Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3a2f33322d3332203d3e203137313339.roa
File:                     323630373a666361383a3a2f33322d3332203d3e203137313339.roa (raw, json)
Hash identifier:          jqe4CDkPlZFChO2mVavIT1ukw5myhBrEinKEBIPl5gE=
Subject key identifier:   20:17:01:E0:62:D1:B1:1F:8F:C2:F9:B8:CD:26:4F:F8:7F:25:DC:74
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       105E8B81CF56095001B2816C46844F8D3C0D9035
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3a2f33322d3332203d3e203137313339.roa
Signing time:             Thu 16 Jan 2025 12:38:58 +0000
ROA not before:           Thu 16 Jan 2025 12:33:58 +0000
ROA not after:            Thu 15 Jan 2026 12:38:58 +0000
asID:                     17139
IP address blocks:        2607:fca8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5e:8b:81:cf:56:09:50:01:b2:81:6c:46:84:4f:8d:3c:0d:90:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Jan 16 12:33:58 2025 GMT
            Not After : Jan 15 12:38:58 2026 GMT
        Subject: CN=201701E062D1B11F8FC2F9B8CD264FF87F25DC74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:5b:7f:e7:ae:a2:35:fc:55:f1:06:c7:a6:
                    33:48:7d:f7:a6:1d:33:23:e8:93:28:03:b5:20:20:
                    6a:c7:12:9b:5f:37:18:87:7f:1e:4b:75:e7:ed:81:
                    62:e4:29:af:aa:da:61:b2:8b:f9:29:3f:b7:f5:07:
                    80:0a:8d:0d:f3:40:19:e3:7b:90:cb:58:32:10:4f:
                    e9:a9:db:59:31:c8:b9:b9:18:0c:f5:12:37:86:7d:
                    54:90:91:bb:27:7a:be:71:c1:75:15:a1:2e:16:aa:
                    d0:65:27:fa:43:c9:62:21:7b:ef:2a:2a:22:30:e8:
                    8c:d5:93:2a:21:32:af:e4:3e:67:e9:02:2c:70:63:
                    0b:cf:de:be:89:d7:7a:8c:01:76:ff:1d:a6:b6:23:
                    b8:fe:5c:19:10:b8:08:21:ac:ef:9c:fe:65:ff:5c:
                    19:91:f0:8a:1b:84:85:1c:ca:ec:ec:ba:69:fb:8e:
                    b9:cf:45:ca:09:42:21:a6:17:63:a8:40:88:96:ca:
                    bb:03:0d:50:b8:e5:4d:0b:0d:01:97:2b:74:03:04:
                    04:eb:d3:4c:d8:a6:27:73:80:02:8f:7f:25:4e:08:
                    b4:4f:da:0c:c5:66:18:c4:3c:0e:de:08:0d:79:94:
                    84:9c:e2:a5:7f:ba:8e:82:ab:92:0b:e2:4c:79:86:
                    38:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:17:01:E0:62:D1:B1:1F:8F:C2:F9:B8:CD:26:4F:F8:7F:25:DC:74
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3a2f33322d3332203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fca8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:d0:ff:d1:28:45:18:8c:b9:0b:77:8d:26:cc:1e:78:12:c9:
         46:e8:23:c5:ac:87:b0:cc:1b:f2:c2:f7:8b:ea:5e:2c:78:17:
         67:89:ca:74:d1:5e:03:92:05:31:a4:26:b7:a9:86:13:df:bb:
         3e:a6:c0:11:ea:a1:b6:17:f8:15:18:2c:17:b4:7b:9a:76:f3:
         26:da:9b:a1:2a:54:4a:fc:ee:78:8b:ff:db:65:1e:0a:13:52:
         da:e0:17:d5:8f:82:56:71:db:89:9b:e9:44:15:54:8d:70:e5:
         2e:14:33:a7:fd:f7:be:81:a3:57:08:9b:1b:89:9e:00:3d:c4:
         b0:df:a5:ae:b9:3c:a0:0f:d7:6d:c7:f5:a0:0f:ce:66:7d:4a:
         c5:ba:0e:b7:53:7a:e6:e7:f1:a0:d4:c3:05:65:29:31:a3:bc:
         be:e2:0b:b9:ea:9b:bd:15:a2:ae:ea:91:d0:eb:14:1b:85:d4:
         98:20:d5:ad:c7:26:3d:47:36:7a:6e:9c:0a:45:11:cf:83:98:
         ab:48:36:ca:65:d5:5f:79:99:1f:36:97:41:62:2b:1a:8c:7a:
         d8:d4:b4:b4:2f:64:a1:6f:a2:fc:eb:90:89:28:95:08:ef:1b:
         a1:5b:bb:6e:16:84:c1:96:b0:21:f1:01:38:55:81:4b:87:af:
         8c:5e:27:6d
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIUEF6Lgc9WCVABsoFsRoRPjTwNkDUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjUwMTE2MTIzMzU4WhcNMjYwMTE1MTIzODU4
WjAzMTEwLwYDVQQDEygyMDE3MDFFMDYyRDFCMTFGOEZDMkY5QjhDRDI2NEZGODdG
MjVEQzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWlbf+euojX8
VfEGx6YzSH33ph0zI+iTKAO1ICBqxxKbXzcYh38eS3Xn7YFi5Cmvqtphsov5KT+3
9QeACo0N80AZ43uQy1gyEE/pqdtZMci5uRgM9RI3hn1UkJG7J3q+ccF1FaEuFqrQ
ZSf6Q8liIXvvKioiMOiM1ZMqITKv5D5n6QIscGMLz96+idd6jAF2/x2mtiO4/lwZ
ELgIIazvnP5l/1wZkfCKG4SFHMrs7Lpp+465z0XKCUIhphdjqECIlsq7Aw1QuOVN
Cw0Blyt0AwQE69NM2KYnc4ACj38lTgi0T9oMxWYYxDwO3ggNeZSEnOKlf7qOgquS
C+JMeYY4wQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFCAXAeBi0bEfj8L5uM0mT/h/
Jdx0MB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMyMzYzMDM3M2E2NjYzNjEzODNhM2EyZjMzMzIyZDMzMzIy
MDNkM2UyMDMxMzczMTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmB/yoMA0GCSqGSIb3DQEBCwUA
A4IBAQAs0P/RKEUYjLkLd40mzB54EslG6CPFrIewzBvywveL6l4seBdnicp00V4D
kgUxpCa3qYYT37s+psAR6qG2F/gVGCwXtHuadvMm2puhKlRK/O54i//bZR4KE1La
4BfVj4JWcduJm+lEFVSNcOUuFDOn/fe+gaNXCJsbiZ4APcSw36WuuTygD9dtx/Wg
D85mfUrFug63U3rm5/Gg1MMFZSkxo7y+4gu56pu9FaKu6pHQ6xQbhdSYINWtxyY9
RzZ6bpwKRRHPg5irSDbKZdVfeZkfNpdBYisajHrY1LS0L2Shb6L865CJKJUI7xuh
W7tuFoTBlrAh8QE4VYFLh6+MXidt
-----END CERTIFICATE-----