Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/4ebf427c-55b4-3ea1-9ed5-96d72acc9c4a.roa
File:                     4ebf427c-55b4-3ea1-9ed5-96d72acc9c4a.roa (raw, json)
Hash identifier:          weAFngTE8uHAsRolioFtK3o4UplL2g6Qh9bj3dXB26U=
Subject key identifier:   44:F5:9C:C2:3D:5D:C6:12:20:B5:45:7A:9F:64:23:FD:16:6E:79:D2
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F43285848504038D4596CF40F177EB5E0
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/4ebf427c-55b4-3ea1-9ed5-96d72acc9c4a.roa
Signing time:             Tue 24 Dec 2024 14:00:53 +0000
ROA not before:           Tue 24 Dec 2024 14:00:53 +0000
ROA not after:            Mon 24 Mar 2025 13:00:53 +0000
asID:                     142046
IP address blocks:        2602:f9a9:b00::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:50:40:38:d4:59:6c:f4:0f:17:7e:b5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Dec 24 14:00:53 2024 GMT
            Not After : Mar 24 13:00:53 2025 GMT
        Subject: CN=57b72927-d2b5-432c-a66a-a4a3814f7a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:33:60:85:68:13:87:0c:e0:5d:6c:c3:f8:
                    93:e3:ac:5a:3d:bc:56:42:ff:55:7f:68:fa:65:d1:
                    9e:38:16:62:d0:6f:12:bc:f4:bf:f0:87:2a:bd:29:
                    cb:14:48:c9:4f:72:36:76:c5:6b:2b:94:c2:e6:b5:
                    ac:51:39:2c:ae:90:f9:43:9c:43:57:2e:b3:48:c1:
                    23:4f:27:98:16:22:06:14:f7:b2:c6:19:97:97:7a:
                    64:0a:92:07:4a:c0:01:eb:a1:7c:f6:5e:2a:c9:42:
                    19:6e:40:90:1d:42:d2:47:83:b2:9f:36:91:fa:6b:
                    02:87:7b:ce:b8:2e:8b:56:9f:20:7f:d9:2a:ca:03:
                    05:ef:cd:4d:2c:56:a8:33:3e:6b:02:7f:dc:e2:3c:
                    1c:46:2b:de:f6:54:8c:3a:5a:c1:ac:ec:2f:21:57:
                    b7:68:57:0c:36:ea:2c:50:6d:25:c3:d6:2b:0f:1f:
                    8c:e8:3b:ab:49:5c:f1:09:b5:0a:15:a6:70:93:35:
                    be:a5:0a:c1:82:17:a3:99:25:1f:3e:54:de:34:51:
                    03:ae:30:c2:51:ac:d6:31:58:cc:fe:c7:48:7c:ba:
                    81:dd:b0:20:f5:9d:0f:d2:fe:7e:f0:01:76:2d:2e:
                    04:ff:61:f3:d8:19:ae:58:7e:0b:16:32:e3:f4:a9:
                    83:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F5:9C:C2:3D:5D:C6:12:20:B5:45:7A:9F:64:23:FD:16:6E:79:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/4ebf427c-55b4-3ea1-9ed5-96d72acc9c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a9:b00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:6a:11:5c:24:71:db:f5:a8:57:35:55:a3:85:2b:87:57:6b:
         f2:7b:a6:fa:fa:54:cb:7c:59:54:76:a1:5f:9f:26:7f:da:9a:
         40:4f:64:34:87:9e:56:4a:8b:78:c6:b0:01:57:5d:64:ea:1e:
         8b:0a:9a:31:b0:7a:c5:66:47:24:5a:66:b6:dc:3e:1b:8e:69:
         da:e8:c8:3e:50:c6:77:9e:83:59:65:77:0b:ca:d7:ec:3a:f7:
         ad:44:47:de:79:1b:f4:45:52:80:11:59:00:48:de:0b:64:98:
         bb:93:fa:d7:23:d3:e3:a0:20:a7:45:3a:26:00:4b:ed:ae:d7:
         45:6a:60:b2:f0:45:c9:00:a9:6b:e0:df:75:9c:84:5d:bf:14:
         3e:42:de:f2:b0:f8:2a:3a:93:d8:a8:81:5b:4e:38:76:0b:6e:
         a3:e8:d9:85:5e:cf:d4:a5:f0:43:45:7f:0f:92:22:41:f5:62:
         ed:7d:4a:98:d6:b4:0d:c6:c7:0c:c8:10:64:6a:c1:b9:80:71:
         94:d1:5f:da:81:46:08:56:b4:96:f7:b0:85:f8:2a:de:0d:1d:
         b4:7e:0a:b1:e5:44:8f:79:82:0a:d5:ab:fd:3c:d4:7d:d1:f5:
         97:9e:a5:65:85:c8:9c:60:59:5e:53:1a:33:04:18:2a:13:dc:
         2c:cf:ae:85
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhQQDjUWWz0Dxd+teAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QyMjc5ZDgtMmVkNS00NzQ1LTkyMzEtOWRiZDEwYmJi
MWEyMB4XDTI0MTIyNDE0MDA1M1oXDTI1MDMyNDEzMDA1M1owLzEtMCsGA1UEAxMk
NTdiNzI5MjctZDJiNS00MzJjLWE2NmEtYTRhMzgxNGY3YTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE0zYIVoE4cM4F1sw/iT46xaPbxWQv9Vf2j6
ZdGeOBZi0G8SvPS/8IcqvSnLFEjJT3I2dsVrK5TC5rWsUTksrpD5Q5xDVy6zSMEj
TyeYFiIGFPeyxhmXl3pkCpIHSsAB66F89l4qyUIZbkCQHULSR4OynzaR+msCh3vO
uC6LVp8gf9kqygMF781NLFaoMz5rAn/c4jwcRive9lSMOlrBrOwvIVe3aFcMNuos
UG0lw9YrDx+M6DurSVzxCbUKFaZwkzW+pQrBghejmSUfPlTeNFEDrjDCUazWMVjM
/sdIfLqB3bAg9Z0P0v5+8AF2LS4E/2Hz2BmuWH4LFjLj9KmD8QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFET1nMI9XcYSILVFep9kI/0WbnnSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIy
NzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJkMTBiYmIxYTIvNGViZjQyN2MtNTViNC0z
ZWExLTllZDUtOTZkNzJhY2M5YzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QyMjc5ZDgtMmVkNS00NzQ1LTky
MzEtOWRiZDEwYmJiMWEyLzNkMjI3OWQ4LTJlZDUtNDc0NS05MjMxLTlkYmQxMGJi
YjFhMi5jcmwwHwYDVR0jBBgwFoAUSb7JmMg+rj/d6ly9Ou3KOIKBHm4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIyNzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJk
MTBiYmIxYTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL5qQsA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE5qEVwkcdv1qFc1VaOFK4dXa/J7pvr6VMt8WVR2oV+fJn/amkBP
ZDSHnlZKi3jGsAFXXWTqHosKmjGwesVmRyRaZrbcPhuOadroyD5Qxneeg1lldwvK
1+w6961ER955G/RFUoARWQBI3gtkmLuT+tcj0+OgIKdFOiYAS+2u10VqYLLwRckA
qWvg33WchF2/FD5C3vKw+Co6k9iogVtOOHYLbqPo2YVez9Sl8ENFfw+SIkH1Yu19
SpjWtA3GxwzIEGRqwbmAcZTRX9qBRghWtJb3sIX4Kt4NHbR+CrHlRI95ggrVq/08
1H3R9ZeepWWFyJxgWV5TGjMEGCoT3CzProU=
-----END CERTIFICATE-----