Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa
File:                     85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa (raw, json)
Hash identifier:          zAk7prK3HZYLDfLVmYiK3/wJE9tAddA3/wI1sAMdhIc=
Subject key identifier:   F4:77:52:DF:72:D9:36:F6:3E:94:BF:DA:23:80:91:06:B2:83:E9:29
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F43285847FF4A47B24BE0560387BC2440
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa
Signing time:             Mon 25 Nov 2024 14:00:39 +0000
ROA not before:           Mon 25 Nov 2024 14:00:39 +0000
ROA not after:            Sun 23 Feb 2025 14:00:39 +0000
asID:                     16509
IP address blocks:        2602:277:d00::/47 maxlen: 56
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:4a:47:b2:4b:e0:56:03:87:bc:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Nov 25 14:00:39 2024 GMT
            Not After : Feb 23 14:00:39 2025 GMT
        Subject: CN=e352bd71-f371-4cb2-9b63-88791468c361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:28:a7:87:b8:ea:3a:82:17:d3:25:a7:91:55:
                    1a:00:cd:c2:84:de:13:aa:41:d8:3c:8d:d0:2d:a7:
                    43:ef:88:28:0b:f4:fe:b2:1b:3c:d8:15:61:fc:6c:
                    17:e3:a5:5d:2b:4c:44:03:0a:2a:02:97:4c:47:2a:
                    3c:1e:69:66:33:c8:95:37:cf:29:9c:58:a2:74:b6:
                    3a:7b:82:d9:1f:3f:f3:0b:0f:2d:6b:44:d7:4c:d3:
                    26:2b:20:10:b3:f0:ac:06:75:e4:49:5e:ea:49:a7:
                    fa:dc:ae:8e:50:45:6e:14:0c:a2:87:c4:e8:97:a4:
                    55:1c:cb:4c:41:c2:e1:f3:a4:6a:2d:9b:90:3d:11:
                    c4:7c:d4:2c:8a:c3:5e:23:cf:41:d1:8d:e4:13:45:
                    99:63:19:7b:a3:0d:aa:8d:95:02:c7:77:29:a4:a3:
                    a3:de:dc:ab:4c:39:a7:f4:8d:3f:5d:df:41:f7:5a:
                    d4:e3:93:a1:43:8f:f8:a7:54:12:9f:77:c7:bd:c6:
                    aa:c1:a9:2f:9a:43:c1:c3:cd:55:9c:f8:9b:22:e7:
                    14:4a:8a:82:ae:67:4f:f0:75:a5:64:74:fa:4b:55:
                    3a:9b:c8:c3:13:fd:e6:c2:16:7e:c5:9a:01:3e:65:
                    1b:99:91:3a:8f:ee:68:3a:91:4a:c8:2a:7f:84:d0:
                    52:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:77:52:DF:72:D9:36:F6:3E:94:BF:DA:23:80:91:06:B2:83:E9:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:d00::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:30:a0:2d:c7:bf:ee:a9:a8:dc:49:30:a2:03:db:1e:b7:24:
         53:41:47:78:ec:c9:d1:e5:34:3b:6b:75:cf:fb:7b:77:e4:b0:
         02:18:cd:3a:62:de:c2:94:98:3c:d7:26:86:90:cc:f7:66:7c:
         e4:e0:5e:a2:09:5d:75:84:3d:32:92:d9:59:db:e9:4e:e2:bf:
         d7:7c:1c:32:f7:ab:98:f5:19:85:20:fb:bc:19:be:bb:b8:2b:
         a3:37:d1:c2:23:38:47:c2:86:35:88:dd:4c:b6:ea:4f:bf:f1:
         8e:17:14:74:a6:e9:2b:3f:5f:28:f2:f3:03:c9:3b:74:3b:59:
         5e:9f:8c:6b:94:5d:f5:55:5f:7c:e3:6c:d3:40:7d:05:4f:8d:
         ce:47:2f:1b:a0:ac:5b:2c:81:48:1b:75:dd:07:86:26:b8:31:
         7d:7e:07:d5:2f:ce:f8:05:eb:8a:06:ff:21:9c:a7:00:29:e5:
         19:66:1e:78:70:ea:5a:1c:5e:9a:b2:d9:e3:ad:ca:fc:03:5f:
         6d:2a:c1:2a:5c:a7:c3:5b:e0:3b:3d:60:ad:c8:1c:0f:e5:54:
         67:e6:29:5a:14:8d:93:a8:97:68:0a:ac:3a:68:38:68:6b:d6:
         8f:5c:2c:99:52:47:c1:3b:9b:c7:74:fb:a2:0c:40:3d:02:de:
         41:94:bf:c4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEf/SkeyS+BWA4e8JEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIxMTAxZjQtYTUyNy00NTliLThjMTYtZDc4YjI2MWU2
ZGUzMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
ZTM1MmJkNzEtZjM3MS00Y2IyLTliNjMtODg3OTE0NjhjMzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyinh7jqOoIX0yWnkVUaAM3ChN4TqkHYPI3Q
LadD74goC/T+shs82BVh/GwX46VdK0xEAwoqApdMRyo8HmlmM8iVN88pnFiidLY6
e4LZHz/zCw8ta0TXTNMmKyAQs/CsBnXkSV7qSaf63K6OUEVuFAyih8Tol6RVHMtM
QcLh86RqLZuQPRHEfNQsisNeI89B0Y3kE0WZYxl7ow2qjZUCx3cppKOj3tyrTDmn
9I0/Xd9B91rU45OhQ4/4p1QSn3fHvcaqwakvmkPBw81VnPibIucUSoqCrmdP8HWl
ZHT6S1U6m8jDE/3mwhZ+xZoBPmUbmZE6j+5oOpFKyCp/hNBSVwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPR3Ut9y2Tb2PpS/2iOAkQayg+kpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjEx
MDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhiMjYxZTZkZTMvODVmMmVlMTUtYzkzYy0z
NmI5LWI1MWQtZGJhMGU1NWI2MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxMTAxZjQtYTUyNy00NTliLThj
MTYtZDc4YjI2MWU2ZGUzL2FiMTEwMWY0LWE1MjctNDU5Yi04YzE2LWQ3OGIyNjFl
NmRlMy5jcmwwHwYDVR0jBBgwFoAUmZxX2Q4wTnTaeEpb0pxnHt56bjMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYjExMDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhi
MjYxZTZkZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgICdw0A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD4woC3Hv+6pqNxJMKID2x63JFNBR3jsydHlNDtrdc/7e3fksAIY
zTpi3sKUmDzXJoaQzPdmfOTgXqIJXXWEPTKS2Vnb6U7iv9d8HDL3q5j1GYUg+7wZ
vru4K6M30cIjOEfChjWI3Uy26k+/8Y4XFHSm6Ss/Xyjy8wPJO3Q7WV6fjGuUXfVV
X3zjbNNAfQVPjc5HLxugrFssgUgbdd0Hhia4MX1+B9UvzvgF64oG/yGcpwAp5Rlm
Hnhw6locXpqy2eOtyvwDX20qwSpcp8Nb4Ds9YK3IHA/lVGfmKVoUjZOol2gKrDpo
OGhr1o9cLJlSR8E7m8d0+6IMQD0C3kGUv8Q=
-----END CERTIFICATE-----