Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/9c557d6b-fd2b-38bd-b065-7b40503db912.roa
File:                     9c557d6b-fd2b-38bd-b065-7b40503db912.roa (raw, json)
Hash identifier:          /FcuVPPcKydwLyc5tZqVouiL1k62xWbtggfbnvChoo0=
Subject key identifier:   49:A4:4F:B5:90:1D:68:7C:55:E5:75:5E:B8:EA:EA:FF:0A:03:E9:20
Certificate issuer:       /CN=83692920-ea82-48fe-a503-dce277a7ef99
Certificate serial:       010D0C9F4328583D02CA709CE5D8E9C75B8329AC
Authority key identifier: 0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/9c557d6b-fd2b-38bd-b065-7b40503db912.roa
Signing time:             Tue 22 Feb 2022 05:00:00 +0000
ROA not before:           Tue 22 Feb 2022 05:00:00 +0000
ROA not after:            Tue 29 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2606:f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:02:ca:70:9c:e5:d8:e9:c7:5b:83:29:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83692920-ea82-48fe-a503-dce277a7ef99
        Validity
            Not Before: Feb 22 05:00:00 2022 GMT
            Not After : Mar 29 04:00:00 2022 GMT
        Subject: CN=e7188ae1-faba-4ee3-bdf7-d18b49f5e6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2e:e7:89:09:1f:9e:84:e4:9a:fe:b4:3c:70:
                    ad:f5:9f:1a:5b:60:4e:79:8c:cb:0f:f4:a2:82:86:
                    d0:58:43:07:82:52:70:63:ae:de:ea:c1:ab:d3:03:
                    87:30:3e:61:54:e1:4f:28:cd:ae:d5:32:bb:f4:3e:
                    37:c4:2f:4e:1a:7c:48:ac:7e:d8:42:ef:16:05:c3:
                    01:0c:a2:ae:79:9d:dc:2a:73:bb:4b:dd:3a:0c:73:
                    12:0c:7d:71:bc:fe:83:66:db:5e:43:e1:cc:23:a4:
                    e7:5b:c7:7e:d2:ad:1f:87:4e:6c:4b:1f:3a:fb:88:
                    95:e0:02:a7:9d:71:02:04:6e:ad:d8:c3:7b:78:ff:
                    61:00:e9:0b:4c:06:5f:35:14:7d:9e:77:28:98:50:
                    71:31:15:3f:4d:16:f4:78:8a:ba:d8:96:12:b1:95:
                    cd:66:ce:3c:85:ce:33:bb:f1:35:00:dc:62:3f:95:
                    05:e2:11:24:9a:c4:7a:88:96:49:cd:e1:b9:b5:e4:
                    9e:2d:0e:1b:11:ce:41:64:d7:70:65:94:c2:4c:d4:
                    79:ef:d3:a0:cc:c5:c8:71:36:80:fd:9e:55:bd:d8:
                    e2:d9:88:92:4d:2f:0c:40:81:5c:c8:10:3e:28:00:
                    bd:94:ea:6a:11:04:2a:21:0f:15:3b:2e:6b:ab:94:
                    db:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A4:4F:B5:90:1D:68:7C:55:E5:75:5E:B8:EA:EA:FF:0A:03:E9:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/9c557d6b-fd2b-38bd-b065-7b40503db912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/83692920-ea82-48fe-a503-dce277a7ef99.crl

            X509v3 Authority Key Identifier:
                keyid:0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:fa:e8:08:35:53:33:48:b1:a4:4e:8d:e9:84:23:17:d4:fd:
         5a:4a:29:99:e0:33:18:f6:83:45:37:24:02:49:44:b3:21:3c:
         97:14:53:8e:29:53:2c:28:f3:a9:eb:b5:35:7d:b2:54:14:5b:
         7a:93:f0:ad:f9:ad:64:06:54:85:66:c4:93:9d:c1:63:f8:1e:
         b1:c4:c5:4f:eb:d2:58:a9:55:23:84:5b:c6:21:42:50:5e:48:
         2f:80:d5:50:68:c8:f4:15:61:c2:ee:20:36:1c:88:0a:bb:b4:
         5b:07:9d:55:dc:d2:ce:86:16:62:6b:2e:43:2e:a7:da:47:65:
         14:c6:25:12:77:93:e4:18:a2:99:06:3b:a8:01:e7:1d:ea:25:
         50:49:b1:42:09:7d:38:41:d7:18:10:bc:31:4c:9b:cd:65:d9:
         94:12:1e:6d:de:45:e8:b2:4b:1d:0e:07:ae:1c:c7:a1:d3:2c:
         25:4e:71:89:b0:9c:0c:32:97:3f:58:e5:5a:4c:4f:9c:b5:92:
         15:ad:74:c6:1e:54:af:80:95:fa:b9:1f:93:f7:dc:db:4b:f3:
         be:ad:02:f2:57:d4:95:55:49:ec:2c:e8:1b:d3:29:a5:fa:04:
         37:12:6b:e9:98:9e:7f:fb:3d:21:3d:60:b2:6d:d7:d7:65:d0:
         25:3e:63:a0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWD0CynCc5djpx1uDKawwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM2OTI5MjAtZWE4Mi00OGZlLWE1MDMtZGNlMjc3YTdl
Zjk5MB4XDTIyMDIyMjA1MDAwMFoXDTIyMDMyOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTcxODhhZTEtZmFiYS00ZWUzLWJkZjctZDE4YjQ5ZjVlNmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS7niQkfnoTkmv60PHCt9Z8aW2BOeYzLD/Si
gobQWEMHglJwY67e6sGr0wOHMD5hVOFPKM2u1TK79D43xC9OGnxIrH7YQu8WBcMB
DKKueZ3cKnO7S906DHMSDH1xvP6DZtteQ+HMI6TnW8d+0q0fh05sSx86+4iV4AKn
nXECBG6t2MN7eP9hAOkLTAZfNRR9nncomFBxMRU/TRb0eIq62JYSsZXNZs48hc4z
u/E1ANxiP5UF4hEkmsR6iJZJzeG5teSeLQ4bEc5BZNdwZZTCTNR579OgzMXIcTaA
/Z5Vvdji2YiSTS8MQIFcyBA+KAC9lOpqEQQqIQ8VOy5rq5TbVQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEmkT7WQHWh8VeV1Xrjq6v8KA+kgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MzY5
MjkyMC1lYTgyLTQ4ZmUtYTUwMy1kY2UyNzdhN2VmOTkvOWM1NTdkNmItZmQyYi0z
OGJkLWIwNjUtN2I0MDUwM2RiOTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODM2OTI5MjAtZWE4Mi00OGZlLWE1
MDMtZGNlMjc3YTdlZjk5LzgzNjkyOTIwLWVhODItNDhmZS1hNTAzLWRjZTI3N2E3
ZWY5OS5jcmwwHwYDVR0jBBgwFoAUDs2OOVW3AYLwknZnuRQMJ2inBO4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84MzY5MjkyMC1lYTgyLTQ4ZmUtYTUwMy1kY2Uy
NzdhN2VmOTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYPQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCw+ugINVMzSLGkTo3phCMX1P1aSimZ4DMY9oNFNyQCSUSzITyXFFOO
KVMsKPOp67U1fbJUFFt6k/Ct+a1kBlSFZsSTncFj+B6xxMVP69JYqVUjhFvGIUJQ
XkgvgNVQaMj0FWHC7iA2HIgKu7RbB51V3NLOhhZiay5DLqfaR2UUxiUSd5PkGKKZ
BjuoAecd6iVQSbFCCX04QdcYELwxTJvNZdmUEh5t3kXosksdDgeuHMeh0ywlTnGJ
sJwMMpc/WOVaTE+ctZIVrXTGHlSvgJX6uR+T99zbS/O+rQLyV9SVVUnsLOgb0yml
+gQ3EmvpmJ5/+z0hPWCybdfXZdAlPmOg
-----END CERTIFICATE-----