Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ed0197f7-c98c-40d8-becd-09a47e58415b/ea8a4d82-faeb-3b4c-877c-3d6d19274dbb.roa
File:                     ea8a4d82-faeb-3b4c-877c-3d6d19274dbb.roa (raw, json)
Hash identifier:          HEPVIO+2X02dlgV24fzAfe7Ck6fZnc9QH7nDWJlx338=
Subject key identifier:   B1:D1:D0:D8:F2:2C:02:33:4D:CB:F1:22:E9:6E:60:4D:8F:8D:18:7D
Certificate issuer:       /CN=ed0197f7-c98c-40d8-becd-09a47e58415b
Certificate serial:       010D0C9F4328584593B3B5A309455BBFB845E500
Authority key identifier: FE:13:5D:ED:56:6A:39:98:14:4E:99:4C:72:77:4B:DF:EC:2D:52:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ed0197f7-c98c-40d8-becd-09a47e58415b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ed0197f7-c98c-40d8-becd-09a47e58415b/ea8a4d82-faeb-3b4c-877c-3d6d19274dbb.roa
Signing time:             Wed 17 Apr 2024 15:32:00 +0000
ROA not before:           Wed 17 Apr 2024 15:32:00 +0000
ROA not after:            Tue 16 Jul 2024 15:32:00 +0000
asID:                     399970
IP address blocks:        2620:10:6000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:b3:b5:a3:09:45:5b:bf:b8:45:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed0197f7-c98c-40d8-becd-09a47e58415b
        Validity
            Not Before: Apr 17 15:32:00 2024 GMT
            Not After : Jul 16 15:32:00 2024 GMT
        Subject: CN=1228832c-de80-45c8-a961-95d3eae5df48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c7:98:e5:40:c1:53:a6:d6:13:f0:53:49:77:
                    e9:14:41:c9:bb:2e:6a:1e:33:cb:67:4e:17:4b:0b:
                    43:ce:f1:e3:d3:6b:1e:af:c9:d5:df:13:5e:49:30:
                    dc:9f:75:a9:12:29:8d:96:b8:7d:f0:7f:3b:85:de:
                    37:ec:37:6e:f8:aa:d3:f1:29:63:9a:2a:e5:01:90:
                    29:2d:8f:0a:b4:d2:1f:68:67:09:c1:37:c2:e6:05:
                    91:47:54:9b:39:9f:bb:fd:2a:4e:48:6a:3d:0e:43:
                    4e:23:47:bf:bc:12:4d:88:8c:0c:32:4a:32:0c:22:
                    93:75:cb:f0:d5:25:15:a7:81:eb:3a:0e:c7:c3:41:
                    8e:c6:5b:3b:11:72:fa:a4:65:d4:fe:b4:33:23:a1:
                    7a:ef:20:54:69:ef:c2:92:45:cc:55:a5:19:1c:55:
                    8d:1f:57:f6:bb:2e:28:56:d3:d2:eb:b5:3b:0a:0d:
                    79:03:f3:5b:1a:6d:ee:08:ba:94:51:1e:44:63:f6:
                    35:e9:74:9e:20:17:63:97:ab:dd:45:40:25:1f:7e:
                    3a:19:60:42:f0:64:af:ff:78:1a:ca:bf:a5:47:5a:
                    7d:84:0b:7c:b0:8b:c2:93:20:c8:fe:54:5c:f8:38:
                    f9:9d:0b:30:f7:22:f8:9c:be:c5:b2:15:e9:e7:8b:
                    a7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D1:D0:D8:F2:2C:02:33:4D:CB:F1:22:E9:6E:60:4D:8F:8D:18:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ed0197f7-c98c-40d8-becd-09a47e58415b/ea8a4d82-faeb-3b4c-877c-3d6d19274dbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ed0197f7-c98c-40d8-becd-09a47e58415b/ed0197f7-c98c-40d8-becd-09a47e58415b.crl

            X509v3 Authority Key Identifier:
                keyid:FE:13:5D:ED:56:6A:39:98:14:4E:99:4C:72:77:4B:DF:EC:2D:52:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ed0197f7-c98c-40d8-becd-09a47e58415b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:31:42:23:55:f1:df:53:00:ad:f7:68:b0:7a:37:71:67:e5:
         96:06:94:0b:81:5d:f7:2e:f7:32:10:63:ca:8f:87:a6:3c:0b:
         53:b7:8c:a9:34:f2:ac:57:73:c1:6e:04:9f:ac:37:c4:ec:e9:
         e5:a9:43:85:19:57:06:98:ab:e5:44:e9:20:ab:fc:e1:73:8b:
         40:ae:23:34:5f:fe:18:27:54:4b:c8:a1:a8:ef:62:3d:fe:6f:
         52:e0:42:0a:e9:e9:c8:de:9e:b9:c9:29:cb:33:53:90:18:77:
         67:dc:ad:bf:c8:7b:38:2c:06:1d:e3:5b:d6:34:ee:f8:6f:ba:
         1d:2c:22:1a:39:94:37:40:39:bd:9f:fd:b1:d3:84:d7:70:a4:
         16:2d:3a:a6:33:e9:02:8a:a9:41:4c:e4:e4:4d:c0:be:5d:20:
         64:79:b1:99:08:b5:55:98:7e:04:18:01:b6:2a:05:3d:91:b4:
         b7:ff:60:07:b4:f2:a5:2b:f7:f9:7e:37:94:79:33:b0:3b:43:
         39:fe:56:5a:e1:e3:ea:ba:fa:98:e8:f3:86:0b:89:1a:3c:dc:
         78:56:f5:2e:e7:a5:6f:4b:64:4b:a1:8c:07:c2:0d:9f:92:a4:
         59:21:dd:86:70:76:4d:5f:3e:ef:05:93:a9:fe:48:49:08:6a:
         97:f7:b1:16
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWTs7WjCUVbv7hF5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQwMTk3ZjctYzk4Yy00MGQ4LWJlY2QtMDlhNDdlNTg0
MTViMB4XDTI0MDQxNzE1MzIwMFoXDTI0MDcxNjE1MzIwMFowLzEtMCsGA1UEAxMk
MTIyODgzMmMtZGU4MC00NWM4LWE5NjEtOTVkM2VhZTVkZjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgceY5UDBU6bWE/BTSXfpFEHJuy5qHjPLZ04X
SwtDzvHj02ser8nV3xNeSTDcn3WpEimNlrh98H87hd437Ddu+KrT8SljmirlAZAp
LY8KtNIfaGcJwTfC5gWRR1SbOZ+7/SpOSGo9DkNOI0e/vBJNiIwMMkoyDCKTdcvw
1SUVp4HrOg7Hw0GOxls7EXL6pGXU/rQzI6F67yBUae/CkkXMVaUZHFWNH1f2uy4o
VtPS67U7Cg15A/NbGm3uCLqUUR5EY/Y16XSeIBdjl6vdRUAlH346GWBC8GSv/3ga
yr+lR1p9hAt8sIvCkyDI/lRc+Dj5nQsw9yL4nL7FshXp54unhQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLHR0NjyLAIzTcvxIuluYE2PjRh9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lZDAx
OTdmNy1jOThjLTQwZDgtYmVjZC0wOWE0N2U1ODQxNWIvZWE4YTRkODItZmFlYi0z
YjRjLTg3N2MtM2Q2ZDE5Mjc0ZGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWQwMTk3ZjctYzk4Yy00MGQ4LWJl
Y2QtMDlhNDdlNTg0MTViL2VkMDE5N2Y3LWM5OGMtNDBkOC1iZWNkLTA5YTQ3ZTU4
NDE1Yi5jcmwwHwYDVR0jBBgwFoAU/hNd7VZqOZgUTplMcndL3+wtUngwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9lZDAxOTdmNy1jOThjLTQwZDgtYmVjZC0wOWE0
N2U1ODQxNWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAEGAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH0xQiNV8d9TAK33aLB6N3Fn5ZYGlAuBXfcu9zIQY8qPh6Y8C1O3
jKk08qxXc8FuBJ+sN8Ts6eWpQ4UZVwaYq+VE6SCr/OFzi0CuIzRf/hgnVEvIoajv
Yj3+b1LgQgrp6cjenrnJKcszU5AYd2fcrb/IezgsBh3jW9Y07vhvuh0sIho5lDdA
Ob2f/bHThNdwpBYtOqYz6QKKqUFM5ORNwL5dIGR5sZkItVWYfgQYAbYqBT2RtLf/
YAe08qUr9/l+N5R5M7A7Qzn+Vlrh4+q6+pjo84YLiRo83HhW9S7npW9LZEuhjAfC
DZ+SpFkh3YZwdk1fPu8Fk6n+SEkIapf3sRY=
-----END CERTIFICATE-----