Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/c5d488e4-e76c-37ee-be99-8893a0f15548.roa
File:                     c5d488e4-e76c-37ee-be99-8893a0f15548.roa (raw, json)
Hash identifier:          kKt8ZUCf8lmYzLqE6xU1mbTVf0edLf/SMpJKFdkTb4s=
Subject key identifier:   F4:88:8E:89:08:69:D1:BF:66:63:FE:E5:4C:3A:D1:5D:05:E2:02:26
Certificate issuer:       /CN=872ab566-07c0-4d6b-ab98-45aed75350ff
Certificate serial:       010D0C9F4328583F08EB2752D0CD7836302442C0
Authority key identifier: BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/c5d488e4-e76c-37ee-be99-8893a0f15548.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Fri 30 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2620:107:3000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:08:eb:27:52:d0:cd:78:36:30:24:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872ab566-07c0-4d6b-ab98-45aed75350ff
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Sep 30 04:00:00 2022 GMT
        Subject: CN=4dc3a025-4257-41fe-912e-af7c1c6ec3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d0:d9:f3:23:0d:ff:d8:64:32:c9:a3:58:84:
                    a2:28:0d:98:8c:16:30:9d:0a:56:5a:e3:de:25:a4:
                    75:5e:40:44:fb:4d:06:e9:1d:7a:40:7f:39:11:fa:
                    33:1a:24:2f:c5:34:6d:11:ba:64:3b:05:8a:4c:b4:
                    74:fa:6f:2e:25:70:0b:b7:2e:0a:ab:2b:07:7d:b7:
                    69:bb:c3:77:80:b2:63:a1:1c:76:11:c0:88:4d:8c:
                    ca:16:d7:30:3b:0f:d1:e6:62:31:d8:51:74:f9:f1:
                    a6:0f:1c:ef:ab:e5:fb:e1:d5:1e:54:91:44:f3:4d:
                    7a:42:a1:77:ad:a1:88:40:50:5e:98:16:0f:a0:06:
                    26:f0:9e:71:ee:e2:01:d4:cb:c5:50:57:2a:d4:0b:
                    c6:c5:60:98:2f:86:14:91:6d:7f:e8:d5:a5:f3:02:
                    6d:e7:2c:06:01:03:b0:f5:15:f2:a0:fb:a7:09:98:
                    4e:60:be:9f:e6:fe:7b:b5:d8:4d:6d:84:39:93:ef:
                    19:a9:6a:c4:7f:5b:d7:37:14:fb:bd:5e:14:5e:15:
                    50:cc:7f:71:92:ee:2f:ca:a5:49:21:96:c1:23:f7:
                    10:e8:17:09:bc:a6:26:65:a7:9b:b9:a9:ad:1f:b9:
                    44:2b:c6:e1:78:ae:e5:71:b3:b1:0e:b9:4a:0e:41:
                    ad:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:88:8E:89:08:69:D1:BF:66:63:FE:E5:4C:3A:D1:5D:05:E2:02:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/c5d488e4-e76c-37ee-be99-8893a0f15548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/872ab566-07c0-4d6b-ab98-45aed75350ff.crl

            X509v3 Authority Key Identifier:
                keyid:BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:28:2f:3e:db:92:1c:4a:2f:7e:75:e3:53:0e:6d:04:9c:f1:
         4a:16:58:49:4f:e3:26:70:b1:87:1b:b9:b8:cd:39:51:da:96:
         94:f8:fd:2d:4d:89:a6:5d:cb:95:0a:8b:aa:c0:55:17:94:2f:
         61:1a:8e:d5:6a:3a:4b:75:38:2d:59:3c:25:9f:1b:2d:ab:58:
         7e:2a:ea:21:f2:82:ad:5f:d0:52:8e:e6:bf:3a:f6:a2:14:a2:
         74:04:0f:65:45:19:ae:00:e1:52:88:ea:39:2b:34:14:8a:30:
         4a:e8:39:2b:cf:be:d5:3f:68:5d:7b:89:79:86:d4:e2:30:74:
         60:96:f2:a2:f3:d3:08:de:8a:56:20:a8:de:df:ab:68:74:b2:
         91:af:18:ae:39:cf:85:ce:87:88:fd:c6:96:17:de:0f:52:a1:
         78:ac:a0:dc:c2:e4:fa:fe:63:32:85:97:bf:f2:cd:6a:a3:66:
         77:1f:62:8d:6a:2a:55:63:d5:fe:42:99:96:7d:16:80:e5:96:
         9a:bf:4b:9f:21:db:67:b6:af:6f:cd:e5:bc:0b:cb:d1:b5:74:
         a3:92:66:36:e7:6b:d4:1e:ae:c8:e3:ad:6a:31:33:29:63:96:
         26:43:db:0a:19:08:2b:bb:ef:c5:8e:30:c7:75:0d:65:b9:86:
         56:d2:7e:1c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD8I6ydS0M14NjAkQsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcyYWI1NjYtMDdjMC00ZDZiLWFiOTgtNDVhZWQ3NTM1
MGZmMB4XDTIyMDgyNTEyMDAwMFoXDTIyMDkzMDA0MDAwMFowLzEtMCsGA1UEAxMk
NGRjM2EwMjUtNDI1Ny00MWZlLTkxMmUtYWY3YzFjNmVjM2E2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49DZ8yMN/9hkMsmjWISiKA2YjBYwnQpWWuPe
JaR1XkBE+00G6R16QH85EfozGiQvxTRtEbpkOwWKTLR0+m8uJXALty4KqysHfbdp
u8N3gLJjoRx2EcCITYzKFtcwOw/R5mIx2FF0+fGmDxzvq+X74dUeVJFE8016QqF3
raGIQFBemBYPoAYm8J5x7uIB1MvFUFcq1AvGxWCYL4YUkW1/6NWl8wJt5ywGAQOw
9RXyoPunCZhOYL6f5v57tdhNbYQ5k+8ZqWrEf1vXNxT7vV4UXhVQzH9xku4vyqVJ
IZbBI/cQ6BcJvKYmZaebuamtH7lEK8bheK7lcbOxDrlKDkGt1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPSIjokIadG/ZmP+5Uw60V0F4gImMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NzJh
YjU2Ni0wN2MwLTRkNmItYWI5OC00NWFlZDc1MzUwZmYvYzVkNDg4ZTQtZTc2Yy0z
N2VlLWJlOTktODg5M2EwZjE1NTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODcyYWI1NjYtMDdjMC00ZDZiLWFi
OTgtNDVhZWQ3NTM1MGZmLzg3MmFiNTY2LTA3YzAtNGQ2Yi1hYjk4LTQ1YWVkNzUz
NTBmZi5jcmwwHwYDVR0jBBgwFoAUvd6idl7G8sHG2hbnuCCF1a0RZ/AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NzJhYjU2Ni0wN2MwLTRkNmItYWI5OC00NWFl
ZDc1MzUwZmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABBzAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJUoLz7bkhxKL35141MObQSc8UoWWElP4yZwsYcbubjNOVHalpT4
/S1NiaZdy5UKi6rAVReUL2EajtVqOkt1OC1ZPCWfGy2rWH4q6iHygq1f0FKO5r86
9qIUonQED2VFGa4A4VKI6jkrNBSKMEroOSvPvtU/aF17iXmG1OIwdGCW8qLz0wje
ilYgqN7fq2h0spGvGK45z4XOh4j9xpYX3g9SoXisoNzC5Pr+YzKFl7/yzWqjZncf
Yo1qKlVj1f5CmZZ9FoDllpq/S58h22e2r2/N5bwLy9G1dKOSZjbna9QersjjrWox
MyljliZD2woZCCu778WOMMd1DWW5hlbSfhw=
-----END CERTIFICATE-----