Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/752a5de9-c9c6-3430-8e12-1180364b55d3.roa
File:                     752a5de9-c9c6-3430-8e12-1180364b55d3.roa (raw, json)
Hash identifier:          CQdjWAE4apX5CD7XUL+BEBmmdXfnv9JE+C8sR6qvtgo=
Subject key identifier:   EE:C7:F4:88:95:63:47:97:4B:40:22:85:17:D3:80:1E:D3:32:44:CB
Certificate issuer:       /CN=a0839207-1494-4e82-8648-ab9b9567c70f
Certificate serial:       010D0C9F4328583D952712AB6D58E3BB96133E00
Authority key identifier: 10:18:D5:99:4E:8F:9F:DE:FE:93:63:56:D5:AA:12:F5:6F:98:D9:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/752a5de9-c9c6-3430-8e12-1180364b55d3.roa
Signing time:             Fri 15 Apr 2022 04:00:00 +0000
ROA not before:           Fri 15 Apr 2022 04:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2600:f000::/24 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:95:27:12:ab:6d:58:e3:bb:96:13:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0839207-1494-4e82-8648-ab9b9567c70f
        Validity
            Not Before: Apr 15 04:00:00 2022 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=e15b8d6d-4d4e-47d5-88e2-0498a4a455e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:aa:6b:f8:60:46:d4:79:7d:0b:1e:ce:53:0b:
                    c5:fb:cb:63:ef:aa:9f:79:ad:26:78:2f:15:fa:3e:
                    42:81:f5:71:c4:3f:3a:6c:1c:d9:4c:49:2d:e9:76:
                    e1:91:d0:9d:f5:24:93:79:26:ab:9b:06:38:fa:28:
                    47:48:6c:38:43:2f:e8:35:2f:4d:00:60:33:14:7c:
                    67:fa:34:d3:0e:df:33:6f:3f:97:b0:1e:89:4a:3b:
                    a9:1a:20:c3:a8:c6:ec:59:f3:8f:e4:ab:ca:c9:89:
                    85:80:b1:b5:6c:32:7b:fc:4f:ab:96:2b:a8:8c:85:
                    17:18:ef:71:05:a9:e4:a7:fd:61:df:d2:83:3c:2f:
                    0e:3d:33:ce:c9:60:7f:df:b3:27:28:78:8f:86:53:
                    25:8c:5b:7d:a0:c4:e8:2a:9e:3b:6f:a0:f9:1b:85:
                    15:ac:a1:f2:ca:78:c6:d5:9d:1a:ca:53:88:15:0f:
                    cb:79:b3:a3:f1:47:6b:3c:2d:88:a6:b2:8e:0a:f6:
                    0d:91:0d:1e:15:fd:06:e6:08:4b:00:6d:fe:d6:93:
                    5c:8b:58:a3:0c:ab:16:26:bc:79:93:fe:10:94:c0:
                    57:34:ca:79:c2:9e:5b:64:d5:d5:aa:34:ef:44:4e:
                    07:ce:00:9e:fc:0d:90:68:7a:60:27:c1:00:64:99:
                    fd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C7:F4:88:95:63:47:97:4B:40:22:85:17:D3:80:1E:D3:32:44:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/752a5de9-c9c6-3430-8e12-1180364b55d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/a0839207-1494-4e82-8648-ab9b9567c70f.crl

            X509v3 Authority Key Identifier:
                keyid:10:18:D5:99:4E:8F:9F:DE:FE:93:63:56:D5:AA:12:F5:6F:98:D9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f000::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:42:ce:07:e1:a3:59:bc:e0:09:9f:a8:92:d2:d6:c5:d8:17:
         93:9c:d5:99:24:0c:a0:27:e2:ea:0a:93:3a:71:d9:ba:4a:dc:
         3e:21:84:32:78:d3:57:52:2a:a8:dd:43:b6:4f:22:e9:a0:c9:
         9b:0e:08:5c:ff:5e:98:92:3d:8d:72:bc:e5:f0:e9:1e:25:9b:
         26:5e:04:7e:1d:f1:d7:08:15:be:ef:8f:f1:5e:5b:79:4e:63:
         4a:fa:45:09:93:a5:04:2b:96:c9:50:1e:75:06:47:2d:0e:0d:
         76:6a:1d:02:47:91:1f:17:8f:93:a9:ea:ae:f1:61:b7:88:c4:
         8b:87:20:64:b4:11:59:c6:f2:f8:cd:66:9d:6b:76:13:b9:96:
         ba:38:0b:82:b7:24:be:8d:e0:6f:29:e9:74:e0:62:50:c5:0b:
         f9:f5:c3:b5:43:00:86:30:a3:8e:55:58:3d:fb:a1:c2:75:ea:
         7c:71:f6:3d:44:c0:b1:d7:00:2e:2e:39:68:36:3f:13:88:6c:
         bd:7b:33:dd:aa:4c:ec:15:93:05:63:5c:cd:9f:b7:14:29:4d:
         db:ec:92:e2:19:6e:02:2c:71:13:47:84:26:15:1f:08:a8:6d:
         68:cb:bb:80:3c:00:04:3b:cb:aa:07:14:32:05:d0:e0:42:a7:
         61:c6:85:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2VJxKrbVjju5YTPgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTA4MzkyMDctMTQ5NC00ZTgyLTg2NDgtYWI5Yjk1Njdj
NzBmMB4XDTIyMDQxNTA0MDAwMFoXDTIyMDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZTE1YjhkNmQtNGQ0ZS00N2Q1LTg4ZTItMDQ5OGE0YTQ1NWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmapr+GBG1Hl9Cx7OUwvF+8tj76qfea0meC8V
+j5CgfVxxD86bBzZTEkt6XbhkdCd9SSTeSarmwY4+ihHSGw4Qy/oNS9NAGAzFHxn
+jTTDt8zbz+XsB6JSjupGiDDqMbsWfOP5KvKyYmFgLG1bDJ7/E+rliuojIUXGO9x
Bankp/1h39KDPC8OPTPOyWB/37MnKHiPhlMljFt9oMToKp47b6D5G4UVrKHyynjG
1Z0aylOIFQ/LebOj8UdrPC2IprKOCvYNkQ0eFf0G5ghLAG3+1pNci1ijDKsWJrx5
k/4QlMBXNMp5wp5bZNXVqjTvRE4HzgCe/A2QaHpgJ8EAZJn91QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO7H9IiVY0eXS0AihRfTgB7TMkTLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMDgz
OTIwNy0xNDk0LTRlODItODY0OC1hYjliOTU2N2M3MGYvNzUyYTVkZTktYzljNi0z
NDMwLThlMTItMTE4MDM2NGI1NWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTA4MzkyMDctMTQ5NC00ZTgyLTg2
NDgtYWI5Yjk1NjdjNzBmL2EwODM5MjA3LTE0OTQtNGU4Mi04NjQ4LWFiOWI5NTY3
YzcwZi5jcmwwHwYDVR0jBBgwFoAUEBjVmU6Pn97+k2NW1aoS9W+Y2a8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hMDgzOTIwNy0xNDk0LTRlODItODY0OC1hYjli
OTU2N2M3MGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAAjAGAwQAJgDwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAINCzgfho1m84AmfqJLS1sXYF5Oc1ZkkDKAn4uoKkzpx2bpK3D4hhDJ4
01dSKqjdQ7ZPIumgyZsOCFz/XpiSPY1yvOXw6R4lmyZeBH4d8dcIFb7vj/FeW3lO
Y0r6RQmTpQQrlslQHnUGRy0ODXZqHQJHkR8Xj5Op6q7xYbeIxIuHIGS0EVnG8vjN
Zp1rdhO5lro4C4K3JL6N4G8p6XTgYlDFC/n1w7VDAIYwo45VWD37ocJ16nxx9j1E
wLHXAC4uOWg2PxOIbL17M92qTOwVkwVjXM2ftxQpTdvskuIZbgIscRNHhCYVHwio
bWjLu4A8AAQ7y6oHFDIF0OBCp2HGhS0=
-----END CERTIFICATE-----