Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d25162b3-7899-4412-8d2b-385913c82300/9857a814-7e3f-3c9c-893a-676d1580c5ce.roa
File:                     9857a814-7e3f-3c9c-893a-676d1580c5ce.roa (raw, json)
Hash identifier:          dbgnRfDWqeDmY0bNqRJKuZJ7vQ+x71euIanbA2K7wIw=
Subject key identifier:   98:3B:72:93:76:EA:07:3B:0B:4A:A6:BC:7E:FF:84:30:AE:94:FF:2C
Certificate issuer:       /CN=d25162b3-7899-4412-8d2b-385913c82300
Certificate serial:       010D0C9F4328583D668289C93EFCAB1087FFD4C0
Authority key identifier: 3A:68:24:34:5D:61:11:10:6E:0E:0E:C8:9C:FB:72:38:4B:02:3A:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d25162b3-7899-4412-8d2b-385913c82300.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d25162b3-7899-4412-8d2b-385913c82300/9857a814-7e3f-3c9c-893a-676d1580c5ce.roa
Signing time:             Wed 16 Mar 2022 04:00:00 +0000
ROA not before:           Wed 16 Mar 2022 04:00:00 +0000
ROA not after:            Mon 01 Jul 2024 04:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:82:89:c9:3e:fc:ab:10:87:ff:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25162b3-7899-4412-8d2b-385913c82300
        Validity
            Not Before: Mar 16 04:00:00 2022 GMT
            Not After : Jul  1 04:00:00 2024 GMT
        Subject: CN=69052003-802b-4e30-b6f7-fc7daa012b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bf:b8:f4:43:76:34:f5:62:99:6e:fe:9b:1f:
                    ea:a0:05:99:20:6d:de:e0:ce:06:9e:81:71:2b:ac:
                    8b:61:a0:3d:5a:3e:ae:4d:6f:d0:2c:85:48:dd:03:
                    ff:9b:93:11:a1:77:8d:1c:26:ff:d9:0a:ad:29:fd:
                    9b:78:9b:da:2d:94:3b:c0:c6:0b:4d:01:08:c4:5b:
                    a4:a1:53:bd:e0:cd:7c:20:da:ac:33:2e:f8:e2:22:
                    d4:4e:93:51:fa:52:9a:f8:d0:d4:b4:31:ab:cd:de:
                    2f:2b:8b:36:01:fd:e5:7c:71:a0:63:d3:91:09:51:
                    d8:cf:ed:7b:d6:d2:d0:01:ac:43:ca:4b:21:bf:f7:
                    87:e2:05:8c:69:50:cf:a6:7d:42:c6:9d:f3:0a:21:
                    32:0c:c9:2c:e8:8a:3d:61:65:19:79:67:14:50:87:
                    bf:05:98:a9:13:cf:a7:d0:20:fc:75:2c:c0:5c:9e:
                    53:00:5f:d7:92:91:aa:b0:29:92:f9:82:35:4c:47:
                    ef:c7:6c:ef:b2:97:65:f7:62:4b:f9:da:f8:9b:32:
                    a3:fc:88:2f:73:2e:20:4d:4d:6a:bc:02:d6:a8:92:
                    5a:dc:6f:3e:24:75:2e:06:75:99:5d:d3:ae:86:ac:
                    7a:8f:44:ec:8c:4c:84:6a:55:29:3d:09:c1:5c:51:
                    d4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3B:72:93:76:EA:07:3B:0B:4A:A6:BC:7E:FF:84:30:AE:94:FF:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d25162b3-7899-4412-8d2b-385913c82300/9857a814-7e3f-3c9c-893a-676d1580c5ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d25162b3-7899-4412-8d2b-385913c82300/d25162b3-7899-4412-8d2b-385913c82300.crl

            X509v3 Authority Key Identifier:
                keyid:3A:68:24:34:5D:61:11:10:6E:0E:0E:C8:9C:FB:72:38:4B:02:3A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d25162b3-7899-4412-8d2b-385913c82300.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ab:35:45:c3:53:1c:92:e0:f5:49:8c:aa:bc:d8:f9:39:26:
         d5:64:38:52:bf:dc:f8:75:e0:b4:e9:4d:69:37:f0:cb:38:5e:
         fa:d2:a6:7e:1e:d0:7b:e9:d7:08:49:e0:1a:99:70:c7:f5:10:
         06:b1:ab:70:f4:ea:8a:a2:e6:08:69:90:fb:31:d5:de:07:b8:
         30:2e:e1:c1:9d:a9:f5:2d:86:3f:6d:41:f6:d9:b5:04:38:7c:
         53:2b:d8:bd:df:80:c8:9a:5c:f4:2b:a6:32:ce:24:fb:95:87:
         04:8e:71:50:7a:e1:4f:68:15:e9:a1:f1:d1:fd:cd:91:94:bb:
         25:a2:dd:ce:79:5d:7c:4f:e5:22:be:2b:c1:2e:28:c7:3c:b1:
         5d:1c:c3:2f:d6:12:24:ea:60:41:fa:29:df:e5:b9:d6:35:a4:
         ef:8b:5a:3e:ab:03:0a:6e:10:ad:9b:3f:8c:07:b7:23:ee:24:
         f1:ad:03:f6:cb:a3:5c:56:99:b2:a2:90:bd:01:64:27:c3:f5:
         df:9e:31:16:d7:58:f4:e9:b9:2f:06:85:35:fd:ec:51:6e:82:
         30:04:65:f4:08:27:55:67:85:af:0f:a8:dd:4c:72:f9:61:48:
         df:2c:c3:f6:a0:bc:e3:0d:3d:52:20:d4:92:98:d2:17:16:70:
         16:fa:02:78
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD1mgonJPvyrEIf/1MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDI1MTYyYjMtNzg5OS00NDEyLThkMmItMzg1OTEzYzgy
MzAwMB4XDTIyMDMxNjA0MDAwMFoXDTI0MDcwMTA0MDAwMFowLzEtMCsGA1UEAxMk
NjkwNTIwMDMtODAyYi00ZTMwLWI2ZjctZmM3ZGFhMDEyYjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL+49EN2NPVimW7+mx/qoAWZIG3e4M4GnoFx
K6yLYaA9Wj6uTW/QLIVI3QP/m5MRoXeNHCb/2QqtKf2beJvaLZQ7wMYLTQEIxFuk
oVO94M18INqsMy744iLUTpNR+lKa+NDUtDGrzd4vK4s2Af3lfHGgY9ORCVHYz+17
1tLQAaxDykshv/eH4gWMaVDPpn1Cxp3zCiEyDMks6Io9YWUZeWcUUIe/BZipE8+n
0CD8dSzAXJ5TAF/XkpGqsCmS+YI1TEfvx2zvspdl92JL+dr4mzKj/Igvcy4gTU1q
vALWqJJa3G8+JHUuBnWZXdOuhqx6j0TsjEyEalUpPQnBXFHUMwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJg7cpN26gc7C0qmvH7/hDCulP8sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjUx
NjJiMy03ODk5LTQ0MTItOGQyYi0zODU5MTNjODIzMDAvOTg1N2E4MTQtN2UzZi0z
YzljLTg5M2EtNjc2ZDE1ODBjNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDI1MTYyYjMtNzg5OS00NDEyLThk
MmItMzg1OTEzYzgyMzAwL2QyNTE2MmIzLTc4OTktNDQxMi04ZDJiLTM4NTkxM2M4
MjMwMC5jcmwwHwYDVR0jBBgwFoAUOmgkNF1hERBuDg7InPtyOEsCOiEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjUxNjJiMy03ODk5LTQ0MTItOGQyYi0zODU5
MTNjODIzMDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH2rNUXDUxyS4PVJjKq82Pk5JtVkOFK/3Ph14LTpTWk38Ms4XvrS
pn4e0Hvp1whJ4BqZcMf1EAaxq3D06oqi5ghpkPsx1d4HuDAu4cGdqfUthj9tQfbZ
tQQ4fFMr2L3fgMiaXPQrpjLOJPuVhwSOcVB64U9oFemh8dH9zZGUuyWi3c55XXxP
5SK+K8EuKMc8sV0cwy/WEiTqYEH6Kd/ludY1pO+LWj6rAwpuEK2bP4wHtyPuJPGt
A/bLo1xWmbKikL0BZCfD9d+eMRbXWPTpuS8GhTX97FFugjAEZfQIJ1Vnha8PqN1M
cvlhSN8sw/agvOMNPVIg1JKY0hcWcBb6Ang=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:40 2023 by rpki-client on console-ams.rpki-client.org