Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/cbd2a73a-be5d-3dbb-a239-037e0edfa9d3.roa
File:                     cbd2a73a-be5d-3dbb-a239-037e0edfa9d3.roa (raw, json)
Hash identifier:          oMTOTjoDJxv0g2MEjjAUlGzFWvsyYdVjBI9jP0SL8dk=
Subject key identifier:   95:A5:4C:7B:3F:21:67:EC:7E:AD:F8:2B:2F:3E:8C:DF:89:E1:6B:57
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F432858493243DECF7DB5202BC3FB1480
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/cbd2a73a-be5d-3dbb-a239-037e0edfa9d3.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     398371
IP address blocks:        198.160.26.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:de:cf:7d:b5:20:2b:c3:fb:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=6aadffe1-3d69-44a0-93f5-b83673abcceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:86:03:e5:cc:31:7d:7e:e5:d7:59:31:ce:
                    db:5f:e6:d7:41:31:84:c8:c4:fa:4a:bb:56:d0:55:
                    9c:bc:ed:f4:a6:f5:4c:56:22:66:fe:96:0a:2d:0a:
                    6f:9d:10:6d:24:02:09:6d:53:ff:ec:f8:17:a1:e3:
                    da:a1:ee:58:de:1d:ad:e8:7f:94:7c:3e:20:ac:9d:
                    de:30:7c:57:3e:56:01:f5:71:5f:e5:44:30:a4:98:
                    18:36:9a:a0:ba:06:04:f8:4e:8d:c9:c3:61:ad:8e:
                    ee:16:80:b4:ee:5d:f7:69:f3:f4:cf:0e:46:19:2c:
                    3e:b2:46:fc:ea:72:ef:55:0f:c6:08:97:2c:68:4c:
                    0e:0c:e0:13:56:12:a9:37:50:01:a5:f2:8f:78:c3:
                    3b:d8:bb:69:b5:df:62:c7:22:67:9e:39:89:35:05:
                    08:1e:db:e2:09:12:b1:07:37:be:69:50:de:4c:65:
                    7a:37:54:ad:73:ab:f2:59:3d:b2:7f:45:61:8d:c9:
                    b9:26:f7:14:3e:d7:1c:77:22:7c:43:a1:e7:d1:6b:
                    26:6b:e6:97:b0:dc:fd:98:b6:ad:70:04:b8:0f:cb:
                    c7:9c:b1:19:47:96:ea:73:78:6a:17:99:07:43:a8:
                    d4:7a:b6:bc:71:94:10:3f:1c:da:5e:a3:6c:3f:b0:
                    cf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A5:4C:7B:3F:21:67:EC:7E:AD:F8:2B:2F:3E:8C:DF:89:E1:6B:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/cbd2a73a-be5d-3dbb-a239-037e0edfa9d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5c:93:60:de:f4:47:e9:74:61:d1:2f:8c:68:14:1d:dc:69:
         21:25:a3:ad:67:85:b7:c3:f5:b6:bc:82:19:1c:71:eb:fd:2f:
         8e:3e:2d:fa:41:82:dc:33:48:ba:f5:2e:2f:8a:14:eb:94:2f:
         cb:46:94:61:cd:ba:ba:2e:8b:ca:9c:db:08:9e:3e:fc:ea:07:
         0d:31:ca:4d:37:e5:70:99:0f:fb:e6:e7:3e:98:1c:0a:ed:56:
         32:46:45:8b:bb:63:08:92:5e:99:ae:04:bf:e7:0f:d7:ef:e6:
         9e:99:2b:23:89:fe:e7:b3:df:a8:8c:0e:6b:0b:1c:ed:2a:a9:
         6c:cc:37:b1:16:64:92:b6:2f:e9:2f:01:f9:69:a7:3e:3d:a8:
         0e:41:89:94:92:15:a3:31:d6:d8:f5:3c:aa:b4:5c:a1:86:ff:
         be:bf:8e:93:c7:ae:3c:a4:7a:08:66:fb:c8:e2:8f:f5:a8:d8:
         fe:85:df:84:b7:34:f7:0e:cb:43:c3:ea:d1:91:d2:c8:10:67:
         5e:60:64:4d:05:f4:85:b7:cc:57:6b:7d:4f:01:64:bf:09:02:
         74:d5:aa:f9:64:55:5a:51:08:60:6b:29:70:ba:9b:6c:ac:68:
         ca:26:e9:df:18:85:36:0b:90:56:1f:33:d6:a2:38:ab:d9:a2:
         e5:d9:bb:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ97PfbUgK8P7FIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk
NmFhZGZmZTEtM2Q2OS00NGEwLTkzZjUtYjgzNjczYWJjY2ViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqomGA+XMMX1+5ddZMc7bX+bXQTGEyMT6SrtW
0FWcvO30pvVMViJm/pYKLQpvnRBtJAIJbVP/7PgXoePaoe5Y3h2t6H+UfD4grJ3e
MHxXPlYB9XFf5UQwpJgYNpqgugYE+E6NycNhrY7uFoC07l33afP0zw5GGSw+skb8
6nLvVQ/GCJcsaEwODOATVhKpN1ABpfKPeMM72Ltptd9ixyJnnjmJNQUIHtviCRKx
Bze+aVDeTGV6N1Stc6vyWT2yf0Vhjcm5JvcUPtccdyJ8Q6Hn0Wsma+aXsNz9mLat
cAS4D8vHnLEZR5bqc3hqF5kHQ6jUera8cZQQPxzaXqNsP7DPIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJWlTHs/IWfsfq34Ky8+jN+J4WtXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvY2JkMmE3M2EtYmU1ZC0z
ZGJiLWEyMzktMDM3ZTBlZGZhOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqAaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHRck2De9EfpdGHRL4xoFB3caSElo61nhbfD9ba8ghkccev9L44+LfpB
gtwzSLr1Li+KFOuUL8tGlGHNuroui8qc2wiePvzqBw0xyk035XCZD/vm5z6YHArt
VjJGRYu7YwiSXpmuBL/nD9fv5p6ZKyOJ/uez36iMDmsLHO0qqWzMN7EWZJK2L+kv
Aflppz49qA5BiZSSFaMx1tj1PKq0XKGG/76/jpPHrjykeghm+8jij/Wo2P6F34S3
NPcOy0PD6tGR0sgQZ15gZE0F9IW3zFdrfU8BZL8JAnTVqvlkVVpRCGBrKXC6m2ys
aMom6d8YhTYLkFYfM9aiOKvZouXZux0=
-----END CERTIFICATE-----