Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/a6572122-575b-3f81-bee8-553cf0420140.roa
File:                     a6572122-575b-3f81-bee8-553cf0420140.roa (raw, json)
Hash identifier:          SHG84Apq+9k1MOz6fiXR5euPAzS3YDAbe8E5L4jfioI=
Subject key identifier:   FC:62:B7:0E:00:7C:C3:EE:DF:2D:B5:E0:34:E6:9D:8A:B7:F7:77:95
Certificate issuer:       /CN=83692920-ea82-48fe-a503-dce277a7ef99
Certificate serial:       010D0C9F4328583FEA00834C5695B07344BD8240
Authority key identifier: 0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/a6572122-575b-3f81-bee8-553cf0420140.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Tue 20 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        2606:f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ea:00:83:4c:56:95:b0:73:44:bd:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83692920-ea82-48fe-a503-dce277a7ef99
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Dec 20 05:00:00 2022 GMT
        Subject: CN=1dd51339-648a-429a-9544-a0a100a501c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4a:cc:d6:8c:d5:c2:be:3d:78:3b:11:9d:10:
                    ca:ec:87:34:2a:47:84:fd:c3:ad:4c:1b:15:8c:b7:
                    3e:67:ab:c9:73:7b:82:46:40:0a:6d:d5:18:79:a9:
                    9c:e3:3a:91:f2:01:92:e8:9f:6e:82:24:f8:db:f6:
                    2a:74:c1:a4:6b:d5:fc:68:69:af:50:93:ef:8f:41:
                    e5:b4:39:44:dc:2c:8a:1d:af:50:d8:04:e7:d8:fa:
                    a4:47:79:33:4b:78:b4:1c:b1:75:b5:6b:8b:a5:a5:
                    f2:8c:be:fd:1f:9d:6d:f5:99:33:9d:e1:27:b9:42:
                    d0:53:15:cf:64:30:cc:b9:11:17:59:bb:66:17:78:
                    6a:57:08:e6:0f:cf:b9:0b:d3:cc:a4:f3:bd:fc:49:
                    9c:82:fe:5c:1f:d8:06:54:5a:6d:05:1a:d8:4d:a0:
                    53:2c:89:58:96:ed:ef:b3:18:77:28:82:54:e5:b9:
                    c7:59:5f:19:05:85:e1:44:0d:aa:e1:d2:3b:0f:44:
                    7f:9a:5d:32:23:c0:bb:4d:15:a0:4d:52:cf:bd:fc:
                    0f:56:9b:62:21:93:da:3b:5c:dc:07:43:b8:bb:ee:
                    16:49:f9:09:75:b0:73:32:58:3a:c5:88:fe:e9:49:
                    a2:37:84:6e:8d:3f:e0:18:25:df:bc:3f:9b:b9:99:
                    14:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:62:B7:0E:00:7C:C3:EE:DF:2D:B5:E0:34:E6:9D:8A:B7:F7:77:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/a6572122-575b-3f81-bee8-553cf0420140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/83692920-ea82-48fe-a503-dce277a7ef99.crl

            X509v3 Authority Key Identifier:
                keyid:0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:a6:c6:c7:07:96:2e:37:cb:a3:33:54:47:3e:cf:4d:16:4f:
         f6:ca:74:a8:68:85:d5:4a:eb:7d:96:32:9c:66:7d:6d:80:05:
         de:46:f1:ca:d1:00:c0:5e:1f:fe:1b:4a:d7:6d:37:95:7a:7e:
         91:99:32:24:d3:b2:0c:29:5a:a2:bd:eb:bd:3d:a3:2e:aa:25:
         19:14:db:62:24:f9:64:94:9b:11:fe:f2:c3:4b:81:41:f8:81:
         39:69:39:08:d6:b7:35:d6:77:e5:ab:4e:de:6a:e3:6d:fa:5a:
         5a:c1:60:fb:ab:1e:cd:81:61:c6:35:2f:10:e9:52:58:f9:86:
         f5:e7:3d:91:bc:82:1a:1a:94:e6:3a:81:b7:3a:8d:06:8f:d4:
         1c:63:03:16:7a:dd:9b:bf:81:05:fc:cd:f0:80:ae:92:07:6d:
         7f:f4:0f:30:0a:4f:37:c1:a6:26:86:1f:0a:e4:8d:22:73:56:
         d8:21:22:ab:40:7b:98:e2:69:e2:6e:80:37:62:26:63:48:66:
         62:a0:3b:df:c6:34:7e:3e:41:0e:20:ba:f3:6f:46:43:5f:f6:
         16:d5:dd:6c:3d:fc:c7:f3:1f:a6:31:26:d5:cb:09:d4:59:06:
         f5:50:f6:b3:5f:94:9d:67:00:92:e3:7a:07:00:dd:7d:16:a0:
         68:72:8b:4d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWD/qAINMVpWwc0S9gkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM2OTI5MjAtZWE4Mi00OGZlLWE1MDMtZGNlMjc3YTdl
Zjk5MB4XDTIyMTExNDEyMDAwMFoXDTIyMTIyMDA1MDAwMFowLzEtMCsGA1UEAxMk
MWRkNTEzMzktNjQ4YS00MjlhLTk1NDQtYTBhMTAwYTUwMWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0krM1ozVwr49eDsRnRDK7Ic0KkeE/cOtTBsV
jLc+Z6vJc3uCRkAKbdUYeamc4zqR8gGS6J9ugiT42/YqdMGka9X8aGmvUJPvj0Hl
tDlE3CyKHa9Q2ATn2PqkR3kzS3i0HLF1tWuLpaXyjL79H51t9ZkzneEnuULQUxXP
ZDDMuREXWbtmF3hqVwjmD8+5C9PMpPO9/Emcgv5cH9gGVFptBRrYTaBTLIlYlu3v
sxh3KIJU5bnHWV8ZBYXhRA2q4dI7D0R/ml0yI8C7TRWgTVLPvfwPVptiIZPaO1zc
B0O4u+4WSfkJdbBzMlg6xYj+6UmiN4RujT/gGCXfvD+buZkURwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPxitw4AfMPu3y214DTmnYq393eVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MzY5
MjkyMC1lYTgyLTQ4ZmUtYTUwMy1kY2UyNzdhN2VmOTkvYTY1NzIxMjItNTc1Yi0z
ZjgxLWJlZTgtNTUzY2YwNDIwMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODM2OTI5MjAtZWE4Mi00OGZlLWE1
MDMtZGNlMjc3YTdlZjk5LzgzNjkyOTIwLWVhODItNDhmZS1hNTAzLWRjZTI3N2E3
ZWY5OS5jcmwwHwYDVR0jBBgwFoAUDs2OOVW3AYLwknZnuRQMJ2inBO4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84MzY5MjkyMC1lYTgyLTQ4ZmUtYTUwMy1kY2Uy
NzdhN2VmOTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYPQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCBpsbHB5YuN8ujM1RHPs9NFk/2ynSoaIXVSut9ljKcZn1tgAXeRvHK
0QDAXh/+G0rXbTeVen6RmTIk07IMKVqiveu9PaMuqiUZFNtiJPlklJsR/vLDS4FB
+IE5aTkI1rc11nflq07eauNt+lpawWD7qx7NgWHGNS8Q6VJY+Yb15z2RvIIaGpTm
OoG3Oo0Gj9QcYwMWet2bv4EF/M3wgK6SB21/9A8wCk83waYmhh8K5I0ic1bYISKr
QHuY4mniboA3YiZjSGZioDvfxjR+PkEOILrzb0ZDX/YW1d1sPfzH8x+mMSbVywnU
WQb1UPazX5SdZwCS43oHAN19FqBocotN
-----END CERTIFICATE-----