Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/fed9c766-9da8-3dd2-a3f4-ffc9b4c46d88.roa
File:                     fed9c766-9da8-3dd2-a3f4-ffc9b4c46d88.roa (raw, json)
Hash identifier:          dhz1mkbZGG4lUOQMHtuYGFnrVEJhvBLkfh0kq5lv/q8=
Subject key identifier:   E1:7A:D6:0A:62:DF:13:1E:59:3E:D3:78:3A:CF:8F:9E:C7:BF:B3:AC
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583C6FFE8C52604B2EDCFD575940
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/fed9c766-9da8-3dd2-a3f4-ffc9b4c46d88.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        2600:9000::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:fe:8c:52:60:4b:2e:dc:fd:57:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=feb834ca-85ba-437a-ab92-62bd815e9f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5d:e4:ba:79:d1:74:07:64:05:c3:7b:98:08:
                    e7:b4:eb:b2:9b:11:34:06:db:82:60:cf:69:dd:a8:
                    be:f2:5b:0b:58:f1:d2:90:c6:f3:8b:39:9b:72:d0:
                    8d:f4:d4:ee:f6:20:0d:27:b1:60:a4:97:5a:a1:d3:
                    38:72:3d:7c:f5:f6:3a:a4:c4:c4:17:68:c0:f0:bf:
                    ab:53:9a:b1:64:53:45:32:6b:a9:c9:b7:6b:c4:f4:
                    b6:d8:9b:13:e3:00:d2:df:c0:58:02:e8:13:ab:e2:
                    ec:61:06:f8:83:cd:d4:5f:f5:8f:bf:2c:13:60:c1:
                    66:4e:04:c9:eb:63:3f:d9:dd:ad:dc:ec:02:f5:93:
                    01:00:8d:0e:2a:18:b0:8e:29:30:ce:4c:0e:3e:99:
                    29:8a:88:27:12:6f:fc:b1:98:e6:bd:ee:df:e1:4b:
                    7f:8f:10:95:f0:34:9d:9c:a9:38:c3:21:03:0d:01:
                    62:19:30:ba:b5:13:60:8f:6d:58:62:25:95:88:fe:
                    3e:83:1f:38:46:38:f0:0d:05:15:9e:43:20:c4:71:
                    c6:32:cd:53:c3:1e:fe:6f:b1:60:c9:78:5a:85:fc:
                    57:f3:8c:c0:4a:f5:85:cb:fd:e4:83:5c:14:17:d0:
                    2a:bd:3c:cf:32:d6:d2:aa:09:cc:72:1e:87:54:1e:
                    63:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7A:D6:0A:62:DF:13:1E:59:3E:D3:78:3A:CF:8F:9E:C7:BF:B3:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/fed9c766-9da8-3dd2-a3f4-ffc9b4c46d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:62:20:dd:d6:63:ac:c1:7a:4b:f3:24:82:06:95:9d:30:b4:
         ee:36:dd:0a:6f:9a:53:7a:6f:5f:35:25:fc:b9:98:91:d5:81:
         8a:06:df:a1:92:88:d3:4f:4c:ab:fe:ab:59:f8:af:0e:f7:7f:
         2c:62:f4:90:67:92:84:ff:ef:fb:7b:e7:93:2e:6a:71:f2:ab:
         69:ae:48:ed:fb:d8:14:13:68:59:c6:fb:62:04:76:d0:9a:02:
         fb:01:0d:5d:6f:c9:e5:5b:7d:4f:de:63:11:e4:11:6b:b3:cb:
         ce:67:98:88:ce:29:13:59:8c:e3:cb:3a:97:56:56:88:72:50:
         b1:53:ea:02:43:8c:78:5d:a3:7e:17:2e:9f:a1:5a:f9:65:73:
         14:f7:9d:17:0f:c6:bb:a2:07:6a:ab:ae:46:48:85:0d:b8:74:
         ca:d1:b5:c7:98:b6:17:8c:0a:e4:8e:7c:88:d2:ec:1a:18:38:
         1b:f2:3a:8f:2c:3a:0b:d8:7a:2d:f1:43:a6:52:4c:c4:49:fb:
         be:df:af:97:ea:ec:ba:10:12:e8:33:c7:e4:9f:35:8e:2c:8d:
         32:eb:2a:15:3e:7f:68:c2:92:df:4b:ab:cf:1f:97:86:7f:6b:
         d5:d8:de:b0:ca:07:47:d2:b8:d4:b8:f4:c1:2d:e9:80:81:ad:
         dd:06:59:f6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWDxv/oxSYEsu3P1XWUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc3OTlmN2YtNDgyNi00YWZhLTg5ZTctOGQwNDc4ZGQx
MjdmMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
ZmViODM0Y2EtODViYS00MzdhLWFiOTItNjJiZDgxNWU5ZjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl13kunnRdAdkBcN7mAjntOuymxE0BtuCYM9p
3ai+8lsLWPHSkMbzizmbctCN9NTu9iANJ7FgpJdaodM4cj189fY6pMTEF2jA8L+r
U5qxZFNFMmupybdrxPS22JsT4wDS38BYAugTq+LsYQb4g83UX/WPvywTYMFmTgTJ
62M/2d2t3OwC9ZMBAI0OKhiwjikwzkwOPpkpiognEm/8sZjmve7f4Ut/jxCV8DSd
nKk4wyEDDQFiGTC6tRNgj21YYiWViP4+gx84RjjwDQUVnkMgxHHGMs1Twx7+b7Fg
yXhahfxX84zASvWFy/3kg1wUF9AqvTzPMtbSqgnMch6HVB5jhQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOF61gpi3xMeWT7TeDrPj57Hv7OsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5
OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0NzhkZDEyN2YvZmVkOWM3NjYtOWRhOC0z
ZGQyLWEzZjQtZmZjOWI0YzQ2ZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjc3OTlmN2YtNDgyNi00YWZhLTg5
ZTctOGQwNDc4ZGQxMjdmLzY3Nzk5ZjdmLTQ4MjYtNGFmYS04OWU3LThkMDQ3OGRk
MTI3Zi5jcmwwHwYDVR0jBBgwFoAUanc9hyb3PRWaBxvVb9rqwULsJKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82Nzc5OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0
NzhkZDEyN2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgCQADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQADYiDd1mOswXpL8ySCBpWdMLTuNt0Kb5pTem9fNSX8uZiR1YGKBt+h
kojTT0yr/qtZ+K8O938sYvSQZ5KE/+/7e+eTLmpx8qtprkjt+9gUE2hZxvtiBHbQ
mgL7AQ1db8nlW31P3mMR5BFrs8vOZ5iIzikTWYzjyzqXVlaIclCxU+oCQ4x4XaN+
Fy6foVr5ZXMU950XD8a7ogdqq65GSIUNuHTK0bXHmLYXjArkjnyI0uwaGDgb8jqP
LDoL2Hot8UOmUkzESfu+36+X6uy6EBLoM8fknzWOLI0y6yoVPn9owpLfS6vPH5eG
f2vV2N6wygdH0rjUuPTBLemAga3dBln2
-----END CERTIFICATE-----