Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e3cf001d-7c35-479e-97f8-f2fa9c4fd4f4/430d3a26-960a-33fb-973c-bb12299e1024.roa
File:                     430d3a26-960a-33fb-973c-bb12299e1024.roa (raw, json)
Hash identifier:          PCuk2u0YIzjEJ0OiDbKPh89gR8/u3BpnPXUvs9EliHE=
Subject key identifier:   B4:B8:36:A7:DE:5D:71:E5:A8:51:7E:D0:22:69:22:3A:8D:07:1B:FA
Certificate issuer:       /CN=e3cf001d-7c35-479e-97f8-f2fa9c4fd4f4
Certificate serial:       010D0C9F4328584001E9A04545FC38B44D5F6A80
Authority key identifier: 5A:F5:AB:86:03:EE:2E:B0:6D:DD:F3:32:E8:35:5F:AC:F1:45:93:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e3cf001d-7c35-479e-97f8-f2fa9c4fd4f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e3cf001d-7c35-479e-97f8-f2fa9c4fd4f4/430d3a26-960a-33fb-973c-bb12299e1024.roa
Signing time:             Wed 23 Nov 2022 14:42:32 +0000
ROA not before:           Wed 23 Nov 2022 14:42:32 +0000
ROA not after:            Tue 25 Feb 2025 05:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:300::/48 maxlen: 48
                          2602:fc3b::/36 maxlen: 36
                          2602:fc3b:100::/48 maxlen: 48
                          2602:fc3b:200::/48 maxlen: 48
                          2602:fc3b::/48 maxlen: 48
                          2602:fc3b:400::/48 maxlen: 48
                          2602:fc3b:500::/48 maxlen: 48
                          2602:fc3b:600::/48 maxlen: 48
                          2602:fc3b:700::/48 maxlen: 48
                          2602:fc3b:800::/48 maxlen: 48
                          2602:fc3b:900::/48 maxlen: 48
                          2602:fc3b:a00::/48 maxlen: 48
                          2602:fc3b:b00::/48 maxlen: 48
                          2602:fc3b:c00::/48 maxlen: 48
                          2602:fc3b:d00::/48 maxlen: 48
                          2602:fc3b:e00::/48 maxlen: 48
                          2602:fc3b:f00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:01:e9:a0:45:45:fc:38:b4:4d:5f:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3cf001d-7c35-479e-97f8-f2fa9c4fd4f4
        Validity
            Not Before: Nov 23 14:42:32 2022 GMT
            Not After : Feb 25 05:00:00 2025 GMT
        Subject: CN=b84ae817-e1dd-4c83-a697-073502a3abb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:b0:b9:d8:6f:85:32:da:67:e0:91:b9:31:
                    f5:91:51:3a:3d:58:38:d8:39:40:7b:f0:15:4f:54:
                    f4:90:e0:1e:67:4f:01:a8:37:dd:fe:a5:7d:5a:1c:
                    d5:1c:77:25:cf:2b:5f:d5:45:01:fd:b1:7b:c9:1f:
                    1c:15:e0:cd:34:c7:e4:86:71:85:e3:b0:eb:03:7a:
                    00:6a:75:f7:69:96:a6:b3:0c:00:3d:b8:59:91:82:
                    03:0e:09:0c:2a:5b:79:52:5c:68:f2:ce:67:df:80:
                    ac:7d:bb:09:23:bc:8c:3a:5c:b7:4e:2e:ea:bf:e2:
                    66:0a:40:3a:3d:2e:a5:7d:f0:09:4e:49:91:85:42:
                    8b:e2:ca:9f:c6:63:fc:24:96:d2:2b:3f:96:2b:6d:
                    80:d5:d1:36:6b:50:3e:4a:e9:eb:6e:b9:a2:f3:c0:
                    a3:19:29:61:3d:b6:47:0f:54:98:d5:fb:49:54:61:
                    2d:c2:48:4d:fd:ad:bb:8a:41:87:88:e6:ee:27:3b:
                    5e:1b:d2:f8:8c:ee:72:2d:83:f5:a6:a9:06:99:6d:
                    ff:11:4d:55:e9:32:41:5e:d5:1c:b2:e5:f7:46:c7:
                    ca:18:9e:70:5c:a8:b6:8f:c2:d6:f8:9a:2c:55:da:
                    6b:38:59:2e:fa:0a:01:d4:a5:e4:0f:58:96:47:72:
                    ba:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B8:36:A7:DE:5D:71:E5:A8:51:7E:D0:22:69:22:3A:8D:07:1B:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e3cf001d-7c35-479e-97f8-f2fa9c4fd4f4/430d3a26-960a-33fb-973c-bb12299e1024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e3cf001d-7c35-479e-97f8-f2fa9c4fd4f4/e3cf001d-7c35-479e-97f8-f2fa9c4fd4f4.crl

            X509v3 Authority Key Identifier:
                keyid:5A:F5:AB:86:03:EE:2E:B0:6D:DD:F3:32:E8:35:5F:AC:F1:45:93:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e3cf001d-7c35-479e-97f8-f2fa9c4fd4f4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:d8:4e:27:4e:5c:f9:db:c5:00:b8:3e:64:25:30:eb:79:5b:
         22:d2:be:56:5e:b9:ed:95:15:90:0f:10:c6:f2:c7:15:f8:55:
         55:29:96:45:c2:04:cf:37:34:a4:cd:d4:7c:3d:1d:6b:b2:31:
         54:d0:11:74:84:64:25:22:c8:d7:f0:0a:43:d5:31:15:14:fb:
         36:4b:da:5a:d6:07:41:c2:33:c2:2f:8d:e2:05:45:56:1e:06:
         00:82:69:95:26:56:50:c4:8c:94:a5:ab:04:ca:87:72:44:19:
         15:85:e7:81:3c:b9:d3:c1:84:0e:75:6c:99:f5:8d:b9:20:44:
         9e:8b:5e:ef:c2:f7:e9:b2:ff:00:0e:d4:b5:a9:1d:04:ae:b0:
         f9:51:bc:5f:c3:5c:80:02:d5:7c:be:2f:d0:a3:62:23:3c:cb:
         54:94:52:3c:2f:45:fa:f3:42:27:eb:e9:94:23:b1:5e:40:44:
         ee:47:ea:26:63:9d:e9:dc:a4:9a:7a:6f:f1:7d:e3:49:b0:e9:
         fc:99:0c:67:07:7e:4e:86:37:ca:aa:f1:1c:99:9c:e0:20:9b:
         e7:43:aa:4c:bd:03:63:3f:58:d8:54:eb:0f:41:ee:1b:a6:9b:
         30:20:22:12:8b:fc:4c:ff:6e:1d:f9:a7:38:bf:d6:8e:fb:5e:
         17:f8:75:91
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEAB6aBFRfw4tE1faoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTNjZjAwMWQtN2MzNS00NzllLTk3ZjgtZjJmYTljNGZk
NGY0MB4XDTIyMTEyMzE0NDIzMloXDTI1MDIyNTA1MDAwMFowLzEtMCsGA1UEAxMk
Yjg0YWU4MTctZTFkZC00YzgzLWE2OTctMDczNTAyYTNhYmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmWwudhvhTLaZ+CRuTH1kVE6PVg42DlAe/AV
T1T0kOAeZ08BqDfd/qV9WhzVHHclzytf1UUB/bF7yR8cFeDNNMfkhnGF47DrA3oA
anX3aZamswwAPbhZkYIDDgkMKlt5Ulxo8s5n34CsfbsJI7yMOly3Ti7qv+JmCkA6
PS6lffAJTkmRhUKL4sqfxmP8JJbSKz+WK22A1dE2a1A+Sunrbrmi88CjGSlhPbZH
D1SY1ftJVGEtwkhN/a27ikGHiObuJzteG9L4jO5yLYP1pqkGmW3/EU1V6TJBXtUc
suX3RsfKGJ5wXKi2j8LW+JosVdprOFku+goB1KXkD1iWR3K6GwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLS4NqfeXXHlqFF+0CJpIjqNBxv6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lM2Nm
MDAxZC03YzM1LTQ3OWUtOTdmOC1mMmZhOWM0ZmQ0ZjQvNDMwZDNhMjYtOTYwYS0z
M2ZiLTk3M2MtYmIxMjI5OWUxMDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTNjZjAwMWQtN2MzNS00NzllLTk3
ZjgtZjJmYTljNGZkNGY0L2UzY2YwMDFkLTdjMzUtNDc5ZS05N2Y4LWYyZmE5YzRm
ZDRmNC5jcmwwHwYDVR0jBBgwFoAUWvWrhgPuLrBt3fMy6DVfrPFFk+IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lM2NmMDAxZC03YzM1LTQ3OWUtOTdmOC1mMmZh
OWM0ZmQ0ZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8OwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAsthOJ05c+dvFALg+ZCUw63lbItK+Vl657ZUVkA8QxvLHFfhVVSmW
RcIEzzc0pM3UfD0da7IxVNARdIRkJSLI1/AKQ9UxFRT7NkvaWtYHQcIzwi+N4gVF
Vh4GAIJplSZWUMSMlKWrBMqHckQZFYXngTy508GEDnVsmfWNuSBEnote78L36bL/
AA7UtakdBK6w+VG8X8NcgALVfL4v0KNiIzzLVJRSPC9F+vNCJ+vplCOxXkBE7kfq
JmOd6dykmnpv8X3jSbDp/JkMZwd+ToY3yqrxHJmc4CCb50OqTL0DYz9Y2FTrD0Hu
G6abMCAiEov8TP9uHfmnOL/WjvteF/h1kQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:22 2023 by rpki-client on console-fra.rpki-client.org