Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa
File:                     9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa (raw, json)
Hash identifier:          7LZ/jDcaxDb/7/HepLTUzLAtLWUsyuCGE09/ckL1GI0=
Subject key identifier:   CE:3C:E1:6E:E0:19:6C:CE:4D:42:41:27:52:49:F6:A7:49:69:7D:21
Certificate issuer:       /CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39
Certificate serial:       010D0C9F4328584832F02DC72EC078FB23A4A480
Authority key identifier: 0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     984
IP address blocks:        2606:fb40::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:2d:c7:2e:c0:78:fb:23:a4:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=4117543d-688e-40f1-9528-dda13f6e2ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:b1:e7:6d:f9:c5:88:32:37:08:97:16:e2:
                    8c:89:17:41:1b:22:39:79:fa:8a:ae:0a:0c:00:e5:
                    98:aa:5c:a3:f4:28:c0:37:8e:80:c9:3f:ea:5f:0c:
                    c3:67:0f:9a:bd:3f:e8:5a:ee:37:6a:4f:70:5d:9a:
                    ba:10:5f:b2:e6:ca:f2:5f:6d:da:98:2e:05:c6:c4:
                    2f:ac:6b:80:d0:37:6f:e6:da:95:79:b5:91:e9:f1:
                    59:22:aa:98:91:ec:2a:c1:5e:2b:49:2a:43:23:61:
                    d9:cd:8c:22:5d:7c:c8:6a:cd:a0:c7:e9:d4:54:36:
                    f3:f2:39:98:28:b2:96:80:14:63:dd:48:fe:2e:8d:
                    a2:2f:72:2f:3b:0b:f4:03:b1:15:12:33:97:56:77:
                    54:84:7e:1a:5c:ed:7d:ae:26:d6:b2:b9:50:d2:f4:
                    22:9b:c9:f7:6c:73:54:c8:31:4e:65:7d:1d:8b:b2:
                    a0:03:5a:1b:f3:95:38:41:f7:ce:18:51:13:56:23:
                    cb:ca:85:9f:f9:d5:37:f9:64:0d:4a:23:6b:21:b0:
                    3f:71:e5:66:4c:ea:61:97:0e:3f:2d:2e:57:d8:58:
                    ed:72:ad:6f:e1:af:1f:9d:ca:2e:97:31:31:c4:eb:
                    8a:a5:e7:24:1b:ad:f6:da:cb:7f:b1:5d:a4:05:30:
                    ea:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3C:E1:6E:E0:19:6C:CE:4D:42:41:27:52:49:F6:A7:49:69:7D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl

            X509v3 Authority Key Identifier:
                keyid:0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fb40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ee:aa:07:80:1c:fe:4f:60:6b:c3:57:b4:dd:91:3d:91:10:
         19:18:85:a7:b2:c8:d4:68:1a:51:3e:b1:04:91:6e:17:77:9e:
         ac:1c:b4:0b:3e:45:88:5d:86:de:e2:49:b8:69:46:fc:ce:3d:
         c3:66:03:e2:3c:96:62:51:78:5a:0e:38:3b:21:13:89:70:44:
         34:ea:e4:97:2d:d3:20:81:6c:a3:b2:d9:e5:d4:58:0d:5f:68:
         08:5c:2c:9a:93:8e:e3:25:e3:57:1d:11:c3:61:39:8a:df:68:
         57:a7:3f:a4:b3:fb:0b:ca:be:2e:0b:fa:d1:6a:50:20:71:6d:
         05:cc:d0:0b:c5:86:08:ae:50:4d:bf:14:54:86:eb:9e:f5:b4:
         62:fb:c6:dd:a8:23:6c:8a:95:bd:95:30:a0:1d:fe:23:03:c6:
         10:e2:04:3c:21:83:ff:14:b1:88:60:21:c1:a4:38:66:49:de:
         81:81:16:36:ad:05:61:c6:d4:2e:46:2f:48:33:20:aa:c6:cd:
         86:ff:40:b3:6f:49:6a:7d:71:b5:2c:35:93:dc:28:bd:2c:11:
         c1:ad:4d:19:58:ad:0e:bf:d3:f9:68:a9:42:7b:59:74:1a:a7:
         9d:df:86:dd:60:16:27:74:24:4e:26:85:81:c4:0a:35:90:f6:
         86:3a:07:48
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgy8C3HLsB4+yOkpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODIzZTk3NzgtZTZlMy00ZDg1LWEyZTItN2U5MmNiYzk5
ZjM5MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
NDExNzU0M2QtNjg4ZS00MGYxLTk1MjgtZGRhMTNmNmUyZWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSyx5235xYgyNwiXFuKMiRdBGyI5efqKrgoM
AOWYqlyj9CjAN46AyT/qXwzDZw+avT/oWu43ak9wXZq6EF+y5sryX23amC4FxsQv
rGuA0Ddv5tqVebWR6fFZIqqYkewqwV4rSSpDI2HZzYwiXXzIas2gx+nUVDbz8jmY
KLKWgBRj3Uj+Lo2iL3IvOwv0A7EVEjOXVndUhH4aXO19ribWsrlQ0vQim8n3bHNU
yDFOZX0di7KgA1ob85U4QffOGFETViPLyoWf+dU3+WQNSiNrIbA/ceVmTOphlw4/
LS5X2Fjtcq1v4a8fncoulzExxOuKpeckG6322st/sV2kBTDqNQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFM484W7gGWzOTUJBJ1JJ9qdJaX0hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MjNl
OTc3OC1lNmUzLTRkODUtYTJlMi03ZTkyY2JjOTlmMzkvOWJlYTc0NTItNjNlMC0z
NWY0LTg1NTItM2QyZmIxOWQwZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODIzZTk3NzgtZTZlMy00ZDg1LWEy
ZTItN2U5MmNiYzk5ZjM5LzgyM2U5Nzc4LWU2ZTMtNGQ4NS1hMmUyLTdlOTJjYmM5
OWYzOS5jcmwwHwYDVR0jBBgwFoAUDTgDTsHDzqfx7cDC1r7PRL3a43wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84MjNlOTc3OC1lNmUzLTRkODUtYTJlMi03ZTky
Y2JjOTlmMzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgb7QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB27qoHgBz+T2Brw1e03ZE9kRAZGIWnssjUaBpRPrEEkW4Xd56sHLQL
PkWIXYbe4km4aUb8zj3DZgPiPJZiUXhaDjg7IROJcEQ06uSXLdMggWyjstnl1FgN
X2gIXCyak47jJeNXHRHDYTmK32hXpz+ks/sLyr4uC/rRalAgcW0FzNALxYYIrlBN
vxRUhuue9bRi+8bdqCNsipW9lTCgHf4jA8YQ4gQ8IYP/FLGIYCHBpDhmSd6BgRY2
rQVhxtQuRi9IMyCqxs2G/0Czb0lqfXG1LDWT3Ci9LBHBrU0ZWK0Ov9P5aKlCe1l0
Gqed34bdYBYndCROJoWBxAo1kPaGOgdI
-----END CERTIFICATE-----