Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/d4acc118-ecad-39d5-9ca7-62fd460c7407.roa
File:                     d4acc118-ecad-39d5-9ca7-62fd460c7407.roa (raw, json)
Hash identifier:          Gn5XKGuCmWfuQ3lNaO47mWFIl8MNqa/KIrxTNKLuCQ4=
Subject key identifier:   04:DF:FA:7D:4C:AE:B9:4E:02:BA:DD:39:ED:8E:6F:79:2D:FF:ED:2C
Certificate issuer:       /CN=872ab566-07c0-4d6b-ab98-45aed75350ff
Certificate serial:       010D0C9F4328583F30085830CCE9D644D736B840
Authority key identifier: BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/d4acc118-ecad-39d5-9ca7-62fd460c7407.roa
Signing time:             Thu 08 Sep 2022 12:00:00 +0000
ROA not before:           Thu 08 Sep 2022 12:00:00 +0000
ROA not after:            Fri 14 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2620:107:3000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:30:08:58:30:cc:e9:d6:44:d7:36:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872ab566-07c0-4d6b-ab98-45aed75350ff
        Validity
            Not Before: Sep  8 12:00:00 2022 GMT
            Not After : Oct 14 04:00:00 2022 GMT
        Subject: CN=d37f42ed-f33b-4753-84de-e3edbc8a46ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f0:57:f1:f6:25:ab:9d:06:83:d5:24:ba:35:
                    dc:e7:a6:dd:fe:06:97:d1:12:cf:b1:36:fb:d8:05:
                    ec:ee:84:6c:36:d3:82:43:6d:d9:ac:e9:16:2a:f5:
                    e2:c4:ef:34:04:95:69:2a:43:20:d5:37:3b:ac:9c:
                    99:5b:7c:b8:0f:52:d2:a7:f5:2a:81:28:df:cf:0b:
                    99:bf:72:6b:21:17:e3:44:86:41:19:89:c2:be:59:
                    c9:ef:94:ee:57:57:af:e1:41:ec:b7:51:49:80:8b:
                    ad:59:97:3a:5a:a0:5f:f2:9a:69:16:ca:a5:6a:02:
                    cf:14:6f:c8:52:88:a4:33:2b:d3:d5:d4:9a:0f:0f:
                    ee:98:de:b1:3c:6f:9c:a3:03:31:f4:e1:b4:03:55:
                    ef:2a:06:c2:39:b4:4c:1a:e6:5c:ad:4e:73:6c:f8:
                    c3:76:35:4e:74:0d:d8:c0:4b:21:40:fb:1a:e2:e3:
                    8f:28:1b:4b:19:82:05:f1:14:e4:15:03:c4:84:63:
                    74:c9:3d:a2:17:e2:bd:84:97:d6:94:a4:93:b8:a2:
                    6e:7c:9e:a6:7d:23:81:bd:70:2a:e3:6b:c3:16:82:
                    ac:6c:6d:68:8e:14:b2:e2:76:e0:de:d7:2e:85:6a:
                    6e:07:08:5c:57:d7:5c:f6:30:c0:fb:26:bb:29:4d:
                    a9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DF:FA:7D:4C:AE:B9:4E:02:BA:DD:39:ED:8E:6F:79:2D:FF:ED:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/d4acc118-ecad-39d5-9ca7-62fd460c7407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/872ab566-07c0-4d6b-ab98-45aed75350ff.crl

            X509v3 Authority Key Identifier:
                keyid:BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:da:d7:8b:28:2f:ea:bd:cb:1d:3c:f2:66:0f:a0:d5:52:6b:
         27:f3:82:21:9c:a0:51:fc:7c:77:11:cb:b1:99:bf:2b:63:87:
         63:09:67:bc:33:44:7b:32:23:91:8d:e7:48:1f:54:73:ed:7b:
         78:0f:27:5c:27:0a:e2:88:74:83:9a:3d:9c:fc:ba:e1:16:5b:
         04:51:9b:2f:54:c1:92:5a:67:be:5f:e3:a1:2c:83:f4:6c:cc:
         89:44:2a:ea:cf:69:2e:18:4b:81:24:52:34:d9:c9:84:9c:87:
         eb:68:7c:be:c2:6e:cf:0d:f4:63:aa:28:a9:9b:5d:4d:37:08:
         18:91:46:8d:ae:12:c5:65:86:48:bd:18:f5:64:2e:29:87:2a:
         f8:37:ce:cf:2a:f6:5b:5e:2c:84:fc:78:8f:01:f2:60:b8:fa:
         93:5d:cc:c2:e4:99:ca:a6:3a:da:c3:0e:b3:b9:1a:63:bd:54:
         7f:b4:8e:66:a7:25:1b:0b:70:a3:88:53:6c:66:14:0d:51:91:
         4f:d1:de:79:41:f0:1a:3d:87:9a:68:07:13:66:21:7c:83:44:
         7c:37:61:b8:ae:c9:4c:af:7a:9b:23:66:85:3a:d7:c5:f9:3a:
         2d:5a:89:85:2a:ce:82:c5:f4:4e:2f:e9:87:45:11:c3:23:6a:
         7d:86:d4:91
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD8wCFgwzOnWRNc2uEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcyYWI1NjYtMDdjMC00ZDZiLWFiOTgtNDVhZWQ3NTM1
MGZmMB4XDTIyMDkwODEyMDAwMFoXDTIyMTAxNDA0MDAwMFowLzEtMCsGA1UEAxMk
ZDM3ZjQyZWQtZjMzYi00NzUzLTg0ZGUtZTNlZGJjOGE0NmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/BX8fYlq50Gg9UkujXc56bd/gaX0RLPsTb7
2AXs7oRsNtOCQ23ZrOkWKvXixO80BJVpKkMg1Tc7rJyZW3y4D1LSp/UqgSjfzwuZ
v3JrIRfjRIZBGYnCvlnJ75TuV1ev4UHst1FJgIutWZc6WqBf8pppFsqlagLPFG/I
UoikMyvT1dSaDw/umN6xPG+cowMx9OG0A1XvKgbCObRMGuZcrU5zbPjDdjVOdA3Y
wEshQPsa4uOPKBtLGYIF8RTkFQPEhGN0yT2iF+K9hJfWlKSTuKJufJ6mfSOBvXAq
42vDFoKsbG1ojhSy4nbg3tcuhWpuBwhcV9dc9jDA+ya7KU2pjwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFATf+n1MrrlOArrdOe2Ob3kt/+0sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NzJh
YjU2Ni0wN2MwLTRkNmItYWI5OC00NWFlZDc1MzUwZmYvZDRhY2MxMTgtZWNhZC0z
OWQ1LTljYTctNjJmZDQ2MGM3NDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODcyYWI1NjYtMDdjMC00ZDZiLWFi
OTgtNDVhZWQ3NTM1MGZmLzg3MmFiNTY2LTA3YzAtNGQ2Yi1hYjk4LTQ1YWVkNzUz
NTBmZi5jcmwwHwYDVR0jBBgwFoAUvd6idl7G8sHG2hbnuCCF1a0RZ/AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NzJhYjU2Ni0wN2MwLTRkNmItYWI5OC00NWFl
ZDc1MzUwZmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABBzAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB7a14soL+q9yx088mYPoNVSayfzgiGcoFH8fHcRy7GZvytjh2MJ
Z7wzRHsyI5GN50gfVHPte3gPJ1wnCuKIdIOaPZz8uuEWWwRRmy9UwZJaZ75f46Es
g/RszIlEKurPaS4YS4EkUjTZyYSch+tofL7Cbs8N9GOqKKmbXU03CBiRRo2uEsVl
hki9GPVkLimHKvg3zs8q9lteLIT8eI8B8mC4+pNdzMLkmcqmOtrDDrO5GmO9VH+0
jmanJRsLcKOIU2xmFA1RkU/R3nlB8Bo9h5poBxNmIXyDRHw3YbiuyUyvepsjZoU6
18X5Oi1aiYUqzoLF9E4v6YdFEcMjan2G1JE=
-----END CERTIFICATE-----