Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/3c7b26ae-78ec-3e20-a726-bf557c76c3e4.roa
File:                     3c7b26ae-78ec-3e20-a726-bf557c76c3e4.roa (raw, json)
Hash identifier:          r9YSDRhdMYJJ7rnvTvtDlIDTz/RAaH37fMekKOD3p94=
Subject key identifier:   0D:DB:54:3E:14:E9:5A:96:A5:B1:6B:07:9E:C7:E0:1A:9B:A8:7E:55
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583E45E7DBE3AE58D038B4FBB894
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/3c7b26ae-78ec-3e20-a726-bf557c76c3e4.roa
Signing time:             Thu 16 Jun 2022 12:00:00 +0000
ROA not before:           Thu 16 Jun 2022 12:00:00 +0000
ROA not after:            Fri 22 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2600:9000::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:45:e7:db:e3:ae:58:d0:38:b4:fb:b8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Jun 16 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2022 GMT
        Subject: CN=63c62a8a-06e8-46bf-a085-e7fb425a0dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:18:28:7b:7f:21:ca:c4:fc:fa:ee:01:8d:30:
                    07:8d:28:90:28:58:59:f9:a7:e1:6e:4b:b4:71:cb:
                    64:1d:8f:4e:6d:a5:6f:47:ae:3c:cc:84:24:e7:58:
                    76:b6:f6:0b:4a:24:52:55:50:39:ca:c5:6b:a4:95:
                    83:f0:78:3f:89:b7:60:8a:9e:93:f0:b0:12:50:b4:
                    c2:14:fc:25:11:d0:4c:28:11:31:8b:7d:6e:09:79:
                    94:ed:03:8e:62:4d:59:e1:97:31:88:ec:a8:c4:c1:
                    54:95:8a:81:ee:de:bd:1d:f6:81:19:2e:f6:0d:43:
                    f3:ec:b0:f5:57:f4:3e:5a:cf:0b:8c:7d:d6:8c:5f:
                    c1:15:ce:70:eb:00:9f:41:48:a1:4e:a7:93:a2:5b:
                    91:5d:88:63:a4:f9:56:ba:17:73:db:70:7b:a2:4d:
                    cb:89:38:aa:31:8f:2e:cf:33:f3:17:33:8a:a4:cc:
                    9e:ea:a2:0d:57:3a:3d:17:8d:57:f9:73:c6:82:44:
                    60:d6:12:e5:ee:5b:0e:3f:97:72:cf:d6:a7:b8:76:
                    0a:79:54:67:d2:59:c2:3a:d0:4f:46:ae:05:4e:ec:
                    eb:a9:54:82:e0:6a:41:f7:ce:b3:7e:01:26:53:7f:
                    94:91:a2:45:29:62:85:0b:5a:df:0c:08:f3:ae:96:
                    1c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DB:54:3E:14:E9:5A:96:A5:B1:6B:07:9E:C7:E0:1A:9B:A8:7E:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/3c7b26ae-78ec-3e20-a726-bf557c76c3e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:95:02:d6:9f:09:66:cc:60:aa:17:a6:b9:bf:c7:71:57:78:
         b7:bd:5a:0a:32:99:6a:3a:68:0a:1f:bf:83:ec:8d:0b:35:5d:
         58:a1:96:17:dd:41:44:54:1a:09:46:53:d7:8a:59:b4:32:83:
         1c:1d:86:ed:e4:85:c6:20:6c:46:42:33:05:ff:c5:71:30:60:
         21:0f:a7:b7:83:7e:40:1b:f8:e2:6b:4d:04:c8:e6:29:35:cf:
         b2:8b:d6:dc:25:6f:df:39:78:0f:5b:07:2f:43:fc:7f:d5:b3:
         6f:b4:42:5f:63:07:05:9e:b6:c4:b3:4b:44:42:eb:d0:78:bd:
         8d:9e:2f:06:67:22:df:89:a8:65:dd:0f:d2:90:0f:df:45:9e:
         2e:d5:1c:27:fc:fd:a7:0b:d0:8f:79:7a:05:3b:f3:76:e8:ed:
         42:39:a7:cc:85:59:3f:c5:1e:1c:12:8b:2c:00:9d:70:16:58:
         3a:ab:c0:38:49:74:31:58:29:96:0a:6d:6b:f5:d1:f7:d3:02:
         ba:12:84:88:aa:7d:93:66:89:fb:cf:a0:b9:4e:f6:2a:8f:ca:
         f4:a2:f2:cc:17:19:72:b0:e0:e1:99:66:f6:c1:81:72:89:4e:
         0e:ba:9a:b6:d5:52:61:3c:79:bd:6a:b2:7c:f3:f8:bd:57:d1:
         f3:50:db:6d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWD5F59vjrljQOLT7uJQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc3OTlmN2YtNDgyNi00YWZhLTg5ZTctOGQwNDc4ZGQx
MjdmMB4XDTIyMDYxNjEyMDAwMFoXDTIyMDcyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NjNjNjJhOGEtMDZlOC00NmJmLWEwODUtZTdmYjQyNWEwZGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxgoe38hysT8+u4BjTAHjSiQKFhZ+afhbku0
cctkHY9ObaVvR648zIQk51h2tvYLSiRSVVA5ysVrpJWD8Hg/ibdgip6T8LASULTC
FPwlEdBMKBExi31uCXmU7QOOYk1Z4ZcxiOyoxMFUlYqB7t69HfaBGS72DUPz7LD1
V/Q+Ws8LjH3WjF/BFc5w6wCfQUihTqeToluRXYhjpPlWuhdz23B7ok3LiTiqMY8u
zzPzFzOKpMye6qINVzo9F41X+XPGgkRg1hLl7lsOP5dyz9anuHYKeVRn0lnCOtBP
Rq4FTuzrqVSC4GpB986zfgEmU3+UkaJFKWKFC1rfDAjzrpYc5wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFA3bVD4U6VqWpbFrB57H4BqbqH5VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5
OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0NzhkZDEyN2YvM2M3YjI2YWUtNzhlYy0z
ZTIwLWE3MjYtYmY1NTdjNzZjM2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjc3OTlmN2YtNDgyNi00YWZhLTg5
ZTctOGQwNDc4ZGQxMjdmLzY3Nzk5ZjdmLTQ4MjYtNGFmYS04OWU3LThkMDQ3OGRk
MTI3Zi5jcmwwHwYDVR0jBBgwFoAUanc9hyb3PRWaBxvVb9rqwULsJKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0
NzhkZDEyN2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgCQADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAplQLWnwlmzGCqF6a5v8dxV3i3vVoKMplqOmgKH7+D7I0LNV1YoZYX
3UFEVBoJRlPXilm0MoMcHYbt5IXGIGxGQjMF/8VxMGAhD6e3g35AG/jia00EyOYp
Nc+yi9bcJW/fOXgPWwcvQ/x/1bNvtEJfYwcFnrbEs0tEQuvQeL2Nni8GZyLfiahl
3Q/SkA/fRZ4u1Rwn/P2nC9CPeXoFO/N26O1COafMhVk/xR4cEossAJ1wFlg6q8A4
SXQxWCmWCm1r9dH30wK6EoSIqn2TZon7z6C5TvYqj8r0ovLMFxlysODhmWb2wYFy
iU4Oupq21VJhPHm9arJ88/i9V9HzUNtt
-----END CERTIFICATE-----