Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/72f6d297-018b-3284-b3ba-0d4dede66c2e.roa
File:                     72f6d297-018b-3284-b3ba-0d4dede66c2e.roa (raw, json)
Hash identifier:          Q6HiFxr0vqWmsVxlU1kCHNwFlM/xKcZoW450gcwJQnQ=
Subject key identifier:   52:2C:BC:AF:82:C0:62:BF:29:5C:7C:01:90:82:90:B1:D8:95:FA:E3
Certificate issuer:       /CN=7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e
Certificate serial:       010D0C9F4328583E6CA6DD914F572961B021F0E8
Authority key identifier: A9:9B:7D:23:00:FE:03:6E:23:9A:5A:4C:08:96:8A:C6:A8:56:E9:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/72f6d297-018b-3284-b3ba-0d4dede66c2e.roa
Signing time:             Fri 01 Jul 2022 18:10:46 +0000
ROA not before:           Fri 01 Jul 2022 18:10:46 +0000
ROA not after:            Thu 03 Oct 2024 04:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6c:a6:dd:91:4f:57:29:61:b0:21:f0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e
        Validity
            Not Before: Jul  1 18:10:46 2022 GMT
            Not After : Oct  3 04:00:00 2024 GMT
        Subject: CN=6a4a0e7a-b3f4-4a16-9de3-3c2935150006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2f:94:d1:fb:ea:7a:50:b5:d0:69:ba:37:27:
                    8c:56:19:06:b3:34:91:4e:04:92:71:0f:47:e8:6a:
                    ea:99:b5:e1:eb:ea:85:1f:6b:d0:d4:bc:b4:aa:41:
                    be:a6:1a:44:c1:34:7d:36:4d:c0:6c:04:0d:e4:10:
                    79:33:38:7a:db:71:6a:7a:a4:7a:56:1a:ca:b1:00:
                    73:8d:c0:65:4c:d9:50:33:c1:5b:38:f4:16:da:ec:
                    af:56:25:9d:70:87:20:67:64:65:69:5d:83:78:eb:
                    79:e7:ed:31:32:1a:26:b5:c2:c2:ba:ec:51:2c:48:
                    96:28:33:4a:6c:22:2d:82:42:4c:9b:8c:fa:23:cb:
                    dc:0f:26:37:7e:7f:6c:46:83:fc:05:13:49:34:4a:
                    9a:be:69:27:cd:a0:35:30:ab:88:87:f8:e6:b9:26:
                    1d:78:38:13:25:04:f3:ab:53:63:5f:7c:29:bb:94:
                    1e:c0:f6:8b:62:75:a7:e6:5f:68:29:1a:cd:26:88:
                    8e:78:37:2c:41:5a:79:5d:e5:bd:65:a8:32:c3:89:
                    c6:9a:8e:5e:48:ff:11:7e:2c:ee:7a:94:c6:35:65:
                    0f:5b:f3:fb:a8:bf:d4:b7:5a:40:a1:6e:33:0d:df:
                    c0:98:4f:b5:64:a1:2f:28:0a:90:72:81:bb:14:5d:
                    50:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2C:BC:AF:82:C0:62:BF:29:5C:7C:01:90:82:90:B1:D8:95:FA:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/72f6d297-018b-3284-b3ba-0d4dede66c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.crl

            X509v3 Authority Key Identifier:
                keyid:A9:9B:7D:23:00:FE:03:6E:23:9A:5A:4C:08:96:8A:C6:A8:56:E9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:de:76:d4:98:b9:ed:bb:2d:4e:6c:29:77:38:e8:f4:c7:8a:
         31:4c:43:27:0a:5c:3b:6b:e3:54:81:60:b2:34:97:ec:07:6d:
         4a:23:e5:60:00:ff:82:fb:d9:63:c2:f3:22:b0:88:3a:d3:e1:
         ce:1f:4e:10:8d:a6:4e:a4:64:25:ef:6c:7d:14:8a:ed:77:9c:
         8f:5f:36:db:27:a3:c1:b7:ca:c6:59:c3:48:27:b7:f9:48:c3:
         d8:58:47:57:63:c6:19:11:5e:6f:fe:fb:b4:05:5d:66:8a:65:
         8f:79:ee:ce:02:86:a0:12:17:f0:0a:f9:7d:fc:45:2f:ba:eb:
         51:11:bd:0b:02:e8:07:39:c6:1b:07:b5:f1:ed:76:fd:3b:c4:
         06:c6:c9:f0:8d:50:04:d9:3e:33:7f:94:19:d6:00:11:88:25:
         51:b3:86:3e:9a:43:b7:62:53:73:26:2c:72:c6:3c:72:5a:04:
         20:e9:b0:5a:5c:36:a8:d5:0f:0d:43:9f:8c:0a:bb:cc:af:c1:
         13:9f:0f:e6:db:de:33:40:9e:2e:a5:43:69:cb:4e:5f:54:6f:
         be:d2:57:45:16:b3:15:31:22:ba:7e:05:82:dc:d1:b5:8b:0c:
         78:b8:25:69:d2:25:c8:17:08:99:06:45:50:13:32:fe:ee:fc:
         db:da:03:df
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD5spt2RT1cpYbAh8OgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2YxMWFjYzktNGU1Yi00ZWRlLTljZTItYjg0YjJlYmM3
MTFlMB4XDTIyMDcwMTE4MTA0NloXDTI0MTAwMzA0MDAwMFowLzEtMCsGA1UEAxMk
NmE0YTBlN2EtYjNmNC00YTE2LTlkZTMtM2MyOTM1MTUwMDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS+U0fvqelC10Gm6NyeMVhkGszSRTgSScQ9H
6GrqmbXh6+qFH2vQ1Ly0qkG+phpEwTR9Nk3AbAQN5BB5Mzh623FqeqR6VhrKsQBz
jcBlTNlQM8FbOPQW2uyvViWdcIcgZ2RlaV2DeOt55+0xMhomtcLCuuxRLEiWKDNK
bCItgkJMm4z6I8vcDyY3fn9sRoP8BRNJNEqavmknzaA1MKuIh/jmuSYdeDgTJQTz
q1NjX3wpu5QewPaLYnWn5l9oKRrNJoiOeDcsQVp5XeW9Zagyw4nGmo5eSP8Rfizu
epTGNWUPW/P7qL/Ut1pAoW4zDd/AmE+1ZKEvKAqQcoG7FF1QewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFIsvK+CwGK/KVx8AZCCkLHYlfrjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83ZjEx
YWNjOS00ZTViLTRlZGUtOWNlMi1iODRiMmViYzcxMWUvNzJmNmQyOTctMDE4Yi0z
Mjg0LWIzYmEtMGQ0ZGVkZTY2YzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2YxMWFjYzktNGU1Yi00ZWRlLTlj
ZTItYjg0YjJlYmM3MTFlLzdmMTFhY2M5LTRlNWItNGVkZS05Y2UyLWI4NGIyZWJj
NzExZS5jcmwwHwYDVR0jBBgwFoAUqZt9IwD+A24jmlpMCJaKxqhW6eUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83ZjExYWNjOS00ZTViLTRlZGUtOWNlMi1iODRi
MmViYzcxMWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwIA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABjedtSYue27LU5sKXc46PTHijFMQycKXDtr41SBYLI0l+wHbUoj
5WAA/4L72WPC8yKwiDrT4c4fThCNpk6kZCXvbH0Uiu13nI9fNtsno8G3ysZZw0gn
t/lIw9hYR1djxhkRXm/++7QFXWaKZY957s4ChqASF/AK+X38RS+661ERvQsC6Ac5
xhsHtfHtdv07xAbGyfCNUATZPjN/lBnWABGIJVGzhj6aQ7diU3MmLHLGPHJaBCDp
sFpcNqjVDw1Dn4wKu8yvwROfD+bb3jNAni6lQ2nLTl9Ub77SV0UWsxUxIrp+BYLc
0bWLDHi4JWnSJcgXCJkGRVATMv7u/NvaA98=
-----END CERTIFICATE-----