Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/3864142a-34c7-3d9d-9604-5e9e9ca0924a.roa
File:                     3864142a-34c7-3d9d-9604-5e9e9ca0924a.roa (raw, json)
Hash identifier:          JqfrxhZ28bEUikCAOwoLb7Dcv5H4QqB4MUiymC4EeOs=
Subject key identifier:   B1:78:3F:AE:B0:1B:E3:04:2D:58:33:13:9E:16:30:1B:3F:56:36:2B
Certificate issuer:       /CN=505332f5-c843-4e04-add6-4ef51984b8f2
Certificate serial:       010D0C9F4328583C971BC6CE0AF1D91143C01380
Authority key identifier: 4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/3864142a-34c7-3d9d-9604-5e9e9ca0924a.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        2620:108:d000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:97:1b:c6:ce:0a:f1:d9:11:43:c0:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505332f5-c843-4e04-add6-4ef51984b8f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=51a9ce30-a79a-4587-937c-2f9d133478af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b3:18:95:7f:ca:32:42:59:ec:7f:77:83:3f:
                    d1:92:1d:cc:d4:7c:4f:51:4a:6a:8a:20:72:cb:1a:
                    91:a5:d6:25:ce:b1:85:4f:82:a2:7e:60:af:9b:b8:
                    94:18:0a:5f:38:b1:a7:1f:dc:f0:d6:03:2d:5d:63:
                    98:c4:2d:17:b9:76:35:0a:98:ed:33:ae:79:69:76:
                    1a:e6:9e:12:fe:aa:6a:4f:22:e7:3d:ab:f7:8f:eb:
                    69:72:07:a3:be:b3:a6:35:56:5a:dc:55:56:a6:e1:
                    ac:be:d7:f6:86:49:68:ae:c4:7f:96:48:82:4e:04:
                    29:84:6d:63:e0:d5:88:df:45:d4:03:d4:6f:8f:06:
                    64:b5:8b:af:24:47:42:11:a8:46:5c:cc:e4:26:0d:
                    01:4d:a3:34:21:7d:03:e0:38:8b:38:11:45:af:a2:
                    99:02:26:5e:80:17:a1:de:f4:72:98:d1:78:31:ef:
                    90:39:1c:f6:94:40:91:63:ad:84:eb:2f:e5:b7:ff:
                    37:6c:15:fc:bb:ce:67:6a:ea:4c:33:32:1a:23:9e:
                    88:6d:64:c4:07:e7:da:85:a3:80:41:46:59:50:33:
                    94:a7:1f:c7:1c:95:b2:27:08:69:26:7b:7e:dc:55:
                    7f:56:67:91:1c:f3:0c:28:48:a1:37:7b:a5:8d:53:
                    65:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:78:3F:AE:B0:1B:E3:04:2D:58:33:13:9E:16:30:1B:3F:56:36:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/3864142a-34c7-3d9d-9604-5e9e9ca0924a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/505332f5-c843-4e04-add6-4ef51984b8f2.crl

            X509v3 Authority Key Identifier:
                keyid:4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ab:ea:39:ee:6e:e1:5c:8f:ec:7e:6b:9b:d6:5d:74:9b:4e:
         b1:52:c7:80:25:f0:93:9c:c7:13:84:06:f7:d4:3b:93:bf:df:
         60:d5:bf:1b:3a:01:39:a5:f1:d0:d1:e3:a5:7b:06:bc:98:d8:
         ff:e9:c1:04:16:d4:67:25:68:77:9d:30:cb:2c:18:00:1f:02:
         b5:24:28:3f:6b:9c:3a:32:ff:5a:42:c3:a5:7a:89:91:de:b1:
         17:28:ce:c7:a6:69:2b:11:a0:4d:e1:93:d5:d2:3d:3d:1a:1f:
         c3:89:e5:c9:ab:05:1e:f3:1b:0d:3d:c8:6a:63:49:5d:0c:53:
         15:4b:73:f8:ce:74:b4:61:7b:db:9e:05:a4:ed:bf:95:41:66:
         05:8c:a6:9b:63:a8:f7:b1:13:16:5b:ee:dc:f1:13:6f:00:46:
         49:51:0b:89:38:52:7e:c3:57:d5:c6:7f:87:da:fe:fd:08:33:
         41:7a:ac:9f:ed:39:6b:7e:e6:83:2a:1f:d1:d9:bd:b4:f4:90:
         a3:56:12:ec:69:89:32:6a:c7:a6:d3:7a:74:c0:65:ef:a6:71:
         19:14:e2:cf:15:30:1f:e9:6c:df:bf:93:0b:c4:7f:77:23:80:
         16:96:c8:6c:f4:e3:b4:27:0e:bf:03:1e:5a:3f:d1:cb:75:31:
         34:15:94:55
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDyXG8bOCvHZEUPAE4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTA1MzMyZjUtYzg0My00ZTA0LWFkZDYtNGVmNTE5ODRi
OGYyMB4XDTIyMDExNDA1MDAwMFoXDTIyMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
NTFhOWNlMzAtYTc5YS00NTg3LTkzN2MtMmY5ZDEzMzQ3OGFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLMYlX/KMkJZ7H93gz/Rkh3M1HxPUUpqiiBy
yxqRpdYlzrGFT4KifmCvm7iUGApfOLGnH9zw1gMtXWOYxC0XuXY1CpjtM655aXYa
5p4S/qpqTyLnPav3j+tpcgejvrOmNVZa3FVWpuGsvtf2hklorsR/lkiCTgQphG1j
4NWI30XUA9RvjwZktYuvJEdCEahGXMzkJg0BTaM0IX0D4DiLOBFFr6KZAiZegBeh
3vRymNF4Me+QORz2lECRY62E6y/lt/83bBX8u85naupMMzIaI56IbWTEB+fahaOA
QUZZUDOUpx/HHJWyJwhpJnt+3FV/VmeRHPMMKEihN3uljVNlsQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLF4P66wG+MELVgzE54WMBs/VjYrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDUz
MzJmNS1jODQzLTRlMDQtYWRkNi00ZWY1MTk4NGI4ZjIvMzg2NDE0MmEtMzRjNy0z
ZDlkLTk2MDQtNWU5ZTljYTA5MjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTA1MzMyZjUtYzg0My00ZTA0LWFk
ZDYtNGVmNTE5ODRiOGYyLzUwNTMzMmY1LWM4NDMtNGUwNC1hZGQ2LTRlZjUxOTg0
YjhmMi5jcmwwHwYDVR0jBBgwFoAUS68KdldexE0wTYLeOw8OAmBXKEYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDUzMzJmNS1jODQzLTRlMDQtYWRkNi00ZWY1
MTk4NGI4ZjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABCNAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFqr6jnubuFcj+x+a5vWXXSbTrFSx4Al8JOcxxOEBvfUO5O/32DV
vxs6ATml8dDR46V7BryY2P/pwQQW1GclaHedMMssGAAfArUkKD9rnDoy/1pCw6V6
iZHesRcozsemaSsRoE3hk9XSPT0aH8OJ5cmrBR7zGw09yGpjSV0MUxVLc/jOdLRh
e9ueBaTtv5VBZgWMpptjqPexExZb7tzxE28ARklRC4k4Un7DV9XGf4fa/v0IM0F6
rJ/tOWt+5oMqH9HZvbT0kKNWEuxpiTJqx6bTenTAZe+mcRkU4s8VMB/pbN+/kwvE
f3cjgBaWyGz047QnDr8DHlo/0ct1MTQVlFU=
-----END CERTIFICATE-----