Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/9af9b615-59f5-3998-b428-13993a91ddf3.roa
File:                     9af9b615-59f5-3998-b428-13993a91ddf3.roa (raw, json)
Hash identifier:          RWXNyPugN5ang3cKQkQ6tOFAuBRRGN6B8jP17UY8zv0=
Subject key identifier:   22:C1:05:01:DC:D0:FA:D7:B9:32:59:89:9B:D2:F9:2C:65:BB:A4:BB
Certificate issuer:       /CN=552db743-b442-4066-8e02-0dcd47471dce
Certificate serial:       010D0C9F43285848530AE90B91337A9CABE6EEC0
Authority key identifier: EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/9af9b615-59f5-3998-b428-13993a91ddf3.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     212528
IP address blocks:        2602:fcf6:ffa::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:e9:0b:91:33:7a:9c:ab:e6:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552db743-b442-4066-8e02-0dcd47471dce
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=3df103c9-b473-44a9-b142-57b9d262c078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8d:41:9e:87:1a:0f:0d:59:2f:5c:06:3a:43:
                    71:0c:85:a0:b0:25:6b:f9:79:ba:49:50:93:c8:11:
                    cd:19:32:d9:88:4d:21:61:b3:18:37:6e:57:0d:d5:
                    84:b9:37:b4:17:8c:e1:1b:b6:53:54:76:77:62:7b:
                    b9:9a:d5:8c:97:0e:9a:0e:95:ea:58:e0:84:ba:8a:
                    8f:bd:df:e3:8b:35:a0:5c:3a:ce:9a:97:d3:e1:f7:
                    ad:35:bd:0f:c0:c8:1c:31:ba:6a:9e:9b:fb:76:ee:
                    a2:a0:5a:76:43:96:5d:93:1f:fc:b3:63:45:a7:18:
                    95:d4:52:16:2f:bc:26:ce:d1:01:d1:6d:c4:26:b2:
                    fd:bf:e5:f2:2e:0d:fd:dd:65:92:f0:fb:5c:dc:0e:
                    26:66:58:95:99:99:bb:ef:0a:97:21:ad:76:95:19:
                    e9:06:80:78:aa:f9:89:94:82:10:fe:67:6e:9e:1d:
                    5b:e9:fa:4a:2f:fc:e9:b4:a7:db:0d:4d:ae:84:5a:
                    81:e8:ea:32:e3:cb:c1:d8:be:60:19:54:48:6d:b0:
                    61:17:73:e3:6d:54:49:8c:15:8f:43:35:45:a0:f7:
                    23:7c:2f:0c:c1:9a:4b:03:88:15:67:40:86:73:20:
                    96:d9:e1:da:14:de:e9:55:98:2c:56:33:22:e9:dc:
                    45:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C1:05:01:DC:D0:FA:D7:B9:32:59:89:9B:D2:F9:2C:65:BB:A4:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/9af9b615-59f5-3998-b428-13993a91ddf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl

            X509v3 Authority Key Identifier:
                keyid:EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcf6:ffa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:16:e8:9c:ea:fd:8d:44:bf:e7:45:e2:18:61:3d:e6:40:8c:
         4a:fb:31:87:10:c3:b6:3d:db:ee:5e:8c:55:05:b2:7f:98:52:
         ae:37:12:fd:71:1f:21:ac:a8:f1:a3:07:78:79:d7:30:fb:4a:
         3e:10:70:af:47:3f:6a:fd:22:1f:ac:d3:d3:b6:7f:f8:b9:e4:
         90:5c:d3:14:ce:c5:cd:94:49:ed:b4:3a:fc:85:2b:29:1b:28:
         e3:5f:d4:9e:0a:86:17:46:64:ae:61:f1:fa:64:7d:9f:a5:1f:
         0c:a4:8e:e5:0a:ee:5d:cc:77:6b:c0:6e:c5:88:8e:da:3e:2d:
         b9:2d:e4:e3:7f:59:b3:cf:bf:69:69:7f:cd:25:01:fd:e1:dc:
         02:17:1c:33:18:05:ca:e0:ee:f2:db:84:14:50:e1:c6:24:cb:
         7f:ce:b0:5c:33:71:cb:79:62:10:c4:20:60:52:6d:da:96:1b:
         a7:da:ee:ad:40:b0:4a:2e:d8:29:86:8f:c3:6e:29:31:49:44:
         03:4a:e5:09:ff:c2:a1:37:8c:9f:a1:58:12:b3:3f:64:de:e0:
         8b:b6:f6:a2:3e:03:0d:e9:44:4b:5d:f4:3a:10:5f:e1:9f:24:
         ce:cc:f4:e6:d2:5c:6a:53:88:d8:3a:f5:08:cd:16:56:02:51:
         2d:b5:cc:af
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhTCukLkTN6nKvm7sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTUyZGI3NDMtYjQ0Mi00MDY2LThlMDItMGRjZDQ3NDcx
ZGNlMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk
M2RmMTAzYzktYjQ3My00NGE5LWIxNDItNTdiOWQyNjJjMDc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi41BnocaDw1ZL1wGOkNxDIWgsCVr+Xm6SVCT
yBHNGTLZiE0hYbMYN25XDdWEuTe0F4zhG7ZTVHZ3Ynu5mtWMlw6aDpXqWOCEuoqP
vd/jizWgXDrOmpfT4fetNb0PwMgcMbpqnpv7du6ioFp2Q5Zdkx/8s2NFpxiV1FIW
L7wmztEB0W3EJrL9v+XyLg393WWS8Ptc3A4mZliVmZm77wqXIa12lRnpBoB4qvmJ
lIIQ/mdunh1b6fpKL/zptKfbDU2uhFqB6Ooy48vB2L5gGVRIbbBhF3PjbVRJjBWP
QzVFoPcjfC8MwZpLA4gVZ0CGcyCW2eHaFN7pVZgsVjMi6dxFJwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCLBBQHc0PrXuTJZiZvS+Sxlu6S7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NTJk
Yjc0My1iNDQyLTQwNjYtOGUwMi0wZGNkNDc0NzFkY2UvOWFmOWI2MTUtNTlmNS0z
OTk4LWI0MjgtMTM5OTNhOTFkZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTUyZGI3NDMtYjQ0Mi00MDY2LThl
MDItMGRjZDQ3NDcxZGNlLzU1MmRiNzQzLWI0NDItNDA2Ni04ZTAyLTBkY2Q0NzQ3
MWRjZS5jcmwwHwYDVR0jBBgwFoAU6m0i4+Sxndvay/Dik7AYgek/mbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NTJkYjc0My1iNDQyLTQwNjYtOGUwMi0wZGNk
NDc0NzFkY2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL89g/6
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACQW6Jzq/Y1Ev+dF4hhhPeZAjEr7MYcQw7Y92+5ejFUFsn+YUq43
Ev1xHyGsqPGjB3h51zD7Sj4QcK9HP2r9Ih+s09O2f/i55JBc0xTOxc2USe20OvyF
KykbKONf1J4KhhdGZK5h8fpkfZ+lHwykjuUK7l3Md2vAbsWIjto+Lbkt5ON/WbPP
v2lpf80lAf3h3AIXHDMYBcrg7vLbhBRQ4cYky3/OsFwzcct5YhDEIGBSbdqWG6fa
7q1AsEou2CmGj8NuKTFJRANK5Qn/wqE3jJ+hWBKzP2Te4Iu29qI+Aw3pREtd9DoQ
X+GfJM7M9ObSXGpTiNg69QjNFlYCUS21zK8=
-----END CERTIFICATE-----