Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/5b2cd881-f41e-386e-8d2e-4ad5956543cd.roa
File:                     5b2cd881-f41e-386e-8d2e-4ad5956543cd.roa (raw, json)
Hash identifier:          a6LNIKxj9G16iY2xTf+gedlXiI1gZ+RRj4OdjlM1tIk=
Subject key identifier:   FD:C5:D5:9C:4F:DA:08:57:1A:71:99:39:B2:BA:8F:04:1B:B7:C4:A6
Certificate issuer:       /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
Certificate serial:       010D0C9F43285847E35F71939139EE4B51CC337C
Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/5b2cd881-f41e-386e-8d2e-4ad5956543cd.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     16509
IP address blocks:        2602:fcd8::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:71:93:91:39:ee:4b:51:cc:33:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=61d220c0-ad95-4e1f-8144-e61ce03c960d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7b:c0:79:e3:14:1b:0a:23:6a:c5:c3:cc:55:
                    35:0c:1b:8b:01:df:31:ae:15:cf:c9:ca:1a:f1:39:
                    96:4e:68:d8:39:e0:08:e6:83:58:56:8e:37:75:48:
                    59:2d:b2:53:de:f9:39:24:b6:85:c8:cd:30:ff:76:
                    fe:7c:d4:41:c9:d6:0b:93:e2:fa:3b:d3:d9:94:fa:
                    c6:9b:a5:58:45:11:ea:32:2c:91:55:54:c6:83:6c:
                    59:de:0c:41:74:e9:10:99:cd:d4:47:2a:c2:87:b7:
                    82:7f:7e:ab:19:26:40:18:54:fb:25:0b:fd:73:7f:
                    86:d5:94:3b:64:9e:b8:4f:0b:31:a0:bc:c1:63:6a:
                    86:f6:ef:e1:56:24:27:cc:fe:ac:85:d1:5b:e9:b7:
                    5a:08:2d:2a:9c:c9:87:76:9a:98:c9:f0:ba:dd:1b:
                    a8:88:e0:0e:5e:57:29:0e:b9:f6:ee:5a:48:9b:0c:
                    82:ee:c1:9a:0e:69:99:33:a0:40:fe:6b:bc:71:84:
                    45:c1:2b:50:0a:5a:d6:47:1f:8c:cf:42:86:9c:c8:
                    10:0f:8b:d2:33:bd:29:92:43:d7:ed:04:d2:b0:e5:
                    50:4e:a1:e1:19:a8:67:94:00:2f:a1:43:7d:3a:e7:
                    ad:55:e1:3c:0e:e3:bb:b7:a3:c3:31:20:37:fc:4e:
                    c4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C5:D5:9C:4F:DA:08:57:1A:71:99:39:B2:BA:8F:04:1B:B7:C4:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/5b2cd881-f41e-386e-8d2e-4ad5956543cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl

            X509v3 Authority Key Identifier:
                keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:fe:f9:e2:d0:39:9a:de:de:7d:53:b4:9e:95:c4:67:29:f9:
         ef:01:09:e6:9c:cf:4a:b5:0f:e1:b6:6f:f0:67:4f:82:be:8b:
         94:95:87:0f:96:d1:95:c5:1e:17:fc:41:35:8b:0c:d5:2f:45:
         9f:d1:57:c5:e8:24:0f:fc:ee:b6:83:b6:42:77:22:4b:e5:2f:
         97:91:c9:45:50:64:12:0e:b1:bb:a8:57:c8:37:c1:9d:26:37:
         bb:dd:7a:76:bb:1d:13:9d:d6:7b:9a:7b:dc:3e:5f:e9:67:29:
         25:af:05:20:cd:31:7b:26:2a:69:49:60:0e:ac:c7:21:27:f6:
         55:f2:90:61:6c:55:87:6f:e9:9e:72:25:2a:a8:d1:f4:ee:66:
         c0:18:0c:f9:c0:ed:d2:ca:cc:2e:c4:f9:0e:dc:ed:3f:f3:29:
         b2:51:0e:7f:70:b2:b9:76:c2:4b:65:8d:ca:55:13:61:15:fd:
         74:5d:b7:1a:86:83:96:fa:a4:2a:f3:1d:f3:c2:4b:55:e9:d5:
         aa:a0:df:cd:25:a4:69:dc:98:7d:bf:16:cd:10:d3:9d:ea:0e:
         da:af:07:26:37:63:ba:d7:d8:28:fb:c9:10:8e:9e:10:81:12:
         83:ac:31:5d:0f:a1:d3:25:51:ec:68:85:bd:4a:6f:bc:9e:67:
         8f:25:33:b5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfjX3GTkTnuS1HMM3wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWU4ZWQ5NTAtNDQ4OC00OWIxLThkMzktYmI4YzcxYTc2
N2QyMB4XDTI0MTExNTE0MDAzOVoXDTI1MDIxMzE0MDAzOVowLzEtMCsGA1UEAxMk
NjFkMjIwYzAtYWQ5NS00ZTFmLTgxNDQtZTYxY2UwM2M5NjBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHvAeeMUGwojasXDzFU1DBuLAd8xrhXPycoa
8TmWTmjYOeAI5oNYVo43dUhZLbJT3vk5JLaFyM0w/3b+fNRBydYLk+L6O9PZlPrG
m6VYRRHqMiyRVVTGg2xZ3gxBdOkQmc3URyrCh7eCf36rGSZAGFT7JQv9c3+G1ZQ7
ZJ64TwsxoLzBY2qG9u/hViQnzP6shdFb6bdaCC0qnMmHdpqYyfC63RuoiOAOXlcp
Drn27lpImwyC7sGaDmmZM6BA/mu8cYRFwStQClrWRx+Mz0KGnMgQD4vSM70pkkPX
7QTSsOVQTqHhGahnlAAvoUN9OuetVeE8DuO7t6PDMSA3/E7EBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP3F1ZxP2ghXGnGZObK6jwQbt8SmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThl
ZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhjNzFhNzY3ZDIvNWIyY2Q4ODEtZjQxZS0z
ODZlLThkMmUtNGFkNTk1NjU0M2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWU4ZWQ5NTAtNDQ4OC00OWIxLThk
MzktYmI4YzcxYTc2N2QyLzllOGVkOTUwLTQ0ODgtNDliMS04ZDM5LWJiOGM3MWE3
NjdkMi5jcmwwHwYDVR0jBBgwFoAUJhbbhZB9FA+mCJFa84xIt9zz1B8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThlZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhj
NzFhNzY3ZDIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL82AAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEX++eLQOZre3n1TtJ6VxGcp+e8BCeacz0q1D+G2b/BnT4K+i5SV
hw+W0ZXFHhf8QTWLDNUvRZ/RV8XoJA/87raDtkJ3IkvlL5eRyUVQZBIOsbuoV8g3
wZ0mN7vdena7HROd1nuae9w+X+lnKSWvBSDNMXsmKmlJYA6sxyEn9lXykGFsVYdv
6Z5yJSqo0fTuZsAYDPnA7dLKzC7E+Q7c7T/zKbJRDn9wsrl2wktljcpVE2EV/XRd
txqGg5b6pCrzHfPCS1Xp1aqg380lpGncmH2/Fs0Q053qDtqvByY3Y7rX2Cj7yRCO
nhCBEoOsMV0PodMlUexohb1Kb7yeZ48lM7U=
-----END CERTIFICATE-----