Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a/a7bc0049-a30d-303c-aa49-2569d1fde817.roa
File:                     a7bc0049-a30d-303c-aa49-2569d1fde817.roa (raw, json)
Hash identifier:          BOP94mvyCHtMqy2/Pti8D9ZOxoUkwrUqxGfCZylUb7o=
Subject key identifier:   EE:04:58:3C:F5:9F:DB:9E:2A:86:36:04:D9:BA:B3:C0:AF:CF:46:EA
Certificate issuer:       /CN=e83c85e5-8535-4793-9639-6216c5afd18a
Certificate serial:       010D0C9F43285846AD5FBC0E999D505DC2626CD0
Authority key identifier: 49:9D:B0:7D:E7:A3:F6:88:C4:53:69:91:95:A8:D0:E1:6C:7B:44:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a/a7bc0049-a30d-303c-aa49-2569d1fde817.roa
Signing time:             Sat 27 Jul 2024 13:00:38 +0000
ROA not before:           Sat 27 Jul 2024 13:00:38 +0000
ROA not after:            Fri 25 Oct 2024 13:00:38 +0000
asID:                     20446
IP address blocks:        2604:6840:ac1a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ad:5f:bc:0e:99:9d:50:5d:c2:62:6c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83c85e5-8535-4793-9639-6216c5afd18a
        Validity
            Not Before: Jul 27 13:00:38 2024 GMT
            Not After : Oct 25 13:00:38 2024 GMT
        Subject: CN=e1baf71e-e9ca-4d81-93d6-ef7e66e0cf17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:06:ec:6f:c3:3b:d2:e0:7f:9d:94:60:75:00:
                    f3:c3:fe:8f:6a:13:fd:62:e7:95:6a:ef:6f:ee:a8:
                    30:b2:7b:ca:d0:52:45:da:76:1e:c5:8e:20:a6:57:
                    1a:ec:10:a9:f9:82:84:ab:3d:55:16:67:8d:57:be:
                    c1:43:d6:f2:4a:6b:f8:8f:8c:86:e7:42:ed:ed:3b:
                    63:88:be:aa:73:f8:68:7b:dd:da:b1:54:bf:65:7c:
                    4b:a5:ca:6b:74:91:db:61:e7:86:f1:27:40:73:3a:
                    82:30:fe:7e:7c:0a:06:89:04:49:ed:36:27:c2:c0:
                    a9:59:df:6f:c6:a6:bf:65:b0:e5:b8:e3:30:f4:e7:
                    4b:f0:19:f2:e3:59:17:27:eb:df:96:14:56:58:28:
                    73:b7:98:13:03:1f:ed:e0:fc:59:51:5c:57:45:7a:
                    92:7e:bd:21:13:98:31:a9:b2:55:c9:a3:f4:94:0e:
                    ee:49:38:22:f0:07:83:a2:36:d3:9f:7c:46:02:d7:
                    aa:7a:07:dc:a4:7c:04:12:3b:85:12:aa:11:2f:11:
                    87:6c:aa:79:df:ef:38:c8:94:83:65:32:c5:78:ed:
                    56:af:9d:3e:68:76:00:5d:9a:de:40:68:90:ea:f3:
                    12:39:d4:2c:ff:58:ae:63:5d:90:19:4c:14:32:2c:
                    7d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:04:58:3C:F5:9F:DB:9E:2A:86:36:04:D9:BA:B3:C0:AF:CF:46:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a/a7bc0049-a30d-303c-aa49-2569d1fde817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a/e83c85e5-8535-4793-9639-6216c5afd18a.crl

            X509v3 Authority Key Identifier:
                keyid:49:9D:B0:7D:E7:A3:F6:88:C4:53:69:91:95:A8:D0:E1:6C:7B:44:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:6840:ac1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a3:0e:f4:4c:a1:d6:dc:ee:4f:e1:5d:68:a0:51:ad:4c:2e:
         0b:9b:12:44:c5:22:13:5d:c9:4c:b6:04:7b:ca:01:e6:c1:89:
         e2:5d:59:eb:ef:96:85:1f:ea:41:f9:50:30:b2:c8:78:bd:96:
         eb:f0:96:15:ff:c7:2f:aa:1f:e0:a7:8f:15:43:95:de:89:2c:
         99:9a:b9:97:00:00:5f:c8:14:b2:4b:17:7d:9a:ff:01:01:3e:
         b4:f4:17:c3:fb:85:25:1c:df:be:e6:dc:72:f3:88:80:56:52:
         20:b8:a5:25:70:cb:e0:d7:b2:70:27:6c:c8:21:be:ed:af:3d:
         73:1d:46:64:bb:37:0d:c3:11:57:f6:cd:74:bf:ac:69:48:cc:
         0b:bf:b7:d0:6c:43:c7:fd:6a:6f:9c:fb:eb:ec:55:b8:aa:34:
         96:4e:39:df:ca:65:03:ad:58:96:67:88:67:ee:fb:c3:80:47:
         0e:10:4f:e2:93:12:6e:82:8e:37:8f:b2:25:bb:70:7b:a1:6f:
         4c:65:ce:07:f4:9e:e0:84:3d:45:82:51:5b:3e:fd:44:10:9e:
         6b:5b:bd:b6:85:6e:f6:f6:6d:99:10:04:58:97:bc:1e:45:1a:
         cf:07:e3:1b:da:a6:d7:c9:5a:97:b9:d8:fb:03:7e:19:39:01:
         9c:3c:e2:ef
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEatX7wOmZ1QXcJibNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTgzYzg1ZTUtODUzNS00NzkzLTk2MzktNjIxNmM1YWZk
MThhMB4XDTI0MDcyNzEzMDAzOFoXDTI0MTAyNTEzMDAzOFowLzEtMCsGA1UEAxMk
ZTFiYWY3MWUtZTljYS00ZDgxLTkzZDYtZWY3ZTY2ZTBjZjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQbsb8M70uB/nZRgdQDzw/6PahP9YueVau9v
7qgwsnvK0FJF2nYexY4gplca7BCp+YKEqz1VFmeNV77BQ9bySmv4j4yG50Lt7Ttj
iL6qc/hoe93asVS/ZXxLpcprdJHbYeeG8SdAczqCMP5+fAoGiQRJ7TYnwsCpWd9v
xqa/ZbDluOMw9OdL8Bny41kXJ+vflhRWWChzt5gTAx/t4PxZUVxXRXqSfr0hE5gx
qbJVyaP0lA7uSTgi8AeDojbTn3xGAteqegfcpHwEEjuFEqoRLxGHbKp53+84yJSD
ZTLFeO1Wr50+aHYAXZreQGiQ6vMSOdQs/1iuY12QGUwUMix97QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO4EWDz1n9ueKoY2BNm6s8Cvz0bqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lODNj
ODVlNS04NTM1LTQ3OTMtOTYzOS02MjE2YzVhZmQxOGEvYTdiYzAwNDktYTMwZC0z
MDNjLWFhNDktMjU2OWQxZmRlODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTgzYzg1ZTUtODUzNS00NzkzLTk2
MzktNjIxNmM1YWZkMThhL2U4M2M4NWU1LTg1MzUtNDc5My05NjM5LTYyMTZjNWFm
ZDE4YS5jcmwwHwYDVR0jBBgwFoAUSZ2wfeej9ojEU2mRlajQ4Wx7RDowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lODNjODVlNS04NTM1LTQ3OTMtOTYzOS02MjE2
YzVhZmQxOGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRoQKwa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFKjDvRModbc7k/hXWigUa1MLgubEkTFIhNdyUy2BHvKAebBieJd
WevvloUf6kH5UDCyyHi9luvwlhX/xy+qH+CnjxVDld6JLJmauZcAAF/IFLJLF32a
/wEBPrT0F8P7hSUc377m3HLziIBWUiC4pSVwy+DXsnAnbMghvu2vPXMdRmS7Nw3D
EVf2zXS/rGlIzAu/t9BsQ8f9am+c++vsVbiqNJZOOd/KZQOtWJZniGfu+8OARw4Q
T+KTEm6CjjePsiW7cHuhb0xlzgf0nuCEPUWCUVs+/UQQnmtbvbaFbvb2bZkQBFiX
vB5FGs8H4xvaptfJWpe52PsDfhk5AZw84u8=
-----END CERTIFICATE-----