Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/79bfec34-fdde-3041-a973-468186cf12ec.roa
File:                     79bfec34-fdde-3041-a973-468186cf12ec.roa (raw, json)
Hash identifier:          hrk336hP5kcZwn10Rf2Mmc3i9b2IYsO1K/4c7iAuDB0=
Subject key identifier:   CD:8D:E4:9E:C4:66:0C:2D:E9:6E:90:4B:7B:25:ED:A7:E7:62:80:C9
Certificate issuer:       /CN=a0839207-1494-4e82-8648-ab9b9567c70f
Certificate serial:       010D0C9F4328583FB74954B78CF7DFC31A0CB380
Authority key identifier: 10:18:D5:99:4E:8F:9F:DE:FE:93:63:56:D5:AA:12:F5:6F:98:D9:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/79bfec34-fdde-3041-a973-468186cf12ec.roa
Signing time:             Thu 27 Oct 2022 12:00:00 +0000
ROA not before:           Thu 27 Oct 2022 12:00:00 +0000
ROA not after:            Fri 02 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        2600:f000::/24 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b7:49:54:b7:8c:f7:df:c3:1a:0c:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0839207-1494-4e82-8648-ab9b9567c70f
        Validity
            Not Before: Oct 27 12:00:00 2022 GMT
            Not After : Dec  2 05:00:00 2022 GMT
        Subject: CN=13682bc7-c9af-4e2b-aabb-d7b5ec287e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9a:40:ca:94:7f:ba:f0:6e:30:87:fa:97:65:
                    5a:41:4e:dc:e0:1c:3a:d1:46:ae:63:34:7d:0b:4f:
                    e3:f6:91:e0:f6:83:0c:87:e1:d5:d6:9f:60:5c:8a:
                    fc:8a:d5:a5:b1:3a:d1:4b:c7:f4:53:d5:08:00:b5:
                    df:39:e0:21:cd:3c:fa:43:8d:53:43:a7:5c:3d:34:
                    a8:96:33:dd:ac:e1:92:4d:88:e0:45:de:22:99:c7:
                    bc:b0:50:3f:ee:50:f4:73:a2:b2:20:42:51:be:ad:
                    18:9c:14:2a:b3:62:2d:60:d5:68:0e:2f:b2:04:57:
                    2b:aa:1f:c4:ef:71:90:52:4e:d2:73:50:d9:8e:c4:
                    8d:49:a9:fd:45:7f:24:e6:85:66:43:dd:81:3a:06:
                    cf:b2:ca:fb:16:9c:a7:e1:cf:b1:da:65:c2:f4:9f:
                    df:b2:92:7f:70:09:3a:9b:77:6d:f6:b5:05:d3:7f:
                    3e:86:d8:8b:e0:f8:0d:fc:7b:93:81:d2:5d:25:cb:
                    13:aa:c8:88:4c:3c:f9:f6:95:e6:5d:6c:03:79:80:
                    8a:cd:80:3b:20:ae:a3:b8:88:8e:f7:26:a6:90:ad:
                    c8:ba:34:9d:42:00:70:df:ed:75:79:0c:41:c7:c1:
                    fa:dc:d5:df:14:45:f9:17:b3:6f:38:63:6f:a5:9e:
                    6f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8D:E4:9E:C4:66:0C:2D:E9:6E:90:4B:7B:25:ED:A7:E7:62:80:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/79bfec34-fdde-3041-a973-468186cf12ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/a0839207-1494-4e82-8648-ab9b9567c70f.crl

            X509v3 Authority Key Identifier:
                keyid:10:18:D5:99:4E:8F:9F:DE:FE:93:63:56:D5:AA:12:F5:6F:98:D9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f000::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:21:9b:38:5b:0b:5f:1d:e9:a4:2e:3d:2d:42:3d:67:fc:f8:
         18:d2:39:46:37:e1:13:5f:1d:53:29:ec:d8:96:0c:69:1c:f5:
         0b:b4:0e:77:a3:5b:70:b3:03:ca:a6:e8:6d:6b:18:1d:8f:59:
         4c:57:ab:7a:a2:a3:01:42:c1:11:94:26:57:6e:03:61:87:75:
         fe:d1:a5:83:39:64:a5:ab:1d:bd:44:c5:14:c9:a4:13:29:ba:
         c0:39:92:8b:52:d8:ac:8b:74:19:b0:ac:b8:7e:1f:37:49:4c:
         f5:ad:a9:ac:f9:7e:d1:a8:d4:e9:f5:11:ff:bc:c9:f7:51:c2:
         0d:c7:3e:bf:58:7c:e2:73:00:b9:6d:c3:88:c8:2b:83:94:75:
         18:8d:fe:73:ab:63:27:a4:45:73:21:a8:34:65:47:1f:eb:af:
         51:ae:41:ef:4c:1a:2b:cd:37:6c:19:1d:98:0d:fb:4f:1a:37:
         34:ed:b4:3c:e4:a2:f7:c3:7e:50:d6:d5:4b:14:23:19:8e:3e:
         6b:11:ae:eb:a8:b2:24:19:42:d1:5a:8d:6d:43:71:4c:72:40:
         5d:dc:4d:c1:21:91:6d:c9:9b:7b:54:3c:44:14:3f:c9:1a:fa:
         aa:2b:d5:33:bd:b1:5b:2f:34:76:14:31:9e:63:dc:e7:f3:3e:
         78:29:8b:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+3SVS3jPffwxoMs4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTA4MzkyMDctMTQ5NC00ZTgyLTg2NDgtYWI5Yjk1Njdj
NzBmMB4XDTIyMTAyNzEyMDAwMFoXDTIyMTIwMjA1MDAwMFowLzEtMCsGA1UEAxMk
MTM2ODJiYzctYzlhZi00ZTJiLWFhYmItZDdiNWVjMjg3ZTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5pAypR/uvBuMIf6l2VaQU7c4Bw60UauYzR9
C0/j9pHg9oMMh+HV1p9gXIr8itWlsTrRS8f0U9UIALXfOeAhzTz6Q41TQ6dcPTSo
ljPdrOGSTYjgRd4imce8sFA/7lD0c6KyIEJRvq0YnBQqs2ItYNVoDi+yBFcrqh/E
73GQUk7Sc1DZjsSNSan9RX8k5oVmQ92BOgbPssr7Fpyn4c+x2mXC9J/fspJ/cAk6
m3dt9rUF038+htiL4PgN/HuTgdJdJcsTqsiITDz59pXmXWwDeYCKzYA7IK6juIiO
9yamkK3IujSdQgBw3+11eQxBx8H63NXfFEX5F7NvOGNvpZ5vhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM2N5J7EZgwt6W6QS3sl7afnYoDJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMDgz
OTIwNy0xNDk0LTRlODItODY0OC1hYjliOTU2N2M3MGYvNzliZmVjMzQtZmRkZS0z
MDQxLWE5NzMtNDY4MTg2Y2YxMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTA4MzkyMDctMTQ5NC00ZTgyLTg2
NDgtYWI5Yjk1NjdjNzBmL2EwODM5MjA3LTE0OTQtNGU4Mi04NjQ4LWFiOWI5NTY3
YzcwZi5jcmwwHwYDVR0jBBgwFoAUEBjVmU6Pn97+k2NW1aoS9W+Y2a8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hMDgzOTIwNy0xNDk0LTRlODItODY0OC1hYjli
OTU2N2M3MGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAAjAGAwQAJgDwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0hmzhbC18d6aQuPS1CPWf8+BjSOUY34RNfHVMp7NiWDGkc9Qu0Dnej
W3CzA8qm6G1rGB2PWUxXq3qiowFCwRGUJlduA2GHdf7RpYM5ZKWrHb1ExRTJpBMp
usA5kotS2KyLdBmwrLh+HzdJTPWtqaz5ftGo1On1Ef+8yfdRwg3HPr9YfOJzALlt
w4jIK4OUdRiN/nOrYyekRXMhqDRlRx/rr1GuQe9MGivNN2wZHZgN+08aNzTttDzk
ovfDflDW1UsUIxmOPmsRruuosiQZQtFajW1DcUxyQF3cTcEhkW3Jm3tUPEQUP8ka
+qor1TO9sVsvNHYUMZ5j3OfzPngpi9w=
-----END CERTIFICATE-----