Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/c3a7c5d9-c810-3d85-b785-499af7c6f2e3.roa
File:                     c3a7c5d9-c810-3d85-b785-499af7c6f2e3.roa (raw, json)
Hash identifier:          F2HH34Ut3OhDR+W388K3iwgU5CC7ijD2G5DM1WdDOQA=
Subject key identifier:   92:70:C3:F1:83:2D:7E:9E:64:18:9F:07:0A:27:52:21:F8:6B:54:47
Certificate issuer:       /CN=0059f687-be1d-4396-97d0-dbe0841392ac
Certificate serial:       010D0C9F43285848467ABEC67AE2CB2D591B0500
Authority key identifier: 91:5A:27:BD:FD:4F:FA:BA:5C:37:F9:84:46:9D:C8:D9:14:7A:CE:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/c3a7c5d9-c810-3d85-b785-499af7c6f2e3.roa
Signing time:             Sat 21 Dec 2024 02:00:39 +0000
ROA not before:           Sat 21 Dec 2024 02:00:39 +0000
ROA not after:            Fri 21 Mar 2025 01:00:39 +0000
asID:                     23121
IP address blocks:        2602:f913:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:46:7a:be:c6:7a:e2:cb:2d:59:1b:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059f687-be1d-4396-97d0-dbe0841392ac
        Validity
            Not Before: Dec 21 02:00:39 2024 GMT
            Not After : Mar 21 01:00:39 2025 GMT
        Subject: CN=16d89956-31ea-432a-849c-590d6bd9b06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:82:3d:3a:f5:cb:f2:12:90:4e:fc:bc:95:
                    b2:56:f3:f3:46:11:2b:f8:45:15:9b:02:9b:65:1e:
                    f4:d1:a0:1b:e4:1a:f0:d1:bd:b3:dd:ee:da:2c:9d:
                    84:69:c7:42:c3:0b:65:a3:ca:f3:04:cc:22:ca:ec:
                    52:98:48:37:51:d8:d2:1d:ee:f9:c2:c7:95:08:a2:
                    3e:80:b8:2b:87:db:0c:f9:de:c3:f5:3c:d9:3c:99:
                    f7:c4:49:85:93:f1:9f:61:d2:23:56:45:9b:dc:b7:
                    dd:c5:49:ab:d9:dd:9e:86:a6:ca:cf:12:6c:08:25:
                    ae:a9:4d:3d:70:75:3e:18:58:51:3d:e9:f1:b0:ab:
                    c1:5c:be:d4:28:29:dd:29:b2:8b:62:45:2d:d4:17:
                    14:d3:97:89:d5:01:51:9f:24:4f:98:3f:ab:84:5f:
                    70:fa:00:4e:66:23:db:00:36:77:59:91:85:78:98:
                    6d:90:e0:e5:b6:24:3c:70:16:e5:1a:78:86:f2:2d:
                    8c:34:23:90:7c:70:54:b5:93:06:b6:06:d8:bd:2f:
                    de:9a:41:8d:17:b5:b8:eb:ba:f9:ce:cc:3e:f7:93:
                    b6:08:03:0e:f9:a3:58:fe:2e:4f:61:11:9e:86:4c:
                    66:0a:26:10:86:61:fd:8f:cb:42:29:fc:bd:70:74:
                    39:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:70:C3:F1:83:2D:7E:9E:64:18:9F:07:0A:27:52:21:F8:6B:54:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/c3a7c5d9-c810-3d85-b785-499af7c6f2e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/0059f687-be1d-4396-97d0-dbe0841392ac.crl

            X509v3 Authority Key Identifier:
                keyid:91:5A:27:BD:FD:4F:FA:BA:5C:37:F9:84:46:9D:C8:D9:14:7A:CE:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f913:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b3:a4:4c:ff:a3:84:87:f1:c3:dc:f2:c7:01:a7:5e:79:9c:
         ff:ae:46:35:be:92:b6:e5:21:e3:33:4b:f3:3a:08:de:ac:15:
         00:56:f2:e6:b3:00:df:40:fb:c8:16:9f:d2:3a:2d:c6:e7:c9:
         90:ec:c0:85:02:6f:4e:77:f7:3c:9f:d1:76:e5:21:4e:f1:3d:
         55:75:c3:58:8f:9c:c8:88:f1:47:4a:4f:c4:60:d3:27:9d:16:
         b2:ca:eb:58:a5:21:fa:a7:2c:93:cf:5d:91:3a:b1:53:98:1a:
         95:c5:c8:ec:b8:2f:b8:73:fb:29:a8:85:dd:9f:c7:38:76:42:
         b3:27:af:3e:94:23:1b:22:e5:e3:0c:05:31:b0:83:08:28:dc:
         2f:2a:95:be:51:cc:36:a4:1e:19:f1:b3:71:e0:20:70:3f:88:
         77:33:44:fd:f1:9c:16:89:d3:b4:6d:98:72:d9:28:7a:74:53:
         ab:59:f3:26:c7:ba:5e:13:4f:f0:9f:29:66:20:2f:71:36:07:
         6b:b6:df:ec:8b:d9:41:d7:33:49:a0:d4:d4:e1:7c:75:22:b9:
         21:f1:4e:ed:94:74:1f:8a:a8:5d:a2:b2:44:d7:9d:0f:93:7c:
         e8:af:50:60:3d:29:d8:9a:83:7f:07:ff:f5:4c:bd:94:0f:db:
         45:8c:36:9a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhGer7GeuLLLVkbBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA1OWY2ODctYmUxZC00Mzk2LTk3ZDAtZGJlMDg0MTM5
MmFjMB4XDTI0MTIyMTAyMDAzOVoXDTI1MDMyMTAxMDAzOVowLzEtMCsGA1UEAxMk
MTZkODk5NTYtMzFlYS00MzJhLTg0OWMtNTkwZDZiZDliMDZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUSCPTr1y/ISkE78vJWyVvPzRhEr+EUVmwKb
ZR700aAb5Brw0b2z3e7aLJ2EacdCwwtlo8rzBMwiyuxSmEg3UdjSHe75wseVCKI+
gLgrh9sM+d7D9TzZPJn3xEmFk/GfYdIjVkWb3LfdxUmr2d2ehqbKzxJsCCWuqU09
cHU+GFhRPenxsKvBXL7UKCndKbKLYkUt1BcU05eJ1QFRnyRPmD+rhF9w+gBOZiPb
ADZ3WZGFeJhtkODltiQ8cBblGniG8i2MNCOQfHBUtZMGtgbYvS/emkGNF7W467r5
zsw+95O2CAMO+aNY/i5PYRGehkxmCiYQhmH9j8tCKfy9cHQ5MwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJJww/GDLX6eZBifBwonUiH4a1RHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wMDU5
ZjY4Ny1iZTFkLTQzOTYtOTdkMC1kYmUwODQxMzkyYWMvYzNhN2M1ZDktYzgxMC0z
ZDg1LWI3ODUtNDk5YWY3YzZmMmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDA1OWY2ODctYmUxZC00Mzk2LTk3
ZDAtZGJlMDg0MTM5MmFjLzAwNTlmNjg3LWJlMWQtNDM5Ni05N2QwLWRiZTA4NDEz
OTJhYy5jcmwwHwYDVR0jBBgwFoAUkVonvf1P+rpcN/mERp3I2RR6zoAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wMDU5ZjY4Ny1iZTFkLTQzOTYtOTdkMC1kYmUw
ODQxMzkyYWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5EwAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAizpEz/o4SH8cPc8scBp155nP+uRjW+krblIeMzS/M6CN6sFQBW
8uazAN9A+8gWn9I6LcbnyZDswIUCb0539zyf0XblIU7xPVV1w1iPnMiI8UdKT8Rg
0yedFrLK61ilIfqnLJPPXZE6sVOYGpXFyOy4L7hz+ymohd2fxzh2QrMnrz6UIxsi
5eMMBTGwgwgo3C8qlb5RzDakHhnxs3HgIHA/iHczRP3xnBaJ07RtmHLZKHp0U6tZ
8ybHul4TT/CfKWYgL3E2B2u23+yL2UHXM0mg1NThfHUiuSHxTu2UdB+KqF2iskTX
nQ+TfOivUGA9Kdiag38H//VMvZQP20WMNpo=
-----END CERTIFICATE-----