Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa
File:                     6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa (raw, json)
Hash identifier:          8CO45Xc25zgRv704XM7oyE3Tw4QxlxUdfJcUUl5TAHg=
Subject key identifier:   37:0C:8A:B6:34:EE:A5:AA:14:FC:53:9C:AA:8C:61:57:E8:47:11:4B
Certificate issuer:       /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial:       010D0C9F43285848064507B2ECD56476684FA060
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     210645
IP address blocks:        2602:2c9:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:07:b2:ec:d5:64:76:68:4f:a0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=2085f5b7-9cd8-446b-bcde-e05153a4463a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:de:ff:af:e6:99:ad:5b:c9:4d:5c:55:5d:e9:
                    1f:8f:c6:30:85:ee:0d:93:47:66:16:f7:2e:d9:54:
                    c0:1b:e0:7b:1b:06:31:ba:56:0b:88:eb:7d:b9:82:
                    be:9e:58:b7:8c:2b:e2:b3:9e:81:27:36:74:8d:f7:
                    5c:ae:aa:55:c4:f5:ad:ea:34:63:c2:e5:8b:8b:25:
                    bb:9b:36:d3:95:46:0b:e1:46:36:f8:a8:45:19:d0:
                    cf:b3:48:56:2a:83:ce:3a:b6:f2:4d:c5:0a:39:85:
                    bc:47:bf:05:87:2d:0b:57:0f:1c:f9:e8:0d:41:ca:
                    4d:56:14:ee:9c:02:c1:42:32:7d:23:d5:fc:66:05:
                    b8:42:55:65:99:77:94:82:e0:cf:53:3c:d8:b7:57:
                    9e:90:d0:7c:dd:f7:77:fe:7a:81:c0:ae:4c:d8:a7:
                    d6:f2:61:b7:ba:45:f0:5d:9f:7e:da:0c:6d:d8:5b:
                    58:87:bd:de:61:c5:64:4a:ea:29:e0:7f:21:c1:61:
                    cc:21:da:99:3c:bb:bb:81:5c:70:7e:a8:9b:d2:d0:
                    65:5b:e6:59:5b:9c:6d:99:55:a1:c5:91:07:07:3d:
                    7f:72:b7:f0:16:a5:2e:4e:c5:14:86:56:8c:cb:37:
                    4e:29:51:5c:2c:54:7f:7d:59:07:91:0d:41:4a:9d:
                    97:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0C:8A:B6:34:EE:A5:AA:14:FC:53:9C:AA:8C:61:57:E8:47:11:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl

            X509v3 Authority Key Identifier:
                keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c9:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:d1:4c:b6:3e:75:83:71:19:81:49:a0:67:24:ba:d0:ee:f3:
         c7:4a:e5:ee:78:cf:b7:58:81:37:fe:f4:96:17:a1:f0:34:b9:
         de:76:e0:47:c0:25:06:55:9f:97:18:17:a7:2d:42:50:86:95:
         fc:02:33:fd:74:1f:7e:a0:ce:c9:8d:eb:44:1b:db:8b:6f:18:
         59:f5:98:1d:e5:8c:4d:8c:22:f6:a8:a5:db:42:93:66:63:7c:
         9b:f6:c9:5d:31:c0:26:46:d9:85:36:a4:55:dd:43:db:1a:b6:
         bb:ed:a4:c3:ce:71:d3:f3:fa:e4:c8:20:9f:39:41:f3:22:ad:
         80:bd:b4:d2:c6:95:40:50:fa:14:4d:c2:a1:64:7a:15:fb:6f:
         35:e8:e3:0b:c3:1e:8d:6c:d5:fa:53:ee:fa:35:b7:f9:77:47:
         03:93:79:74:ab:58:f2:ba:e1:54:53:b4:26:50:2a:cd:6d:4b:
         d8:64:14:08:36:f9:d3:74:7d:82:fb:9c:55:17:d8:86:e9:65:
         3e:5b:81:51:3e:82:d9:e0:6b:c7:f3:bb:01:9c:69:4c:20:89:
         e7:9d:54:8f:b6:a0:3f:65:ae:37:1f:b2:7b:61:a5:45:dd:55:
         89:f9:dc:38:9c:66:3e:e1:0c:ab:58:6f:6f:d7:64:cc:9b:4c:
         a0:42:08:98
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgGRQey7NVkdmhPoGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3
ZDcxMB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
MjA4NWY1YjctOWNkOC00NDZiLWJjZGUtZTA1MTUzYTQ0NjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt7/r+aZrVvJTVxVXekfj8Ywhe4Nk0dmFvcu
2VTAG+B7GwYxulYLiOt9uYK+nli3jCvis56BJzZ0jfdcrqpVxPWt6jRjwuWLiyW7
mzbTlUYL4UY2+KhFGdDPs0hWKoPOOrbyTcUKOYW8R78Fhy0LVw8c+egNQcpNVhTu
nALBQjJ9I9X8ZgW4QlVlmXeUguDPUzzYt1eekNB83fd3/nqBwK5M2KfW8mG3ukXw
XZ9+2gxt2FtYh73eYcVkSuop4H8hwWHMIdqZPLu7gVxwfqib0tBlW+ZZW5xtmVWh
xZEHBz1/crfwFqUuTsUUhlaMyzdOKVFcLFR/fVkHkQ1BSp2XAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDcMirY07qWqFPxTnKqMYVfoRxFLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk
NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvNjQzOGI0ZjAtNjQ1Ny0z
YjRhLWFkZDktNzhiNWVjNTdiMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0
MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1
N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl
NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABPRTLY+dYNxGYFJoGckutDu88dK5e54z7dYgTf+9JYXofA0ud52
4EfAJQZVn5cYF6ctQlCGlfwCM/10H36gzsmN60Qb24tvGFn1mB3ljE2MIvaopdtC
k2ZjfJv2yV0xwCZG2YU2pFXdQ9satrvtpMPOcdPz+uTIIJ85QfMirYC9tNLGlUBQ
+hRNwqFkehX7bzXo4wvDHo1s1fpT7vo1t/l3RwOTeXSrWPK64VRTtCZQKs1tS9hk
FAg2+dN0fYL7nFUX2IbpZT5bgVE+gtnga8fzuwGcaUwgieedVI+2oD9lrjcfsnth
pUXdVYn53DicZj7hDKtYb2/XZMybTKBCCJg=
-----END CERTIFICATE-----