Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/fb2fde55-f9df-35b8-aeda-9228cdcc408b.roa
File:                     fb2fde55-f9df-35b8-aeda-9228cdcc408b.roa (raw, json)
Hash identifier:          qOtyflQ13S+2PdCQIJEKtioeb2CGzolOyf6fLhr0YK8=
Subject key identifier:   70:44:CA:5C:5D:7B:CC:4B:DA:45:BB:AE:01:DD:E7:1E:E3:06:4A:A0
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583CE554F31605890C4673C7F280
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/fb2fde55-f9df-35b8-aeda-9228cdcc408b.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e5:54:f3:16:05:89:0c:46:73:c7:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=b114ddd9-bd1a-4750-8084-003d3b9215af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3b:b0:3d:b9:97:8e:9f:1b:4c:8c:93:ef:4c:
                    bc:21:01:00:e2:b5:c0:c0:be:11:69:aa:98:a1:55:
                    59:43:02:12:8c:09:f9:d1:a7:83:02:ea:90:5e:de:
                    15:36:4a:27:02:1c:95:67:66:24:10:d7:d4:cf:0e:
                    ca:36:1d:54:85:30:c5:d7:f3:23:5a:0b:eb:09:ba:
                    88:af:d5:3e:a0:25:bc:e0:ff:2b:ed:1b:6d:54:45:
                    58:55:2b:d0:52:02:f3:a3:13:4c:89:a5:14:2f:47:
                    ed:44:bb:6c:96:40:b6:52:5f:16:4c:88:01:03:85:
                    08:c4:99:31:e3:c5:e1:64:08:38:e5:ec:93:ae:da:
                    88:fa:df:bc:f9:4d:36:2c:4d:e5:c3:36:76:b1:98:
                    2f:e8:be:77:e8:e7:85:3b:80:9d:ef:89:bd:9b:cc:
                    d1:84:5a:83:f2:8d:1b:b3:46:56:c2:59:01:6b:ad:
                    bd:9f:03:a9:d8:c0:19:58:24:c3:94:f0:eb:0d:8f:
                    fe:87:9c:bd:19:3c:61:ba:39:ac:e5:ef:36:e7:6e:
                    d3:6d:37:b3:f8:06:ec:28:d3:fb:81:d6:51:91:64:
                    1a:fc:6d:9b:3d:01:42:d4:4a:af:28:41:c5:ac:45:
                    ef:85:17:92:57:1e:0f:88:bd:10:80:44:88:ec:d7:
                    93:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:44:CA:5C:5D:7B:CC:4B:DA:45:BB:AE:01:DD:E7:1E:E3:06:4A:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/fb2fde55-f9df-35b8-aeda-9228cdcc408b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:6f:78:89:6e:0f:78:a6:a1:5d:86:56:70:72:45:d6:30:da:
         19:4b:69:d3:f2:ad:76:75:97:03:57:50:e9:28:df:29:d7:a8:
         ba:3f:41:7e:78:3a:b7:1e:34:0f:48:73:7d:e8:f3:d7:ea:e4:
         1e:ad:01:b4:9e:b5:21:ec:9d:cd:14:11:9b:37:9a:be:22:d0:
         44:3b:bb:34:f8:78:82:56:5a:b7:42:ac:44:22:35:25:4c:23:
         e2:b8:59:d7:4e:c9:26:52:78:cb:7e:a3:89:ab:a1:cf:c0:30:
         fc:65:fd:40:22:dc:a9:24:0c:d3:cd:c6:5d:ab:e9:75:a2:2a:
         78:ab:50:9e:77:69:12:85:d0:4b:5e:13:4c:c7:f4:70:3d:b2:
         43:3d:a8:10:7a:42:56:11:8c:21:fe:fd:62:06:4e:16:e6:d4:
         19:8e:de:78:51:54:5e:be:4d:e7:f9:ff:4d:29:0e:20:1d:a9:
         13:b2:8b:eb:47:47:35:b6:74:20:42:85:28:af:7f:ee:cc:dc:
         81:25:35:6a:ed:7d:b8:2e:e9:5a:56:48:03:77:c9:27:93:57:
         e0:83:31:e1:b1:c1:0f:3f:7d:e9:5f:c9:d2:b5:c0:b6:cf:ce:
         99:fd:6c:0c:45:8b:26:ba:9c:e8:96:67:0b:e7:20:3c:47:9b:
         82:7b:75:8c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWDzlVPMWBYkMRnPH8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjM0M2U5NmQtMWM5Ny00MmE2LWEwYjUtMzg4NGRmZmFi
ZjQ0MB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
YjExNGRkZDktYmQxYS00NzUwLTgwODQtMDAzZDNiOTIxNWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozuwPbmXjp8bTIyT70y8IQEA4rXAwL4RaaqY
oVVZQwISjAn50aeDAuqQXt4VNkonAhyVZ2YkENfUzw7KNh1UhTDF1/MjWgvrCbqI
r9U+oCW84P8r7RttVEVYVSvQUgLzoxNMiaUUL0ftRLtslkC2Ul8WTIgBA4UIxJkx
48XhZAg45eyTrtqI+t+8+U02LE3lwzZ2sZgv6L536OeFO4Cd74m9m8zRhFqD8o0b
s0ZWwlkBa629nwOp2MAZWCTDlPDrDY/+h5y9GTxhujms5e82527TbTez+AbsKNP7
gdZRkWQa/G2bPQFC1EqvKEHFrEXvhReSVx4PiL0QgESI7NeTKwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHBEylxde8xL2kW7rgHd5x7jBkqgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MzQz
ZTk2ZC0xYzk3LTQyYTYtYTBiNS0zODg0ZGZmYWJmNDQvZmIyZmRlNTUtZjlkZi0z
NWI4LWFlZGEtOTIyOGNkY2M0MDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjM0M2U5NmQtMWM5Ny00MmE2LWEw
YjUtMzg4NGRmZmFiZjQ0LzYzNDNlOTZkLTFjOTctNDJhNi1hMGI1LTM4ODRkZmZh
YmY0NC5jcmwwHwYDVR0jBBgwFoAUJcS4u+LBh5GZA4R33hQJUtyfIZswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82MzQzZTk2ZC0xYzk3LTQyYTYtYTBiNS0zODg0
ZGZmYWJmNDQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXJQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAlb3iJbg94pqFdhlZwckXWMNoZS2nT8q12dZcDV1DpKN8p16i6P0F+
eDq3HjQPSHN96PPX6uQerQG0nrUh7J3NFBGbN5q+ItBEO7s0+HiCVlq3QqxEIjUl
TCPiuFnXTskmUnjLfqOJq6HPwDD8Zf1AItypJAzTzcZdq+l1oip4q1Ced2kShdBL
XhNMx/RwPbJDPagQekJWEYwh/v1iBk4W5tQZjt54UVRevk3n+f9NKQ4gHakTsovr
R0c1tnQgQoUor3/uzNyBJTVq7X24LulaVkgDd8knk1fggzHhscEPP33pX8nStcC2
z86Z/WwMRYsmupzolmcL5yA8R5uCe3WM
-----END CERTIFICATE-----