Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/219796f6-5bf3-3bc3-a957-5e2d0da40a8d.roa
File:                     219796f6-5bf3-3bc3-a957-5e2d0da40a8d.roa (raw, json)
Hash identifier:          p2kFnHXRz6awwxpOuDTs+h3dfxYAEoWML/yKPSiX18g=
Subject key identifier:   FC:72:39:98:01:59:07:EF:35:A0:B8:6A:AF:F9:EB:86:14:2E:CA:B5
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285847FDE4D47E471C047256B4C780
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/219796f6-5bf3-3bc3-a957-5e2d0da40a8d.roa
Signing time:             Mon 25 Nov 2024 02:00:28 +0000
ROA not before:           Mon 25 Nov 2024 02:00:28 +0000
ROA not after:            Sun 23 Feb 2025 02:00:28 +0000
asID:                     62610
IP address blocks:        2602:ffe4:c68::/46 maxlen: 46
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:e4:d4:7e:47:1c:04:72:56:b4:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Nov 25 02:00:28 2024 GMT
            Not After : Feb 23 02:00:28 2025 GMT
        Subject: CN=3c86fd44-ea4c-4972-8b4e-d22151da2150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1d:d4:54:a0:13:db:75:95:a7:5a:bc:c1:97:
                    fa:4e:cd:20:f0:68:6c:8f:f9:03:6a:40:58:3f:51:
                    eb:8a:11:2b:73:9b:0c:a7:94:c7:ca:a2:eb:a1:fb:
                    f8:14:d9:d9:ab:d3:bd:dc:5f:ec:a5:a2:1d:0f:ea:
                    de:92:a9:10:30:f7:c1:73:2e:ff:f5:ea:8b:86:56:
                    b3:9d:4c:b1:14:a6:3a:a8:dc:52:9a:2f:1c:3a:f8:
                    a4:34:7a:c2:81:0f:58:26:e1:48:42:7b:31:db:e3:
                    10:bf:a0:6a:86:c4:6c:2d:45:f9:3b:a8:c9:2c:a2:
                    c7:9b:9c:db:5c:2d:e1:d3:c2:fd:9c:c9:e1:c9:36:
                    15:fc:a2:ff:7e:8b:cd:2d:ac:0f:e0:c3:81:49:1e:
                    50:61:2c:20:ea:b4:e0:d5:29:c2:86:78:7c:95:70:
                    4d:6f:1b:5d:76:1b:18:b6:01:47:5e:f4:ee:e6:3e:
                    ea:ab:f9:fa:79:77:36:c0:4d:c4:e6:75:21:02:55:
                    ee:e3:5f:40:2b:61:e9:64:ca:93:1b:2e:86:8c:29:
                    dd:2f:5c:ae:4d:cf:2f:ea:4c:9f:73:15:98:bc:30:
                    34:d3:6b:64:77:d8:6e:a6:c1:c2:f1:39:1f:36:97:
                    78:37:ee:3b:b4:2d:cb:a5:0c:62:d9:6e:b9:35:a9:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:72:39:98:01:59:07:EF:35:A0:B8:6A:AF:F9:EB:86:14:2E:CA:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/219796f6-5bf3-3bc3-a957-5e2d0da40a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffe4:c68::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:cd:9b:65:46:f2:02:e8:cf:43:d8:98:a3:35:31:6e:89:ee:
         51:d4:95:9e:2e:33:59:2a:e9:ee:e0:cc:c0:81:fd:c1:01:cb:
         b3:21:a5:fe:a4:56:19:3d:17:19:e5:2d:fb:27:c4:49:53:1b:
         7a:b2:df:37:7b:71:a2:2e:8a:5c:ca:5c:d6:f6:1f:84:f8:ca:
         45:3e:22:a7:e4:3f:4d:48:81:40:98:7d:a1:ba:73:ef:40:24:
         20:c6:4f:5a:43:2e:40:61:f8:65:ac:8b:7c:53:49:ea:a2:e6:
         8a:d9:62:39:50:8f:87:fd:df:0a:ae:0e:2b:01:a7:e7:8d:f7:
         d9:17:b7:b1:df:fd:c8:fb:80:7d:84:b9:ad:b1:7a:a5:f3:17:
         21:cd:3d:4b:38:4d:57:38:79:bc:f8:40:0f:fb:37:ef:42:5b:
         b5:83:1b:89:e8:af:38:fe:00:5d:f2:31:b5:29:85:66:6e:71:
         6c:42:11:a2:91:e6:04:36:34:0d:f5:32:70:16:fe:28:64:b8:
         6f:68:1c:e6:00:67:a4:61:f4:0e:68:d7:da:37:70:92:07:69:
         dd:51:94:b2:9d:40:ff:da:ee:12:ab:b1:92:77:e7:01:a9:f5:
         e7:c3:9b:94:1e:ad:cb:0b:78:03:25:03:18:ad:67:ce:99:3b:
         a2:e1:97:f2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEf95NR+RxwEcla0x4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI0MTEyNTAyMDAyOFoXDTI1MDIyMzAyMDAyOFowLzEtMCsGA1UEAxMk
M2M4NmZkNDQtZWE0Yy00OTcyLThiNGUtZDIyMTUxZGEyMTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph3UVKAT23WVp1q8wZf6Ts0g8Ghsj/kDakBY
P1HrihErc5sMp5THyqLrofv4FNnZq9O93F/spaIdD+rekqkQMPfBcy7/9eqLhlaz
nUyxFKY6qNxSmi8cOvikNHrCgQ9YJuFIQnsx2+MQv6BqhsRsLUX5O6jJLKLHm5zb
XC3h08L9nMnhyTYV/KL/fovNLawP4MOBSR5QYSwg6rTg1SnChnh8lXBNbxtddhsY
tgFHXvTu5j7qq/n6eXc2wE3E5nUhAlXu419AK2HpZMqTGy6GjCndL1yuTc8v6kyf
cxWYvDA002tkd9hupsHC8TkfNpd4N+47tC3LpQxi2W65Nan+zwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPxyOZgBWQfvNaC4aq/564YULsq1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMjE5Nzk2ZjYtNWJmMy0z
YmMzLWE5NTctNWUyZDBkYTQwYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgL/5Axo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABjNm2VG8gLoz0PYmKM1MW6J7lHUlZ4uM1kq6e7gzMCB/cEBy7Mh
pf6kVhk9FxnlLfsnxElTG3qy3zd7caIuilzKXNb2H4T4ykU+IqfkP01IgUCYfaG6
c+9AJCDGT1pDLkBh+GWsi3xTSeqi5orZYjlQj4f93wquDisBp+eN99kXt7Hf/cj7
gH2Eua2xeqXzFyHNPUs4TVc4ebz4QA/7N+9CW7WDG4norzj+AF3yMbUphWZucWxC
EaKR5gQ2NA31MnAW/ihkuG9oHOYAZ6Rh9A5o19o3cJIHad1RlLKdQP/a7hKrsZJ3
5wGp9efDm5QercsLeAMlAxitZ86ZO6Lhl/I=
-----END CERTIFICATE-----