Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/a05ec6cd-3ca9-3088-9902-5c401d468ed1.roa
File:                     a05ec6cd-3ca9-3088-9902-5c401d468ed1.roa (raw, json)
Hash identifier:          BGqWVMrWn7GDVL32Lh+rDc/8aa4xhSNTHyhzFxLMCsE=
Subject key identifier:   5E:4B:F8:86:CB:9B:5E:38:AB:CA:6E:AE:A7:CB:CD:F1:AD:C0:0A:48
Certificate issuer:       /CN=83692920-ea82-48fe-a503-dce277a7ef99
Certificate serial:       010D0C9F4328583CB49037DBB75E207D028841C0
Authority key identifier: 0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/a05ec6cd-3ca9-3088-9902-5c401d468ed1.roa
Signing time:             Tue 25 Jan 2022 05:00:00 +0000
ROA not before:           Tue 25 Jan 2022 05:00:00 +0000
ROA not after:            Tue 01 Mar 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        2606:f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b4:90:37:db:b7:5e:20:7d:02:88:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83692920-ea82-48fe-a503-dce277a7ef99
        Validity
            Not Before: Jan 25 05:00:00 2022 GMT
            Not After : Mar  1 05:00:00 2022 GMT
        Subject: CN=7f82fd5f-e6a9-4ad6-9d32-e39dcd189a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8f:59:1f:5f:0e:81:d1:14:95:d5:9c:3e:cd:
                    5d:60:96:e0:35:ab:c4:ab:2b:f5:8c:ea:82:85:c8:
                    fd:18:bb:a1:ea:45:1d:1c:10:54:b7:2f:cf:87:6c:
                    7e:9e:fa:d4:df:22:99:9e:6a:ca:98:72:47:1a:7f:
                    c3:84:26:9a:fe:83:41:f4:b0:93:57:3c:66:f0:e5:
                    de:36:79:90:9d:4a:4a:34:84:f5:54:eb:51:d5:1d:
                    68:74:6b:98:66:cf:07:aa:11:a3:44:d7:90:47:e1:
                    72:b8:10:10:02:b2:85:41:b6:af:e8:dc:27:ee:5d:
                    c5:f9:da:c9:15:2f:9d:b4:5b:ce:24:bd:fb:ae:a9:
                    2d:d5:e0:09:fc:af:1c:70:68:08:65:fd:a3:23:d1:
                    2c:98:b6:ec:20:d8:2c:33:cd:44:e2:77:c5:31:bb:
                    71:c4:c4:61:1a:25:78:aa:01:06:d8:df:ef:d8:e8:
                    95:77:af:96:7f:7e:65:9c:2c:69:3f:d7:ad:06:89:
                    1b:4d:78:da:e0:ac:01:ea:d2:22:15:4e:a6:e1:9b:
                    1f:4e:ab:93:36:91:c3:73:c5:f2:97:74:14:5c:54:
                    34:51:7a:0f:3e:f9:8d:c2:34:56:d2:7b:d0:44:53:
                    e4:ab:39:12:8c:4f:24:50:55:16:6a:e5:e5:c1:23:
                    83:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4B:F8:86:CB:9B:5E:38:AB:CA:6E:AE:A7:CB:CD:F1:AD:C0:0A:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/a05ec6cd-3ca9-3088-9902-5c401d468ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/83692920-ea82-48fe-a503-dce277a7ef99.crl

            X509v3 Authority Key Identifier:
                keyid:0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ed:19:fd:e2:2a:ff:9d:c4:a9:9b:68:f1:6f:7f:c5:43:48:
         07:a6:af:26:a6:6a:d2:9c:97:e8:d0:eb:e0:11:57:de:bd:00:
         d6:77:00:48:16:cc:db:6c:67:58:d6:5d:b8:cf:a0:11:0d:27:
         ce:61:40:1f:e2:9e:f9:79:14:cd:43:3f:3e:ce:32:22:51:92:
         75:d1:18:8d:15:5d:05:7a:4c:f6:f4:64:f6:48:b2:fb:81:26:
         e3:10:c8:42:37:e6:03:44:9b:1d:f1:3e:33:1b:5a:c5:a0:52:
         a9:35:95:31:e1:2c:22:81:21:05:1b:25:6f:91:83:12:c7:0a:
         96:e9:c3:75:07:e5:bd:9f:b2:f8:10:87:22:c9:b9:54:44:d6:
         3e:06:27:cc:28:c7:59:d0:f2:f1:c8:5b:17:67:f7:4a:c0:1f:
         b3:14:f2:79:83:19:aa:19:7a:2d:5c:63:96:dd:e8:46:a7:6c:
         73:c4:76:77:53:c2:4c:42:b8:d9:93:06:f4:85:ba:e7:b6:84:
         9e:70:2c:75:e3:0a:97:28:17:16:99:ab:37:28:6d:1f:18:ba:
         4c:0d:40:85:96:d3:86:a3:f4:2d:3d:47:c6:ea:8b:c4:8a:0c:
         a5:3f:af:c2:35:08:ad:37:51:dc:5f:17:58:a1:32:22:ed:9c:
         8d:1a:6d:08
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWDy0kDfbt14gfQKIQcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM2OTI5MjAtZWE4Mi00OGZlLWE1MDMtZGNlMjc3YTdl
Zjk5MB4XDTIyMDEyNTA1MDAwMFoXDTIyMDMwMTA1MDAwMFowLzEtMCsGA1UEAxMk
N2Y4MmZkNWYtZTZhOS00YWQ2LTlkMzItZTM5ZGNkMTg5YTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI9ZH18OgdEUldWcPs1dYJbgNavEqyv1jOqC
hcj9GLuh6kUdHBBUty/Ph2x+nvrU3yKZnmrKmHJHGn/DhCaa/oNB9LCTVzxm8OXe
NnmQnUpKNIT1VOtR1R1odGuYZs8HqhGjRNeQR+FyuBAQArKFQbav6Nwn7l3F+drJ
FS+dtFvOJL37rqkt1eAJ/K8ccGgIZf2jI9EsmLbsINgsM81E4nfFMbtxxMRhGiV4
qgEG2N/v2OiVd6+Wf35lnCxpP9etBokbTXja4KwB6tIiFU6m4ZsfTquTNpHDc8Xy
l3QUXFQ0UXoPPvmNwjRW0nvQRFPkqzkSjE8kUFUWauXlwSODwQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFF5L+IbLm144q8purqfLzfGtwApIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MzY5
MjkyMC1lYTgyLTQ4ZmUtYTUwMy1kY2UyNzdhN2VmOTkvYTA1ZWM2Y2QtM2NhOS0z
MDg4LTk5MDItNWM0MDFkNDY4ZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODM2OTI5MjAtZWE4Mi00OGZlLWE1
MDMtZGNlMjc3YTdlZjk5LzgzNjkyOTIwLWVhODItNDhmZS1hNTAzLWRjZTI3N2E3
ZWY5OS5jcmwwHwYDVR0jBBgwFoAUDs2OOVW3AYLwknZnuRQMJ2inBO4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84MzY5MjkyMC1lYTgyLTQ4ZmUtYTUwMy1kY2Uy
NzdhN2VmOTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYPQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBc7Rn94ir/ncSpm2jxb3/FQ0gHpq8mpmrSnJfo0OvgEVfevQDWdwBI
FszbbGdY1l24z6ARDSfOYUAf4p75eRTNQz8+zjIiUZJ10RiNFV0Fekz29GT2SLL7
gSbjEMhCN+YDRJsd8T4zG1rFoFKpNZUx4SwigSEFGyVvkYMSxwqW6cN1B+W9n7L4
EIciyblURNY+BifMKMdZ0PLxyFsXZ/dKwB+zFPJ5gxmqGXotXGOW3ehGp2xzxHZ3
U8JMQrjZkwb0hbrntoSecCx14wqXKBcWmas3KG0fGLpMDUCFltOGo/QtPUfG6ovE
igylP6/CNQitN1HcXxdYoTIi7ZyNGm0I
-----END CERTIFICATE-----