Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/88c5782a-cd5f-3e3d-9cd0-4164da80a227.roa
File:                     88c5782a-cd5f-3e3d-9cd0-4164da80a227.roa (raw, json)
Hash identifier:          ffuczr5qvhC7zq3dX1INWlIdDwe92U/ab1RzvNMbWMQ=
Subject key identifier:   5A:CF:27:0C:3A:45:88:D6:E5:4F:84:5A:DA:19:4A:F9:F6:94:C6:27
Certificate issuer:       /CN=27c1dec1-056b-4683-80a9-498890185763
Certificate serial:       010D0C9F43285848E16BEE587B16624282EEBB00
Authority key identifier: 5B:F7:35:27:E5:64:B4:C1:F1:66:FA:A1:40:95:06:A3:08:52:85:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/88c5782a-cd5f-3e3d-9cd0-4164da80a227.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2001:19e8:283::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:ee:58:7b:16:62:42:82:ee:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c1dec1-056b-4683-80a9-498890185763
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=cfb37fca-51c8-43b6-865b-a13154974a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:97:7b:e0:6f:a9:11:73:ed:9e:21:b7:09:8d:
                    4a:4a:3b:8a:25:f9:4a:f5:10:0c:35:b3:c5:ac:0e:
                    94:9d:0f:64:13:15:d9:db:3e:f5:d9:22:c9:d6:20:
                    e1:b8:b5:bb:0b:07:3a:ba:df:9f:29:bb:67:05:56:
                    b7:56:64:c4:02:3b:c2:df:b5:d5:aa:d5:fd:dc:37:
                    cd:02:86:8d:e3:b5:cb:c7:8c:dc:71:ac:18:51:52:
                    76:4a:14:eb:a3:7b:20:4a:2c:74:52:1a:15:99:6f:
                    5f:6a:4e:28:fe:a8:95:97:a5:06:dc:51:9a:f7:d4:
                    02:f5:d2:df:3f:ec:50:bd:a2:17:30:f6:5a:3c:95:
                    af:3d:ee:44:31:51:e9:61:8b:bc:cd:8a:76:f4:ca:
                    21:bb:48:9e:f0:98:2f:55:04:a8:95:e6:c4:09:78:
                    99:69:17:73:a9:80:97:b4:c4:d0:42:84:e1:09:df:
                    d9:1f:3e:de:1c:a7:21:e7:d8:30:ed:49:b6:69:f5:
                    22:a5:66:53:02:a0:f6:3f:81:7b:78:c6:c2:aa:66:
                    fe:fc:7e:80:43:f8:f1:25:6b:93:fa:98:41:26:66:
                    e7:ed:8a:74:0e:60:13:9c:86:ff:de:30:25:6c:cb:
                    5a:0c:39:aa:97:77:01:7e:9d:54:c4:f5:bb:4b:0f:
                    d5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CF:27:0C:3A:45:88:D6:E5:4F:84:5A:DA:19:4A:F9:F6:94:C6:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/88c5782a-cd5f-3e3d-9cd0-4164da80a227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/27c1dec1-056b-4683-80a9-498890185763.crl

            X509v3 Authority Key Identifier:
                keyid:5B:F7:35:27:E5:64:B4:C1:F1:66:FA:A1:40:95:06:A3:08:52:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19e8:283::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:30:61:ce:5e:5b:47:26:02:b7:33:f4:6d:af:1c:06:0b:db:
         68:c0:57:6d:eb:8a:49:08:5a:f9:16:27:45:53:89:ea:47:19:
         e6:a2:f4:95:72:0d:06:52:8f:ca:eb:87:ff:80:b6:84:97:e0:
         85:49:ac:fa:49:12:18:4c:6f:36:fa:6c:e3:6c:15:22:6e:df:
         8a:27:28:28:47:07:9f:4f:72:db:0f:4f:cb:21:9f:cc:39:cc:
         b4:90:e4:68:7f:41:e0:7d:57:13:bb:46:82:a3:d1:b7:a8:5e:
         bc:19:af:45:b7:d5:f3:36:a6:fc:0a:e1:b6:2d:f0:55:79:28:
         26:9e:dd:97:58:ec:1d:50:aa:25:27:41:8b:d4:73:87:c7:e6:
         1a:eb:6a:4c:12:63:4a:7c:63:c6:c4:c9:73:28:5a:cb:48:6f:
         2e:8a:98:18:21:24:1e:d9:8b:b4:7c:ee:e7:8e:89:86:4d:c1:
         cc:fd:fd:73:29:90:b1:67:c9:89:93:8a:9c:6d:29:0e:6a:49:
         6a:b4:14:3f:2a:aa:55:a5:dc:70:ec:69:a0:47:4e:fe:eb:70:
         75:e7:81:1c:56:80:2d:c6:85:6d:fa:8c:cc:e5:6e:c2:4c:cc:
         f0:a9:2a:2c:1f:55:c7:2c:ed:20:b5:84:6f:c7:92:95:c1:86:
         48:9a:92:92
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjha+5YexZiQoLuuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjdjMWRlYzEtMDU2Yi00NjgzLTgwYTktNDk4ODkwMTg1
NzYzMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
Y2ZiMzdmY2EtNTFjOC00M2I2LTg2NWItYTEzMTU0OTc0YTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZd74G+pEXPtniG3CY1KSjuKJflK9RAMNbPF
rA6UnQ9kExXZ2z712SLJ1iDhuLW7Cwc6ut+fKbtnBVa3VmTEAjvC37XVqtX93DfN
AoaN47XLx4zccawYUVJ2ShTro3sgSix0UhoVmW9fak4o/qiVl6UG3FGa99QC9dLf
P+xQvaIXMPZaPJWvPe5EMVHpYYu8zYp29Mohu0ie8JgvVQSolebECXiZaRdzqYCX
tMTQQoThCd/ZHz7eHKch59gw7Um2afUipWZTAqD2P4F7eMbCqmb+/H6AQ/jxJWuT
+phBJmbn7Yp0DmATnIb/3jAlbMtaDDmql3cBfp1UxPW7Sw/VqQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFrPJww6RYjW5U+EWtoZSvn2lMYnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yN2Mx
ZGVjMS0wNTZiLTQ2ODMtODBhOS00OTg4OTAxODU3NjMvODhjNTc4MmEtY2Q1Zi0z
ZTNkLTljZDAtNDE2NGRhODBhMjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjdjMWRlYzEtMDU2Yi00NjgzLTgw
YTktNDk4ODkwMTg1NzYzLzI3YzFkZWMxLTA1NmItNDY4My04MGE5LTQ5ODg5MDE4
NTc2My5jcmwwHwYDVR0jBBgwFoAUW/c1J+VktMHxZvqhQJUGowhShU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yN2MxZGVjMS0wNTZiLTQ2ODMtODBhOS00OTg4
OTAxODU3NjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZ6AKD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFwwYc5eW0cmArcz9G2vHAYL22jAV23rikkIWvkWJ0VTiepHGeai
9JVyDQZSj8rrh/+AtoSX4IVJrPpJEhhMbzb6bONsFSJu34onKChHB59PctsPT8sh
n8w5zLSQ5Gh/QeB9VxO7RoKj0beoXrwZr0W31fM2pvwK4bYt8FV5KCae3ZdY7B1Q
qiUnQYvUc4fH5hrrakwSY0p8Y8bEyXMoWstIby6KmBghJB7Zi7R87ueOiYZNwcz9
/XMpkLFnyYmTipxtKQ5qSWq0FD8qqlWl3HDsaaBHTv7rcHXngRxWgC3GhW36jMzl
bsJMzPCpKiwfVccs7SC1hG/HkpXBhkiakpI=
-----END CERTIFICATE-----