Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/5e002149-54d7-3744-86b6-104dbb32fe74.roa
File:                     5e002149-54d7-3744-86b6-104dbb32fe74.roa (raw, json)
Hash identifier:          WNcNGpR32F+Ext3lT/JOb63cqPRkZJL4pTXQ44bxXRk=
Subject key identifier:   CD:31:00:AD:A1:E4:67:FF:03:D6:79:58:0A:32:08:51:2F:5D:ED:49
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F43285848A6CB68D0BE68116910510200
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/5e002149-54d7-3744-86b6-104dbb32fe74.roa
Signing time:             Fri 24 Jan 2025 14:00:52 +0000
ROA not before:           Fri 24 Jan 2025 14:00:52 +0000
ROA not after:            Thu 24 Apr 2025 13:00:52 +0000
asID:                     13778
IP address blocks:        2602:281::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a6:cb:68:d0:be:68:11:69:10:51:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jan 24 14:00:52 2025 GMT
            Not After : Apr 24 13:00:52 2025 GMT
        Subject: CN=824b8415-11e3-448e-8b64-12692904ae92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:06:e7:0f:80:bf:09:fd:15:70:d4:4e:8a:c1:
                    40:eb:f4:65:b3:2e:65:2e:b6:2f:16:54:f0:eb:e6:
                    b9:bf:ee:51:64:d7:04:75:de:6f:6a:64:1b:fe:e5:
                    d5:7c:f7:32:d9:4a:f8:6b:f5:25:58:f4:9f:7c:e1:
                    6d:ac:0f:1e:48:90:86:0a:4c:3a:a3:92:7d:d1:da:
                    06:d4:0e:8d:2d:1c:c6:8b:eb:f4:b9:43:0f:aa:eb:
                    c0:fc:fa:d9:82:0e:5c:df:73:96:22:e2:f8:b5:f0:
                    b7:26:e4:76:fa:00:ce:f5:1c:e4:31:9e:00:8e:86:
                    e4:8e:48:be:ea:eb:28:af:9d:5e:a2:07:17:e0:eb:
                    3a:a0:97:b9:c9:1e:4f:6c:5f:10:b6:e7:fa:53:ed:
                    6a:eb:8b:73:99:06:60:1e:bc:7c:ce:72:47:29:23:
                    c9:e1:8f:56:1a:f1:25:78:27:50:03:96:3f:80:09:
                    41:c9:1f:7e:c9:99:21:38:6f:e0:eb:1b:3a:ba:5e:
                    7c:fb:ad:96:19:68:b1:90:9c:92:b7:e0:2c:f7:68:
                    6e:f7:7c:52:d4:ee:a9:d2:19:37:52:9d:43:76:cd:
                    97:5c:28:a6:4f:72:8d:ca:aa:91:e6:44:d5:fe:37:
                    15:c4:1b:d5:b4:1a:7f:88:a9:d0:b4:60:e1:ca:ed:
                    d9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:31:00:AD:A1:E4:67:FF:03:D6:79:58:0A:32:08:51:2F:5D:ED:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/5e002149-54d7-3744-86b6-104dbb32fe74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:281::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:22:0f:30:b5:26:11:66:98:32:26:ba:81:7f:04:ef:fa:49:
         d3:6f:0d:4a:19:3d:cd:30:7b:60:bd:4f:ed:d4:71:ee:35:c0:
         a9:4a:1c:9f:11:82:6f:ae:91:6c:61:74:af:21:b1:fb:78:0b:
         4c:ce:93:a7:0d:00:ab:d8:d1:50:d2:70:6c:38:68:0d:7e:07:
         42:a7:14:7c:12:46:54:fb:75:a7:f3:fa:3d:48:e2:2b:c9:ae:
         b8:b0:b2:94:1c:41:2e:ad:e1:0d:f0:dc:2c:fb:af:e5:8c:6a:
         17:76:fa:e3:36:a0:18:25:c8:c8:18:02:f3:ee:0f:8e:f5:c0:
         b9:73:e4:71:3b:a7:17:44:92:33:57:55:7e:26:f1:50:60:be:
         17:f1:fd:44:1a:3b:3b:5c:d5:6d:e2:8a:b2:47:98:7d:b0:9d:
         13:9b:ab:de:4c:ad:bd:a5:61:a2:0c:b2:2e:1e:9b:f5:d8:02:
         4e:19:7d:38:ae:42:89:10:c7:fa:30:ce:ae:22:e3:74:07:47:
         5b:1e:cf:7c:39:2a:09:d9:b3:81:dd:ed:58:ae:36:5a:d4:81:
         ff:14:c6:ed:49:29:d1:fe:03:93:46:f5:8e:43:24:3a:2b:aa:
         2e:bf:29:20:67:55:24:c0:29:72:04:a9:b8:60:2d:5e:fe:3a:
         46:e6:cc:fe
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEimy2jQvmgRaRBRAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl
NzUxMB4XDTI1MDEyNDE0MDA1MloXDTI1MDQyNDEzMDA1MlowLzEtMCsGA1UEAxMk
ODI0Yjg0MTUtMTFlMy00NDhlLThiNjQtMTI2OTI5MDRhZTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwbnD4C/Cf0VcNROisFA6/Rlsy5lLrYvFlTw
6+a5v+5RZNcEdd5vamQb/uXVfPcy2Ur4a/UlWPSffOFtrA8eSJCGCkw6o5J90doG
1A6NLRzGi+v0uUMPquvA/PrZgg5c33OWIuL4tfC3JuR2+gDO9RzkMZ4Ajobkjki+
6usor51eogcX4Os6oJe5yR5PbF8Qtuf6U+1q64tzmQZgHrx8znJHKSPJ4Y9WGvEl
eCdQA5Y/gAlByR9+yZkhOG/g6xs6ul58+62WGWixkJySt+As92hu93xS1O6p0hk3
Up1Dds2XXCimT3KNyqqR5kTV/jcVxBvVtBp/iKnQtGDhyu3ZSwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFM0xAK2h5Gf/A9Z5WAoyCFEvXe1JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2
NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvNWUwMDIxNDktNTRkNy0z
NzQ0LTg2YjYtMTA0ZGJiMzJmZTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh
MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz
ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj
NjlhM2U3NTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgICgTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCNIg8wtSYRZpgyJrqBfwTv+knTbw1KGT3NMHtgvU/t1HHuNcCpShyf
EYJvrpFsYXSvIbH7eAtMzpOnDQCr2NFQ0nBsOGgNfgdCpxR8EkZU+3Wn8/o9SOIr
ya64sLKUHEEureEN8Nws+6/ljGoXdvrjNqAYJcjIGALz7g+O9cC5c+RxO6cXRJIz
V1V+JvFQYL4X8f1EGjs7XNVt4oqyR5h9sJ0Tm6veTK29pWGiDLIuHpv12AJOGX04
rkKJEMf6MM6uIuN0B0dbHs98OSoJ2bOB3e1YrjZa1IH/FMbtSSnR/gOTRvWOQyQ6
K6ouvykgZ1UkwClyBKm4YC1e/jpG5sz+
-----END CERTIFICATE-----