:99:8D:CA:1C:5A:06:79:6D:A7:6E:48:FF:35:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/a3d30ceb-aee1-3782-8a80-d096fe2ca939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca.crl

            X509v3 Authority Key Identifier:
                keyid:E2:CD:EF:01:C2:EA:42:8D:BA:29:6A:9F:7F:B0:26:4C:98:46:C4:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f0c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:de:a5:73:39:0d:6f:e0:15:be:14:e8:f1:90:f6:28:15:09:
         0a:7c:06:ef:26:87:f6:a2:16:ac:24:66:49:03:88:5d:9e:91:
         19:ab:80:1d:51:3f:7d:dd:82:70:44:0b:bd:97:8b:9c:ae:60:
         45:c3:61:24:aa:f2:72:e2:fc:03:2a:47:ff:1c:66:74:56:a0:
         49:f5:96:6c:b3:1f:80:47:b9:f5:eb:d4:c9:46:1e:14:04:5a:
         13:a9:c5:ce:1d:a4:ab:8e:14:7a:06:c2:9b:7d:cb:4f:ea:9f:
         48:b5:24:02:18:d2:ad:01:7a:b3:67:fa:38:1f:2c:ea:e2:f6:
         84:43:01:61:1e:34:8d:3a:30:e1:0a:73:48:8a:d3:7f:52:4d:
         41:53:28:07:9d:41:ef:97:c9:15:52:dc:d3:9a:84:06:e0:8b:
         11:ad:45:9f:62:5b:9d:1d:d8:12:c5:ba:96:1f:24:4b:1c:f4:
         e3:e9:d9:0a:a8:3a:74:2a:b1:63:5b:b8:76:46:3d:2e:07:23:
         58:11:c0:90:4c:6a:f1:bf:c7:fa:4c:98:25:3d:45:fd:a2:90:
         0a:a0:b9:4d:f9:6a:a8:11:f9:46:06:9e:85:76:ec:74:7b:5c:
         05:20:67:2a:a0:d9:8b:dc:25:57:d3:37:c6:ed:f7:41:2b:4c:
         25:a7:d2:96
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEAuoovkLTjUmJUNAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGRiMGYwZDEtZjNmOC00MzY3LWE2NjAtZTlmODdiNGYy
Y2NhMB4XDTIyMTAxMzIxMjEwOFoXDTI0MTIxNTA1MDAwMFowLzEtMCsGA1UEAxMk
ZDg5ZDQ4ZWQtZjdiNi00MjJkLTk5ZWItMzEwMGRiOTEwMzQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyIyvYG0gjH+65sXpIKhN2uLeShQn9S1SnwX
e88hzq1Iu47mG3VZrYxuTCfolGItKAbWfTSo1Pt03yFsoj0Cnvhl6mdD9ZTPTE0N
8p7tARUyydkvzGuEjhF/buXgoMCk8MXWKjXvnuVwBxFHESFFVu19G++IvjF8yqga
EggqLWMG+x9ciBDs8C8Nzi/rBevdeSG0e4+gCUS0m4DedsuO4JWHm6y5NT98Ef66
H0sgk8RqDT7sn4AMadrQw6LH+C3SBkABZ+rRcy6LTkL8mFeYkYgxE3rkp8rt0lnx
wWt/H1YlZQeXLTQ/Iv5gMwWm+P/G6kUPICC8SnPsBXG03MqYlQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOwhEocnopmNyhxaBnltp25I/zWsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGIw
ZjBkMS1mM2Y4LTQzNjctYTY2MC1lOWY4N2I0ZjJjY2EvYTNkMzBjZWItYWVlMS0z
NzgyLThhODAtZDA5NmZlMmNhOTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRiMGYwZDEtZjNmOC00MzY3LWE2
NjAtZTlmODdiNGYyY2NhL2RkYjBmMGQxLWYzZjgtNDM2Ny1hNjYwLWU5Zjg3YjRm
MmNjYS5jcmwwHwYDVR0jBBgwFoAU4s3vAcLqQo26KWqff7AmTJhGxIYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGIwZjBkMS1mM2Y4LTQzNjctYTY2MC1lOWY4
N2I0ZjJjY2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgL6/Q8M
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJrepXM5DW/gFb4U6PGQ9igVCQp8Bu8mh/aiFqwkZkkDiF2ekRmr
gB1RP33dgnBEC72Xi5yuYEXDYSSq8nLi/AMqR/8cZnRWoEn1lmyzH4BHufXr1MlG
HhQEWhOpxc4dpKuOFHoGwpt9y0/qn0i1JAIY0q0BerNn+jgfLOri9oRDAWEeNI06
MOEKc0iK039STUFTKAedQe+XyRVS3NOahAbgixGtRZ9iW50d2BLFupYfJEsc9OPp
2QqoOnQqsWNbuHZGPS4HI1gRwJBMavG/x/pMmCU9Rf2ikAqguU35aqgR+UYGnoV2
7HR7XAUgZyqg2YvcJVfTN8bt90ErTCWn0pY=
-----END CERTIFICATE-----