Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/00c14a5b-0ce6-3b5c-a64d-0d768547d613.roa
File:                     00c14a5b-0ce6-3b5c-a64d-0d768547d613.roa (raw, json)
Hash identifier:          IzwG+GiK87OmaDmcaK4R06Ukx+4+HA8OizlNbGefV8c=
Subject key identifier:   3A:04:A2:BD:2E:46:87:1F:BD:2B:38:F5:6F:EC:07:93:E8:6C:0A:DC
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F432858401AC521EFBFB8DEC938F5FC80
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/00c14a5b-0ce6-3b5c-a64d-0d768547d613.roa
Signing time:             Thu 01 Dec 2022 12:00:00 +0000
ROA not before:           Thu 01 Dec 2022 12:00:00 +0000
ROA not after:            Fri 06 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        2600:9000::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1a:c5:21:ef:bf:b8:de:c9:38:f5:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Dec  1 12:00:00 2022 GMT
            Not After : Jan  6 05:00:00 2023 GMT
        Subject: CN=626b6d0f-c84f-4d3d-84b7-7416d22ee92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a7:b7:13:d4:f9:06:84:e5:dc:3b:ab:ba:f6:
                    94:22:1b:84:3e:1b:98:70:90:3b:ab:9c:b0:1e:c2:
                    39:49:76:74:63:a0:07:8a:2d:aa:56:dd:25:d3:1f:
                    38:83:14:e2:0f:cf:0d:d9:c9:5f:46:70:f3:c8:2d:
                    b0:e0:8b:1b:25:7d:b9:9a:da:28:07:7d:20:95:ed:
                    ec:d6:58:dc:d8:4a:e4:c5:ee:c2:54:e9:a7:51:b7:
                    3d:3d:48:c3:9a:ef:06:25:ff:d9:65:42:7b:e5:e9:
                    b9:68:7d:96:91:64:1f:32:96:23:f1:1a:db:c4:c7:
                    98:db:f1:27:1c:66:27:50:84:93:fa:40:ac:b1:16:
                    24:33:08:be:a1:7d:e8:1a:e0:9d:b2:20:c2:0e:12:
                    25:b1:73:94:84:da:03:a7:74:17:71:b9:d3:9b:d7:
                    2f:93:aa:a8:1f:91:79:32:71:f7:df:8b:98:ab:40:
                    b2:ab:bc:0e:1f:73:57:aa:90:d1:87:3a:4f:76:d2:
                    51:9b:72:35:7e:73:60:46:9c:d5:b3:d8:73:63:22:
                    9b:f8:9b:61:4b:7c:bd:23:5d:0b:a6:9c:f2:10:9a:
                    66:52:5b:5e:81:30:ef:e6:50:9c:61:e1:20:db:63:
                    a8:8f:20:27:cc:a7:1e:ff:d2:cb:75:74:26:46:d0:
                    ed:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:04:A2:BD:2E:46:87:1F:BD:2B:38:F5:6F:EC:07:93:E8:6C:0A:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/00c14a5b-0ce6-3b5c-a64d-0d768547d613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:77:32:f2:e7:16:f0:09:89:3b:86:b9:34:52:f8:fa:08:76:
         ac:5e:fa:83:2f:b6:2b:1b:8e:24:c4:c5:bf:e7:62:1b:ad:17:
         6e:ae:3e:a1:fd:96:b8:3b:88:b9:c8:f5:c0:5e:0f:ab:8e:04:
         74:bd:d8:64:4c:92:22:f5:7a:bd:1b:c5:71:7d:ab:ff:bb:e3:
         cd:8a:c1:5b:c7:41:fd:61:4a:71:82:2e:7e:4b:e2:37:6b:0b:
         8c:84:27:06:74:92:dc:2f:54:61:a8:43:54:6c:39:5e:eb:a8:
         5e:b3:5e:05:84:8d:e8:be:51:99:77:ff:1c:8a:1f:7e:ed:b2:
         53:48:b5:41:2c:14:be:c2:ff:88:a4:9b:9f:01:6c:39:60:99:
         66:a5:47:2c:0d:b2:65:93:dd:cc:f4:a0:49:4b:f8:09:d7:4d:
         c6:4e:90:0b:15:37:f6:a3:9f:03:62:fa:f7:3c:ff:df:fa:a5:
         8e:89:ed:87:fe:b9:a2:b9:3b:6c:57:94:82:27:10:f0:66:f5:
         b1:a5:79:58:8c:be:c9:44:db:c0:c9:6d:f2:fa:c7:3c:46:01:
         8c:b5:b8:a0:0b:ff:a8:22:7d:7c:c9:a3:20:0d:92:e7:73:7a:
         fe:bd:dd:a3:bb:51:6a:b6:6c:c6:7f:66:92:05:fc:0d:b0:78:
         81:b4:31:38
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEAaxSHvv7jeyTj1/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc3OTlmN2YtNDgyNi00YWZhLTg5ZTctOGQwNDc4ZGQx
MjdmMB4XDTIyMTIwMTEyMDAwMFoXDTIzMDEwNjA1MDAwMFowLzEtMCsGA1UEAxMk
NjI2YjZkMGYtYzg0Zi00ZDNkLTg0YjctNzQxNmQyMmVlOTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKe3E9T5BoTl3DuruvaUIhuEPhuYcJA7q5yw
HsI5SXZ0Y6AHii2qVt0l0x84gxTiD88N2clfRnDzyC2w4IsbJX25mtooB30gle3s
1ljc2Erkxe7CVOmnUbc9PUjDmu8GJf/ZZUJ75em5aH2WkWQfMpYj8RrbxMeY2/En
HGYnUIST+kCssRYkMwi+oX3oGuCdsiDCDhIlsXOUhNoDp3QXcbnTm9cvk6qoH5F5
MnH334uYq0Cyq7wOH3NXqpDRhzpPdtJRm3I1fnNgRpzVs9hzYyKb+JthS3y9I10L
ppzyEJpmUltegTDv5lCcYeEg22OojyAnzKce/9LLdXQmRtDtDQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDoEor0uRocfvSs49W/sB5PobArcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5
OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0NzhkZDEyN2YvMDBjMTRhNWItMGNlNi0z
YjVjLWE2NGQtMGQ3Njg1NDdkNjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjc3OTlmN2YtNDgyNi00YWZhLTg5
ZTctOGQwNDc4ZGQxMjdmLzY3Nzk5ZjdmLTQ4MjYtNGFmYS04OWU3LThkMDQ3OGRk
MTI3Zi5jcmwwHwYDVR0jBBgwFoAUanc9hyb3PRWaBxvVb9rqwULsJKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0
NzhkZDEyN2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgCQADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBpdzLy5xbwCYk7hrk0Uvj6CHasXvqDL7YrG44kxMW/52IbrRdurj6h
/Za4O4i5yPXAXg+rjgR0vdhkTJIi9Xq9G8Vxfav/u+PNisFbx0H9YUpxgi5+S+I3
awuMhCcGdJLcL1RhqENUbDle66hes14FhI3ovlGZd/8cih9+7bJTSLVBLBS+wv+I
pJufAWw5YJlmpUcsDbJlk93M9KBJS/gJ103GTpALFTf2o58DYvr3PP/f+qWOie2H
/rmiuTtsV5SCJxDwZvWxpXlYjL7JRNvAyW3y+sc8RgGMtbigC/+oIn18yaMgDZLn
c3r+vd2ju1FqtmzGf2aSBfwNsHiBtDE4
-----END CERTIFICATE-----