Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/57976dbc-2dab-33d6-944a-1b6208916fcb.roa
File:                     57976dbc-2dab-33d6-944a-1b6208916fcb.roa (raw, json)
Hash identifier:          lmcJ9UyHmZo4fo/vkE7UqgK5U0y9Aqp2C9uBzfhSxqk=
Subject key identifier:   E5:70:0D:21:90:83:42:01:60:03:BE:FA:FF:41:26:47:87:EC:CE:C6
Certificate issuer:       /CN=64f91b98-4962-41cc-b646-3985b83da365
Certificate serial:       010D0C9F4328584235ED8CB7ECD19ED85C8DC900
Authority key identifier: 4A:EE:88:BF:5D:7C:6C:25:65:71:9E:AB:62:1C:AC:A1:84:26:07:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/57976dbc-2dab-33d6-944a-1b6208916fcb.roa
Signing time:             Tue 13 Jun 2023 23:01:44 +0000
ROA not before:           Tue 13 Jun 2023 23:01:44 +0000
ROA not after:            Mon 11 Sep 2023 23:01:44 +0000
asID:                     399970
IP address blocks:        2602:fc3b:600::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:35:ed:8c:b7:ec:d1:9e:d8:5c:8d:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f91b98-4962-41cc-b646-3985b83da365
        Validity
            Not Before: Jun 13 23:01:44 2023 GMT
            Not After : Sep 11 23:01:44 2023 GMT
        Subject: CN=df018682-c79e-462b-a323-f6be8412f225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bb:41:59:1a:5a:f5:f2:f5:b6:ba:6e:b9:b3:
                    5c:be:84:17:0d:97:98:8c:16:e2:f1:a5:13:c9:76:
                    a3:7d:e3:d9:96:bc:d3:b8:1e:e9:e0:4d:e1:35:e7:
                    c7:34:c5:7d:e0:e6:f9:a8:66:9c:25:c8:ad:1d:39:
                    05:35:1a:71:3a:29:d5:b8:c0:e0:e9:c1:70:5a:83:
                    50:83:77:84:27:66:9d:22:62:2b:8e:cb:9e:3f:04:
                    67:12:9a:ce:5d:22:77:63:1d:92:c3:de:85:80:8e:
                    1f:20:aa:44:fa:63:53:16:27:0c:2a:af:c4:ad:77:
                    44:7f:9d:e7:5d:99:62:6b:c8:06:bd:a7:f8:06:9c:
                    6d:79:47:b1:30:0d:5b:93:b4:92:d7:67:6d:1e:55:
                    8d:4b:6e:27:91:79:fe:76:1d:fe:b1:7d:f1:95:3e:
                    97:da:62:2e:f4:81:68:f1:c1:60:12:6f:34:f0:1a:
                    d9:91:01:e0:f8:7c:a8:c6:06:a5:55:e2:07:b0:cc:
                    06:f6:50:76:e0:f2:f0:9d:fc:98:fc:c9:15:f1:f8:
                    dc:e2:9a:12:08:7a:05:37:38:ed:30:52:6e:98:b5:
                    69:3f:00:b4:d5:7f:5d:d6:56:9a:58:ba:f4:f6:38:
                    e8:e5:e0:28:21:bf:1f:21:da:e3:5e:95:87:21:bd:
                    64:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:70:0D:21:90:83:42:01:60:03:BE:FA:FF:41:26:47:87:EC:CE:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/57976dbc-2dab-33d6-944a-1b6208916fcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/64f91b98-4962-41cc-b646-3985b83da365.crl

            X509v3 Authority Key Identifier:
                keyid:4A:EE:88:BF:5D:7C:6C:25:65:71:9E:AB:62:1C:AC:A1:84:26:07:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:600::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:d3:6a:e5:87:12:5d:f4:6c:91:04:97:d4:28:a6:49:e1:6c:
         7b:fc:60:1f:01:96:f4:44:06:e0:bf:2f:95:27:d1:fb:b7:9f:
         b4:ab:5e:4b:34:21:83:0d:ac:f8:36:7f:b8:c9:05:43:6d:d8:
         03:b4:e3:de:e6:98:6a:b4:0d:e5:9b:fa:14:5d:e5:ab:11:32:
         8a:22:8c:88:a3:ca:27:df:9d:3a:98:2e:6f:90:e9:d5:17:3a:
         b8:7e:8f:16:aa:c6:9a:fc:06:cf:bb:77:9e:19:0a:14:a7:6e:
         fb:ee:a9:33:8b:a3:30:3e:b2:4e:eb:7c:d2:07:4c:12:8d:dd:
         71:66:4e:d0:b1:ac:3a:1d:92:38:c1:6e:8c:bb:6e:48:61:12:
         8e:70:86:ca:12:03:03:31:d0:60:99:71:67:ea:60:19:20:57:
         5c:6d:60:f5:9a:ed:65:17:3a:4e:df:db:4b:5c:7e:07:10:e9:
         45:70:a6:17:ff:71:d5:97:fa:92:89:10:78:f4:fd:84:f8:51:
         aa:3f:68:80:f1:e7:d8:d9:37:c1:57:14:82:f4:80:91:ca:1c:
         3e:79:1e:30:b1:cc:f2:f1:ab:b4:18:6d:8e:67:7e:ef:c1:63:
         65:d0:e9:93:a8:73:af:56:8f:4d:bd:34:c6:79:6f:c2:40:1c:
         c4:0a:80:bb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEI17Yy37NGe2FyNyQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjRmOTFiOTgtNDk2Mi00MWNjLWI2NDYtMzk4NWI4M2Rh
MzY1MB4XDTIzMDYxMzIzMDE0NFoXDTIzMDkxMTIzMDE0NFowLzEtMCsGA1UEAxMk
ZGYwMTg2ODItYzc5ZS00NjJiLWEzMjMtZjZiZTg0MTJmMjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbtBWRpa9fL1trpuubNcvoQXDZeYjBbi8aUT
yXajfePZlrzTuB7p4E3hNefHNMV94Ob5qGacJcitHTkFNRpxOinVuMDg6cFwWoNQ
g3eEJ2adImIrjsuePwRnEprOXSJ3Yx2Sw96FgI4fIKpE+mNTFicMKq/ErXdEf53n
XZlia8gGvaf4BpxteUexMA1bk7SS12dtHlWNS24nkXn+dh3+sX3xlT6X2mIu9IFo
8cFgEm808BrZkQHg+HyoxgalVeIHsMwG9lB24PLwnfyY/MkV8fjc4poSCHoFNzjt
MFJumLVpPwC01X9d1laaWLr09jjo5eAoIb8fIdrjXpWHIb1knQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOVwDSGQg0IBYAO++v9BJkeH7M7GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NGY5
MWI5OC00OTYyLTQxY2MtYjY0Ni0zOTg1YjgzZGEzNjUvNTc5NzZkYmMtMmRhYi0z
M2Q2LTk0NGEtMWI2MjA4OTE2ZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjRmOTFiOTgtNDk2Mi00MWNjLWI2
NDYtMzk4NWI4M2RhMzY1LzY0ZjkxYjk4LTQ5NjItNDFjYy1iNjQ2LTM5ODViODNk
YTM2NS5jcmwwHwYDVR0jBBgwFoAUSu6Iv118bCVlcZ6rYhysoYQmB2AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82NGY5MWI5OC00OTYyLTQxY2MtYjY0Ni0zOTg1
YjgzZGEzNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwYA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH3TauWHEl30bJEEl9QopknhbHv8YB8BlvREBuC/L5Un0fu3n7Sr
Xks0IYMNrPg2f7jJBUNt2AO0497mmGq0DeWb+hRd5asRMooijIijyiffnTqYLm+Q
6dUXOrh+jxaqxpr8Bs+7d54ZChSnbvvuqTOLozA+sk7rfNIHTBKN3XFmTtCxrDod
kjjBboy7bkhhEo5whsoSAwMx0GCZcWfqYBkgV1xtYPWa7WUXOk7f20tcfgcQ6UVw
phf/cdWX+pKJEHj0/YT4Uao/aIDx59jZN8FXFIL0gJHKHD55HjCxzPLxq7QYbY5n
fu/BY2XQ6ZOoc69Wj029NMZ5b8JAHMQKgLs=
-----END CERTIFICATE-----