Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/f232f320-3a04-3c41-b597-f94ee864a9bf.roa
File:                     f232f320-3a04-3c41-b597-f94ee864a9bf.roa (raw, json)
Hash identifier:          yfeLDbgHpxs14eQZfEz1wYBANHrIzJqvbbP72fGNOMU=
Subject key identifier:   83:A0:60:66:1B:FC:F3:9F:49:91:0D:19:EC:46:06:11:EF:98:60:9D
Certificate issuer:       /CN=35342562-4b31-4754-a32b-c5eec744d4a2
Certificate serial:       010D0C9F43285842E1EB4FAAB3D5BC6DB0793120
Authority key identifier: ED:DE:39:DE:CF:88:EE:83:2E:4A:66:51:06:B4:E3:36:AB:86:0B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/f232f320-3a04-3c41-b597-f94ee864a9bf.roa
Signing time:             Mon 14 Aug 2023 13:36:16 +0000
ROA not before:           Mon 14 Aug 2023 13:36:16 +0000
ROA not after:            Sun 12 Nov 2023 14:36:16 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:e1:eb:4f:aa:b3:d5:bc:6d:b0:79:31:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35342562-4b31-4754-a32b-c5eec744d4a2
        Validity
            Not Before: Aug 14 13:36:16 2023 GMT
            Not After : Nov 12 14:36:16 2023 GMT
        Subject: CN=98b91cce-2be5-40ea-a676-bf7a8876adc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:81:75:52:9b:1f:2f:4e:a8:91:59:d0:0b:16:
                    c0:45:ca:d4:56:08:94:56:47:2e:b8:14:7d:61:70:
                    d2:99:e9:11:2b:83:14:f5:7a:37:1e:79:39:ec:72:
                    fd:89:51:55:2a:0b:9e:ba:6e:50:7c:3e:8d:90:00:
                    ef:65:f1:55:3b:9d:9d:35:f4:d1:3f:a2:05:2f:eb:
                    ec:0d:1d:57:5e:63:7d:e1:d7:a4:b3:a5:bc:6c:59:
                    18:4e:77:b6:0c:39:ea:7f:05:4d:79:8f:82:37:da:
                    fa:f3:0a:46:37:01:09:8b:2d:66:41:b1:15:e0:7e:
                    f9:6b:4d:99:b5:b4:b2:9c:bf:a0:2f:c8:fe:d9:26:
                    3d:68:42:3c:3d:42:8b:e0:0c:98:35:2d:8b:8d:93:
                    a7:cc:44:c1:d8:b4:77:56:d5:fb:a3:12:86:f1:82:
                    6d:29:c0:59:65:8d:3d:f9:89:4a:39:e9:a7:20:0a:
                    e0:0f:a9:b6:75:c1:79:8d:f5:e3:03:95:a7:cc:7c:
                    04:e0:b1:d8:38:8a:89:74:4a:91:d1:87:87:85:c6:
                    a9:13:d8:97:61:4e:c4:e8:65:9b:b2:67:1c:cb:54:
                    21:45:40:bd:d2:d3:82:3a:62:c4:74:e6:50:e0:56:
                    37:d5:62:59:dd:be:f2:be:17:c7:3d:79:ae:78:53:
                    49:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A0:60:66:1B:FC:F3:9F:49:91:0D:19:EC:46:06:11:EF:98:60:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/f232f320-3a04-3c41-b597-f94ee864a9bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/35342562-4b31-4754-a32b-c5eec744d4a2.crl

            X509v3 Authority Key Identifier:
                keyid:ED:DE:39:DE:CF:88:EE:83:2E:4A:66:51:06:B4:E3:36:AB:86:0B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b0:14:8a:a1:3c:f1:aa:63:ff:37:31:48:03:0f:04:cc:db:
         5a:a3:d1:f6:80:1e:96:5b:dd:8a:59:90:91:76:d4:d2:88:27:
         f2:6f:0f:53:2e:85:67:5a:47:75:3e:b0:73:07:cd:8a:47:0e:
         07:88:18:e4:d4:f5:d1:4b:fd:a9:5b:6a:4e:dc:c1:93:aa:28:
         d5:99:60:b6:46:04:22:92:e9:ab:41:61:51:26:67:e9:62:af:
         c0:a2:69:bf:29:9a:2a:6d:d3:83:c4:c6:87:75:a7:36:cb:5d:
         29:1c:78:fc:34:3c:b0:23:ec:69:4f:b0:85:78:6f:d9:12:90:
         ba:fa:e3:32:48:ad:ec:b7:d9:58:ef:58:db:97:47:be:f4:03:
         a7:a4:0b:9f:62:6d:ce:f4:8f:27:33:96:77:3f:a7:2a:de:f1:
         c2:4e:d1:80:16:4e:6b:54:69:71:16:ea:65:b7:f9:36:cf:bf:
         dc:25:f3:c8:81:63:3e:50:9b:c3:62:90:20:84:96:81:63:b3:
         a1:cf:5f:4f:0b:cf:f4:13:a1:60:99:65:2e:0e:c3:e0:c1:87:
         9e:4d:37:1b:4a:01:3f:5a:06:3b:9d:db:9c:3b:bc:56:72:4d:
         94:b3:0c:e4:66:b7:84:1f:13:52:b2:5a:a5:28:29:18:4b:de:
         2a:24:67:79
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWELh60+qs9W8bbB5MSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzUzNDI1NjItNGIzMS00NzU0LWEzMmItYzVlZWM3NDRk
NGEyMB4XDTIzMDgxNDEzMzYxNloXDTIzMTExMjE0MzYxNlowLzEtMCsGA1UEAxMk
OThiOTFjY2UtMmJlNS00MGVhLWE2NzYtYmY3YTg4NzZhZGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYF1UpsfL06okVnQCxbARcrUVgiUVkcuuBR9
YXDSmekRK4MU9Xo3Hnk57HL9iVFVKgueum5QfD6NkADvZfFVO52dNfTRP6IFL+vs
DR1XXmN94deks6W8bFkYTne2DDnqfwVNeY+CN9r68wpGNwEJiy1mQbEV4H75a02Z
tbSynL+gL8j+2SY9aEI8PUKL4AyYNS2LjZOnzETB2LR3VtX7oxKG8YJtKcBZZY09
+YlKOemnIArgD6m2dcF5jfXjA5WnzHwE4LHYOIqJdEqR0YeHhcapE9iXYU7E6GWb
smccy1QhRUC90tOCOmLEdOZQ4FY31WJZ3b7yvhfHPXmueFNJwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIOgYGYb/POfSZENGexGBhHvmGCdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNTM0
MjU2Mi00YjMxLTQ3NTQtYTMyYi1jNWVlYzc0NGQ0YTIvZjIzMmYzMjAtM2EwNC0z
YzQxLWI1OTctZjk0ZWU4NjRhOWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzUzNDI1NjItNGIzMS00NzU0LWEz
MmItYzVlZWM3NDRkNGEyLzM1MzQyNTYyLTRiMzEtNDc1NC1hMzJiLWM1ZWVjNzQ0
ZDRhMi5jcmwwHwYDVR0jBBgwFoAU7d453s+I7oMuSmZRBrTjNquGC8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNTM0MjU2Mi00YjMxLTQ3NTQtYTMyYi1jNWVl
Yzc0NGQ0YTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEGwFIqhPPGqY/83MUgDDwTM21qj0faAHpZb3YpZkJF21NKIJ/Jv
D1MuhWdaR3U+sHMHzYpHDgeIGOTU9dFL/albak7cwZOqKNWZYLZGBCKS6atBYVEm
Z+lir8Ciab8pmipt04PExod1pzbLXSkcePw0PLAj7GlPsIV4b9kSkLr64zJIrey3
2VjvWNuXR770A6ekC59ibc70jyczlnc/pyre8cJO0YAWTmtUaXEW6mW3+TbPv9wl
88iBYz5Qm8NikCCEloFjs6HPX08Lz/QToWCZZS4Ow+DBh55NNxtKAT9aBjud25w7
vFZyTZSzDORmt4QfE1KyWqUoKRhL3iokZ3k=
-----END CERTIFICATE-----