Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/028e4e22-43b2-3626-a171-72b2b4c63857.roa
File:                     028e4e22-43b2-3626-a171-72b2b4c63857.roa (raw, json)
Hash identifier:          XQpLvj3gJZjRNmiIwiMHsnDPboICFtGj/N5hwvDllQc=
Subject key identifier:   1F:F2:DC:27:20:E2:71:EF:7F:3A:D2:F8:F5:B6:D5:B2:87:63:7E:4C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285838C5284FAB675CA22AFFA75880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/028e4e22-43b2-3626-a171-72b2b4c63857.roa
Signing time:             Fri 29 Jan 2021 05:00:00 +0000
ROA not before:           Fri 29 Jan 2021 05:00:00 +0000
ROA not after:            Fri 22 Jan 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        2602:10e:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:c5:28:4f:ab:67:5c:a2:2a:ff:a7:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jan 29 05:00:00 2021 GMT
            Not After : Jan 22 05:00:00 2027 GMT
        Subject: CN=89f7db46-928a-46c3-b608-e88a39a6e6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:a6:a9:6d:99:b0:f0:e6:77:b4:18:6d:05:
                    54:4d:ef:c4:b4:d0:fb:5d:e4:e5:5f:7f:ed:08:aa:
                    c5:e0:06:af:7f:c1:6e:38:59:02:ae:02:f6:5f:f7:
                    b4:f4:f8:9f:89:e2:2b:08:1f:bc:2d:a3:13:71:14:
                    99:e8:3f:53:50:5d:f7:72:36:04:c6:2d:97:5e:81:
                    e1:0e:ab:2b:b9:ad:6b:55:9f:18:44:54:c0:b1:b5:
                    dc:b5:e0:60:36:77:a4:f3:80:5c:40:a4:0a:34:ee:
                    34:ad:91:92:25:ca:fa:5f:30:0f:a1:2e:f6:2a:47:
                    37:84:50:57:c6:53:8e:81:5c:d7:b8:00:8f:b9:5e:
                    48:cd:41:be:e3:fa:f1:5d:7a:3c:6e:e0:e4:15:0a:
                    d7:6b:85:1e:77:39:fa:c1:65:e5:e4:e4:44:0b:e4:
                    3a:40:26:c9:e8:ac:f3:82:77:55:dd:d6:64:8c:7f:
                    48:11:5e:a8:6b:42:c7:b1:97:89:52:26:49:ff:9e:
                    a2:9f:59:c7:7c:d7:6a:af:c0:86:67:ba:47:3b:2c:
                    6a:65:f3:11:b6:ea:e1:a6:8b:4b:63:f5:d4:96:c5:
                    08:ae:38:90:eb:03:eb:c8:e6:ef:66:ce:4f:51:d4:
                    61:65:2e:2a:53:7d:38:97:ad:38:3f:4f:a4:71:cb:
                    fa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F2:DC:27:20:E2:71:EF:7F:3A:D2:F8:F5:B6:D5:B2:87:63:7E:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/028e4e22-43b2-3626-a171-72b2b4c63857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:10e:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:8a:42:ca:cf:d0:1d:8c:a0:21:8a:ed:0c:c4:03:a7:06:a8:
         6b:83:f7:4c:e1:3c:cb:ce:8b:9d:8f:02:54:a1:f6:84:74:1f:
         2d:18:11:ef:cf:7a:6e:ec:5a:23:87:4d:c3:7b:d1:9a:19:70:
         99:82:2b:b5:97:a4:ed:52:02:0d:97:0c:90:b4:26:d9:3a:1b:
         54:88:23:79:08:34:d9:ba:a4:40:35:8d:66:54:2c:a2:5e:26:
         9c:65:40:e8:99:93:84:4e:6f:c5:fd:2f:21:83:1b:66:34:07:
         71:2b:b0:15:78:58:7b:89:0c:88:42:d4:99:70:33:f5:d6:c7:
         92:25:fd:d2:b1:1e:31:0c:a7:04:7a:58:01:13:a4:fc:37:c3:
         5e:37:75:fc:27:6c:bb:06:fb:44:a0:72:f9:7f:3e:c2:47:77:
         0d:5b:d3:51:b3:1e:7f:9f:8f:ac:9a:61:06:d8:e3:d2:8f:b6:
         91:76:2d:9e:f8:cf:f0:0e:aa:48:3c:d0:f2:47:49:9e:35:69:
         66:21:8e:39:c2:4e:47:4a:d1:1b:3f:c5:cd:ba:32:d3:74:7f:
         2b:48:bf:ec:44:93:59:35:0e:6c:3d:2c:a9:4d:c4:cd:da:53:
         27:ee:4b:6a:1c:69:ec:75:36:47:5d:c2:96:c7:1a:6c:61:28:
         cc:b3:8b:24
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDjFKE+rZ1yiKv+nWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTIxMDEyOTA1MDAwMFoXDTI3MDEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
ODlmN2RiNDYtOTI4YS00NmMzLWI2MDgtZTg4YTM5YTZlNmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrumqW2ZsPDmd7QYbQVUTe/EtND7XeTlX3/t
CKrF4Aavf8FuOFkCrgL2X/e09PifieIrCB+8LaMTcRSZ6D9TUF33cjYExi2XXoHh
Dqsrua1rVZ8YRFTAsbXcteBgNnek84BcQKQKNO40rZGSJcr6XzAPoS72Kkc3hFBX
xlOOgVzXuACPuV5IzUG+4/rxXXo8buDkFQrXa4Uedzn6wWXl5OREC+Q6QCbJ6Kzz
gndV3dZkjH9IEV6oa0LHsZeJUiZJ/56in1nHfNdqr8CGZ7pHOyxqZfMRturhpotL
Y/XUlsUIrjiQ6wPryObvZs5PUdRhZS4qU304l604P0+kccv6LwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB/y3Ccg4nHvfzrS+PW21bKHY35MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMDI4ZTRlMjItNDNiMi0z
NjI2LWExNzEtNzJiMmI0YzYzODU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIBDgAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHiKQsrP0B2MoCGK7QzEA6cGqGuD90zhPMvOi52PAlSh9oR0Hy0Y
Ee/Pem7sWiOHTcN70ZoZcJmCK7WXpO1SAg2XDJC0Jtk6G1SII3kINNm6pEA1jWZU
LKJeJpxlQOiZk4ROb8X9LyGDG2Y0B3ErsBV4WHuJDIhC1JlwM/XWx5Il/dKxHjEM
pwR6WAETpPw3w143dfwnbLsG+0Sgcvl/PsJHdw1b01GzHn+fj6yaYQbY49KPtpF2
LZ74z/AOqkg80PJHSZ41aWYhjjnCTkdK0Rs/xc26MtN0fytIv+xEk1k1Dmw9LKlN
xM3aUyfuS2ocaex1NkddwpbHGmxhKMyziyQ=
-----END CERTIFICATE-----