Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/58fef196-862a-350b-89bb-811751a7cd4a.roa
File:                     58fef196-862a-350b-89bb-811751a7cd4a.roa (raw, json)
Hash identifier:          kPK110SGQyDJGOUTVJM9XTL5b9zS9QTlcN0CCsWohsk=
Subject key identifier:   BB:02:B1:26:14:36:93:4E:77:A5:F2:47:AE:F2:90:1E:10:CA:58:F9
Certificate issuer:       /CN=7bcff135-f392-4225-9188-da7adfa6bf6c
Certificate serial:       010D0C9F432858422144DC36F1AE7F9122468180
Authority key identifier: C2:38:3E:1C:BD:57:8D:70:6D:04:B5:23:29:F9:A5:45:B4:5F:62:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/58fef196-862a-350b-89bb-811751a7cd4a.roa
Signing time:             Tue 06 Jun 2023 13:25:41 +0000
ROA not before:           Tue 06 Jun 2023 13:25:41 +0000
ROA not after:            Mon 04 Sep 2023 13:25:41 +0000
asID:                     399970
IP address blocks:        2602:fc3b:500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:21:44:dc:36:f1:ae:7f:91:22:46:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bcff135-f392-4225-9188-da7adfa6bf6c
        Validity
            Not Before: Jun  6 13:25:41 2023 GMT
            Not After : Sep  4 13:25:41 2023 GMT
        Subject: CN=346d1ccd-19f4-44c3-9b3e-a410d412cc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:19:85:4d:e3:5a:43:1a:c0:ab:ef:b4:ee:
                    59:1d:8b:d3:67:9b:d9:ac:76:77:68:51:a1:37:dd:
                    c4:11:a6:62:d3:6e:5f:2f:cc:6e:d9:8d:df:a6:2e:
                    b4:d8:a3:fa:86:1a:3d:9b:0d:5f:83:4c:bb:ef:63:
                    8e:97:77:d1:be:05:6e:a8:b3:2d:42:fe:bc:a6:d1:
                    48:8d:38:2f:8f:e6:88:b2:e6:61:7d:38:11:32:2f:
                    a5:26:2d:98:91:c3:10:4f:d0:c0:a9:46:5e:9c:3b:
                    c8:59:77:4b:31:34:e5:23:e0:09:be:2b:a3:47:70:
                    11:5d:01:37:41:72:ab:f4:44:f4:07:c4:1f:37:b0:
                    0d:fe:ea:a4:d6:27:db:b1:84:cf:61:c2:71:f8:52:
                    aa:6a:8c:b2:f8:99:9d:94:12:20:b4:5d:20:23:2e:
                    6a:3c:d7:6e:c7:45:0e:49:1d:9d:69:9f:23:9b:86:
                    4e:9e:c5:ce:3f:9f:17:92:e6:6c:e7:51:74:c2:69:
                    38:00:85:b3:9f:11:be:46:28:f2:b0:a2:9f:6e:7a:
                    44:95:fb:f6:45:d5:c5:45:0f:32:6d:5f:40:b9:23:
                    29:d7:af:96:76:41:16:af:72:ce:86:ad:61:bd:8f:
                    1e:82:57:3f:37:cb:93:5e:a9:5c:bd:1a:d6:63:05:
                    18:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:02:B1:26:14:36:93:4E:77:A5:F2:47:AE:F2:90:1E:10:CA:58:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/58fef196-862a-350b-89bb-811751a7cd4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/7bcff135-f392-4225-9188-da7adfa6bf6c.crl

            X509v3 Authority Key Identifier:
                keyid:C2:38:3E:1C:BD:57:8D:70:6D:04:B5:23:29:F9:A5:45:B4:5F:62:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:500::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:02:75:e8:d1:bd:02:e6:56:b7:2c:6e:a4:eb:a8:ea:1a:19:
         83:09:16:48:79:5a:fa:b3:23:bb:ef:49:3e:65:35:6b:ba:11:
         ee:27:f0:93:a1:3a:96:83:2b:19:f3:f2:1d:94:6a:4b:83:0a:
         f6:17:e0:77:5f:bb:6f:95:01:93:dd:1f:4c:b2:e8:b8:16:ae:
         7a:ec:18:43:cb:05:2b:4b:cf:50:74:83:96:46:96:57:05:c8:
         96:29:6a:91:27:ce:f2:39:33:6a:fd:25:04:c6:04:6d:44:e3:
         0a:2b:b7:f8:a6:8f:4e:43:3c:91:8f:03:1d:ff:c7:0d:35:7e:
         28:23:95:51:e8:fc:f9:dd:db:8a:c7:60:d9:83:12:21:2b:8a:
         a7:cd:c8:05:33:1e:30:c3:73:f1:8e:9a:ce:1e:96:f3:88:9e:
         a8:c2:e0:5e:47:08:a3:ce:3a:65:31:f2:04:d1:ba:e7:2f:a1:
         ce:44:0c:34:9d:83:d0:5a:43:39:90:4e:cc:fe:69:6c:99:da:
         57:78:b5:ae:55:48:d9:fd:a1:8a:fe:16:de:09:05:43:51:30:
         6e:2a:a4:31:2d:dd:91:ea:27:ec:01:fc:02:ec:fa:6b:1a:13:
         53:5c:83:37:15:c0:88:4b:4a:86:06:c4:cd:30:7f:11:7e:b8:
         c8:14:fa:37
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEIhRNw28a5/kSJGgYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JjZmYxMzUtZjM5Mi00MjI1LTkxODgtZGE3YWRmYTZi
ZjZjMB4XDTIzMDYwNjEzMjU0MVoXDTIzMDkwNDEzMjU0MVowLzEtMCsGA1UEAxMk
MzQ2ZDFjY2QtMTlmNC00NGMzLTliM2UtYTQxMGQ0MTJjYzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOwZhU3jWkMawKvvtO5ZHYvTZ5vZrHZ3aFGh
N93EEaZi025fL8xu2Y3fpi602KP6hho9mw1fg0y772OOl3fRvgVuqLMtQv68ptFI
jTgvj+aIsuZhfTgRMi+lJi2YkcMQT9DAqUZenDvIWXdLMTTlI+AJviujR3ARXQE3
QXKr9ET0B8QfN7AN/uqk1ifbsYTPYcJx+FKqaoyy+JmdlBIgtF0gIy5qPNdux0UO
SR2daZ8jm4ZOnsXOP58XkuZs51F0wmk4AIWznxG+RijysKKfbnpElfv2RdXFRQ8y
bV9AuSMp16+WdkEWr3LOhq1hvY8eglc/N8uTXqlcvRrWYwUYdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLsCsSYUNpNOd6XyR67ykB4Qylj5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83YmNm
ZjEzNS1mMzkyLTQyMjUtOTE4OC1kYTdhZGZhNmJmNmMvNThmZWYxOTYtODYyYS0z
NTBiLTg5YmItODExNzUxYTdjZDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvN2JjZmYxMzUtZjM5Mi00MjI1LTkx
ODgtZGE3YWRmYTZiZjZjLzdiY2ZmMTM1LWYzOTItNDIyNS05MTg4LWRhN2FkZmE2
YmY2Yy5jcmwwHwYDVR0jBBgwFoAUwjg+HL1XjXBtBLUjKfmlRbRfYgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83YmNmZjEzNS1mMzkyLTQyMjUtOTE4OC1kYTdh
ZGZhNmJmNmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwUA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABwCdejRvQLmVrcsbqTrqOoaGYMJFkh5WvqzI7vvST5lNWu6Ee4n
8JOhOpaDKxnz8h2UakuDCvYX4Hdfu2+VAZPdH0yy6LgWrnrsGEPLBStLz1B0g5ZG
llcFyJYpapEnzvI5M2r9JQTGBG1E4wort/imj05DPJGPAx3/xw01figjlVHo/Pnd
24rHYNmDEiEriqfNyAUzHjDDc/GOms4elvOInqjC4F5HCKPOOmUx8gTRuucvoc5E
DDSdg9BaQzmQTsz+aWyZ2ld4ta5VSNn9oYr+Ft4JBUNRMG4qpDEt3ZHqJ+wB/ALs
+msaE1NcgzcVwIhLSoYGxM0wfxF+uMgU+jc=
-----END CERTIFICATE-----