Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/1c8dd9d0-daf9-3ce0-a1b3-daad12003d6a.roa
File:                     1c8dd9d0-daf9-3ce0-a1b3-daad12003d6a.roa (raw, json)
Hash identifier:          8MZyCXwSgQKhi4Ezb+iFUJ1cmWZZizwFyqZuKDeRToY=
Subject key identifier:   1D:74:33:2F:B9:DC:24:62:6D:90:43:43:C0:24:73:03:C6:3D:BC:BF
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328583DF78FD4BCF102DA1314A47A00
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/1c8dd9d0-daf9-3ce0-a1b3-daad12003d6a.roa
Signing time:             Thu 19 May 2022 12:00:00 +0000
ROA not before:           Thu 19 May 2022 12:00:00 +0000
ROA not after:            Fri 24 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2620:108:7000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f7:8f:d4:bc:f1:02:da:13:14:a4:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: May 19 12:00:00 2022 GMT
            Not After : Jun 24 04:00:00 2022 GMT
        Subject: CN=aa4dd250-23cd-4ae9-bbee-65cd5fa58537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1a:44:20:7e:df:66:55:98:c4:87:49:1d:50:
                    a0:33:ff:b4:0d:a3:6c:93:36:6c:61:33:e5:82:78:
                    2d:f7:2c:31:5b:46:18:c1:42:85:b9:d3:b2:80:8b:
                    b8:13:a4:d0:f2:fc:de:cd:99:87:ba:3f:a3:c6:8f:
                    9c:b4:61:ae:90:4a:73:0f:04:d5:04:be:e6:a9:c3:
                    05:5d:2d:55:76:7c:fa:60:7f:56:de:82:2b:ce:07:
                    3b:54:b3:be:e3:ba:ca:33:30:b9:40:45:19:36:36:
                    aa:b1:da:d7:0a:0f:38:31:86:da:56:a0:32:4a:03:
                    3f:a1:ec:87:d6:d3:e3:5e:a9:b8:d5:f1:bf:69:55:
                    6e:f6:bc:13:1f:f5:2c:4b:04:ef:e1:95:60:75:91:
                    c3:20:d9:5c:8c:0b:00:d8:78:36:d7:b3:c7:48:3b:
                    bb:6c:d1:5d:1a:6e:12:c9:c6:3b:7c:03:d8:25:41:
                    89:e6:c9:be:10:13:b9:3a:dc:99:35:ee:64:c7:6c:
                    10:48:89:6c:a8:8d:9d:5a:e4:8a:15:32:6f:bd:22:
                    59:09:19:30:bd:bc:bb:52:2a:a3:b7:fa:c3:4c:68:
                    06:0d:ae:46:02:e4:47:0d:df:b9:13:cd:2a:96:86:
                    b2:4f:62:ab:ac:6b:76:60:92:ee:db:49:b1:9a:60:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:74:33:2F:B9:DC:24:62:6D:90:43:43:C0:24:73:03:C6:3D:BC:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/1c8dd9d0-daf9-3ce0-a1b3-daad12003d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:fe:70:a9:7e:88:4f:c7:36:02:94:53:a7:47:13:91:e6:4f:
         57:47:9d:5f:29:c9:ba:f0:f4:df:b0:de:1e:4f:a9:b3:aa:bc:
         c6:70:7b:4f:8f:e3:3d:31:21:a1:4d:31:05:ae:3c:27:bf:11:
         a5:12:fa:bb:ff:79:94:1e:04:fb:05:cc:1e:7c:61:1f:35:58:
         47:c2:28:88:c8:50:3c:ce:0c:e1:44:e3:3f:cb:fc:fd:23:32:
         9e:0d:d3:c6:07:c4:6c:13:0e:a7:87:91:75:00:66:f7:4d:f7:
         d1:3f:58:e6:da:80:41:d0:b3:15:0d:a2:59:a9:2e:53:a5:0e:
         c0:0f:98:69:b4:b7:6d:0c:ed:64:16:a4:de:b4:09:34:60:88:
         cf:57:8b:e9:3a:50:ef:1d:72:41:48:14:8b:39:97:e5:20:da:
         26:b4:94:d5:5e:05:f1:ca:9f:3b:8d:a6:fa:6d:48:58:be:35:
         15:72:7d:27:65:bc:70:50:9f:72:bb:c3:7e:c8:19:88:b7:de:
         e9:1e:ea:ac:b9:82:0d:30:0e:d7:17:4f:aa:49:ef:95:5f:e0:
         02:f7:1b:3d:39:86:cb:58:1a:74:f2:69:33:e3:94:5c:22:fb:
         2d:36:73:f5:41:28:51:7e:d9:28:61:f9:9e:b5:3b:c9:48:13:
         0c:a8:b7:05
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD33j9S88QLaExSkegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMwZWUzYmMtYzRjYS00YTM2LTk5ZWItMTQwNzM0YjE0
YTAyMB4XDTIyMDUxOTEyMDAwMFoXDTIyMDYyNDA0MDAwMFowLzEtMCsGA1UEAxMk
YWE0ZGQyNTAtMjNjZC00YWU5LWJiZWUtNjVjZDVmYTU4NTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBpEIH7fZlWYxIdJHVCgM/+0DaNskzZsYTPl
gngt9ywxW0YYwUKFudOygIu4E6TQ8vzezZmHuj+jxo+ctGGukEpzDwTVBL7mqcMF
XS1Vdnz6YH9W3oIrzgc7VLO+47rKMzC5QEUZNjaqsdrXCg84MYbaVqAySgM/oeyH
1tPjXqm41fG/aVVu9rwTH/UsSwTv4ZVgdZHDINlcjAsA2Hg217PHSDu7bNFdGm4S
ycY7fAPYJUGJ5sm+EBO5OtyZNe5kx2wQSIlsqI2dWuSKFTJvvSJZCRkwvby7Uiqj
t/rDTGgGDa5GAuRHDd+5E80qloayT2KrrGt2YJLu20mxmmA8UwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB10My+53CRibZBDQ8AkcwPGPby/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85YzBl
ZTNiYy1jNGNhLTRhMzYtOTllYi0xNDA3MzRiMTRhMDIvMWM4ZGQ5ZDAtZGFmOS0z
Y2UwLWExYjMtZGFhZDEyMDAzZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWMwZWUzYmMtYzRjYS00YTM2LTk5
ZWItMTQwNzM0YjE0YTAyLzljMGVlM2JjLWM0Y2EtNGEzNi05OWViLTE0MDczNGIx
NGEwMi5jcmwwHwYDVR0jBBgwFoAUbHi2GW1DB4Qbn1t64u/ku1ZufUMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85YzBlZTNiYy1jNGNhLTRhMzYtOTllYi0xNDA3
MzRiMTRhMDIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABCHAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFz+cKl+iE/HNgKUU6dHE5HmT1dHnV8pybrw9N+w3h5PqbOqvMZw
e0+P4z0xIaFNMQWuPCe/EaUS+rv/eZQeBPsFzB58YR81WEfCKIjIUDzODOFE4z/L
/P0jMp4N08YHxGwTDqeHkXUAZvdN99E/WObagEHQsxUNolmpLlOlDsAPmGm0t20M
7WQWpN60CTRgiM9Xi+k6UO8dckFIFIs5l+Ug2ia0lNVeBfHKnzuNpvptSFi+NRVy
fSdlvHBQn3K7w37IGYi33uke6qy5gg0wDtcXT6pJ75Vf4AL3Gz05hstYGnTyaTPj
lFwi+y02c/VBKFF+2Shh+Z61O8lIEwyotwU=
-----END CERTIFICATE-----