Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/8c5977fe-b35d-3b97-a6a0-609fecf83ca6.roa
File:                     8c5977fe-b35d-3b97-a6a0-609fecf83ca6.roa (raw, json)
Hash identifier:          o10tuyLZcBTQgwX8QVK5XRBHPiLQZnmlMqDRHHGUasE=
Subject key identifier:   F8:C8:C0:2B:DB:3A:A9:C5:FE:8A:F5:90:A5:3E:15:F9:10:D9:F5:00
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328583CE5555F52F790BC8D73BDF780
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/8c5977fe-b35d-3b97-a6a0-609fecf83ca6.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2620:108:7000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e5:55:5f:52:f7:90:bc:8d:73:bd:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=fb3e6dc7-f73b-43a0-9ec8-9e116af73e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:8c:0b:ed:76:80:a1:a1:24:84:39:04:06:
                    78:79:f8:a4:43:b2:e6:ea:4f:f3:4a:41:1c:60:07:
                    f3:f6:f9:33:69:98:0a:7f:84:27:08:2c:02:ca:6f:
                    0e:4a:44:c0:94:a9:9a:ea:0e:26:a3:9c:05:48:16:
                    08:87:01:4a:e8:8e:fb:2a:e4:d0:fd:ad:fd:14:2c:
                    5f:f4:a4:c8:f2:20:45:e7:96:7b:8f:9b:22:20:bf:
                    87:b7:43:ff:f7:e6:51:41:7d:88:6d:30:22:4f:81:
                    56:40:d3:b9:a9:df:c2:2a:38:7a:6e:83:ba:45:29:
                    09:a0:d1:d3:de:10:1e:78:46:35:a3:6d:87:de:6f:
                    2c:67:e5:b5:94:41:88:ce:bd:51:04:17:7c:3c:1a:
                    da:c6:e4:96:41:5d:83:80:08:e6:ff:cc:d9:0f:19:
                    fb:33:af:9d:ba:5d:55:7b:52:09:49:c2:7d:cb:73:
                    5a:c8:88:49:8a:86:bd:da:5f:14:8b:4f:bb:27:2f:
                    2c:b1:c5:c5:b7:3d:1d:16:de:c9:0e:d5:16:2c:69:
                    24:df:ca:ed:bb:88:10:6a:be:fa:bb:91:3f:ba:f7:
                    2d:93:55:8e:84:6f:49:6d:83:74:8a:71:a2:97:7e:
                    94:72:a9:a1:6d:4a:5a:50:e5:43:8b:e9:9a:4a:3b:
                    65:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C8:C0:2B:DB:3A:A9:C5:FE:8A:F5:90:A5:3E:15:F9:10:D9:F5:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/8c5977fe-b35d-3b97-a6a0-609fecf83ca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:73:7d:0a:a0:e8:2f:e4:0f:6e:8c:78:90:d9:ad:1e:43:f7:
         1a:8d:c8:40:3b:32:42:7e:c0:0b:23:d8:eb:f4:44:f9:dc:a3:
         27:e6:28:66:6a:a2:76:35:9f:85:81:63:ac:81:a9:58:92:e1:
         96:e7:92:37:f7:56:42:75:b7:11:3a:05:d7:ca:30:bd:ef:16:
         1d:fc:59:89:e8:c6:9e:da:0d:da:20:57:21:ea:04:56:de:e6:
         8a:b3:23:c7:38:65:31:d5:d3:7f:0f:6b:64:bd:da:38:95:4a:
         78:f1:1f:c0:33:59:b5:f3:26:26:ed:f3:95:2e:11:0e:0e:5c:
         18:36:97:97:d7:2b:ac:9d:fb:42:f1:05:5f:62:98:fd:3b:19:
         80:1e:29:5b:65:bc:8f:68:f7:11:1a:56:2a:51:49:c5:e9:b4:
         7e:21:8e:83:37:77:b4:b9:6c:3f:14:ac:8e:ca:69:97:7c:67:
         41:cb:c8:cf:a0:44:aa:8a:b3:88:8e:d4:e3:6b:52:79:7f:f5:
         37:35:79:c6:a7:ca:a4:18:c3:42:18:a8:94:34:7c:95:73:b5:
         0a:4a:ce:ba:9f:18:84:a8:f8:15:8d:6e:a7:fa:e1:06:58:25:
         ba:8a:db:c5:68:5a:0d:93:34:af:51:a4:33:8d:ae:78:bd:15:
         09:bb:17:6f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDzlVV9S95C8jXO994AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMwZWUzYmMtYzRjYS00YTM2LTk5ZWItMTQwNzM0YjE0
YTAyMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
ZmIzZTZkYzctZjczYi00M2EwLTllYzgtOWUxMTZhZjczZTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApniMC+12gKGhJIQ5BAZ4efikQ7Lm6k/zSkEc
YAfz9vkzaZgKf4QnCCwCym8OSkTAlKma6g4mo5wFSBYIhwFK6I77KuTQ/a39FCxf
9KTI8iBF55Z7j5siIL+Ht0P/9+ZRQX2IbTAiT4FWQNO5qd/CKjh6boO6RSkJoNHT
3hAeeEY1o22H3m8sZ+W1lEGIzr1RBBd8PBraxuSWQV2DgAjm/8zZDxn7M6+dul1V
e1IJScJ9y3NayIhJioa92l8Ui0+7Jy8sscXFtz0dFt7JDtUWLGkk38rtu4gQar76
u5E/uvctk1WOhG9JbYN0inGil36UcqmhbUpaUOVDi+maSjtlRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPjIwCvbOqnF/or1kKU+FfkQ2fUAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85YzBl
ZTNiYy1jNGNhLTRhMzYtOTllYi0xNDA3MzRiMTRhMDIvOGM1OTc3ZmUtYjM1ZC0z
Yjk3LWE2YTAtNjA5ZmVjZjgzY2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWMwZWUzYmMtYzRjYS00YTM2LTk5
ZWItMTQwNzM0YjE0YTAyLzljMGVlM2JjLWM0Y2EtNGEzNi05OWViLTE0MDczNGIx
NGEwMi5jcmwwHwYDVR0jBBgwFoAUbHi2GW1DB4Qbn1t64u/ku1ZufUMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85YzBlZTNiYy1jNGNhLTRhMzYtOTllYi0xNDA3
MzRiMTRhMDIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABCHAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIxzfQqg6C/kD26MeJDZrR5D9xqNyEA7MkJ+wAsj2Ov0RPncoyfm
KGZqonY1n4WBY6yBqViS4Zbnkjf3VkJ1txE6BdfKML3vFh38WYnoxp7aDdogVyHq
BFbe5oqzI8c4ZTHV038Pa2S92jiVSnjxH8AzWbXzJibt85UuEQ4OXBg2l5fXK6yd
+0LxBV9imP07GYAeKVtlvI9o9xEaVipRScXptH4hjoM3d7S5bD8UrI7KaZd8Z0HL
yM+gRKqKs4iO1ONrUnl/9Tc1ecanyqQYw0IYqJQ0fJVztQpKzrqfGISo+BWNbqf6
4QZYJbqK28VoWg2TNK9RpDONrni9FQm7F28=
-----END CERTIFICATE-----