Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/bcf75c58-1ba3-3cae-aee2-e103d4bfa825.roa
File:                     bcf75c58-1ba3-3cae-aee2-e103d4bfa825.roa (raw, json)
Hash identifier:          uEWcAS1CF+mxDB9b52tL8BuvJnkCrhXMnCRWCiIunwU=
Subject key identifier:   F5:27:E1:20:F9:23:8D:14:1A:85:91:0E:00:2B:CF:A1:87:4C:96:3F
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F432858442DA3530BCF2C38F5134A6DA0
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/bcf75c58-1ba3-3cae-aee2-e103d4bfa825.roa
Signing time:             Mon 11 Dec 2023 09:19:35 +0000
ROA not before:           Mon 11 Dec 2023 09:19:35 +0000
ROA not after:            Sun 10 Mar 2024 08:19:35 +0000
asID:                     801
IP address blocks:        2602:fa2e:8a2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:2d:a3:53:0b:cf:2c:38:f5:13:4a:6d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Dec 11 09:19:35 2023 GMT
            Not After : Mar 10 08:19:35 2024 GMT
        Subject: CN=141c31a4-6f8a-4c1c-a8aa-f00dba254819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9f:4c:63:31:a5:85:f6:0b:b5:15:48:51:7e:
                    22:ff:78:6b:e2:b6:6c:01:d5:0e:df:04:f6:3a:bf:
                    7c:75:6c:22:84:95:49:2f:4a:a2:6f:4c:64:ea:56:
                    61:61:44:64:17:b3:ae:d7:06:81:18:42:23:aa:e6:
                    72:1c:cd:09:0a:95:50:25:8f:6c:05:6e:a2:f3:e9:
                    76:6f:22:87:b5:e5:3a:43:dd:78:b9:17:a4:cb:12:
                    b9:a6:33:52:b2:0e:9b:55:48:9f:81:09:68:8e:7a:
                    b5:7a:45:d7:e6:e6:95:43:f2:c3:67:06:fb:9e:8c:
                    9e:97:9e:8f:75:ec:f1:d8:c5:03:d5:38:fd:63:09:
                    8d:91:3f:1c:1e:94:bc:6d:f7:e1:fb:68:23:b0:03:
                    ad:70:d9:96:87:18:92:78:f7:58:bd:fc:72:28:62:
                    a1:d0:b5:39:25:91:28:b7:e1:10:c6:2c:99:c7:90:
                    bc:40:45:55:df:c5:ab:ec:37:98:5c:da:a2:54:ca:
                    b4:ae:1c:87:f2:ea:cd:a4:53:21:1d:0d:57:06:75:
                    e5:7d:45:46:42:ab:a0:a1:7a:f2:41:f0:9a:a3:ec:
                    e4:bb:3a:5b:ba:08:b8:ef:f4:5d:65:21:73:83:04:
                    60:0c:6e:41:a5:5e:eb:64:ae:aa:29:ce:22:59:f0:
                    3a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:27:E1:20:F9:23:8D:14:1A:85:91:0E:00:2B:CF:A1:87:4C:96:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/bcf75c58-1ba3-3cae-aee2-e103d4bfa825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e:8a2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ad:53:64:8e:73:be:c6:50:95:a1:9b:ea:61:04:26:3f:d1:
         17:8d:13:9b:da:5e:af:3b:e4:b8:30:b6:68:8c:cf:67:f0:92:
         17:d5:62:f0:f2:68:cb:a7:59:f9:8c:d6:09:86:67:13:93:27:
         49:55:27:3c:d5:b5:a6:55:37:3a:12:dc:c2:9e:aa:16:44:81:
         69:85:90:f2:62:89:dd:35:e8:f3:7f:7c:dc:c6:60:33:66:61:
         86:29:e9:85:08:8a:7f:7e:cf:2c:0b:0a:6c:6a:ed:23:de:9e:
         34:27:ff:0c:34:6c:5d:3e:06:af:cd:d7:64:6e:2b:a8:19:44:
         ee:30:f2:23:46:45:ba:98:b3:8a:b6:f0:48:5f:4e:c9:b0:eb:
         1b:54:e9:ce:b3:c0:7a:57:07:7f:7a:99:4a:00:74:f9:fd:9b:
         ed:5b:8e:9e:88:ae:80:70:80:3f:0e:c6:4e:06:a4:ab:3d:fe:
         77:cd:04:1e:bf:06:44:aa:86:6f:1c:3f:f4:33:75:19:bb:34:
         18:d8:1c:6b:77:0d:e3:51:6f:90:64:aa:7e:15:ac:de:ad:0e:
         70:7e:a8:c0:00:59:7c:11:16:0e:3b:2f:18:70:f0:5a:9c:ed:
         17:79:b8:34:5a:bc:2f:be:6e:9e:1c:81:ab:8d:7d:63:6e:5b:
         60:5e:55:a5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEQto1MLzyw49RNKbaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWY5ODMyMDctODA3My00MmFmLTg4ZWUtZGY0OTAyYzhh
ZGFmMB4XDTIzMTIxMTA5MTkzNVoXDTI0MDMxMDA4MTkzNVowLzEtMCsGA1UEAxMk
MTQxYzMxYTQtNmY4YS00YzFjLWE4YWEtZjAwZGJhMjU0ODE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi59MYzGlhfYLtRVIUX4i/3hr4rZsAdUO3wT2
Or98dWwihJVJL0qib0xk6lZhYURkF7Ou1waBGEIjquZyHM0JCpVQJY9sBW6i8+l2
byKHteU6Q914uRekyxK5pjNSsg6bVUifgQlojnq1ekXX5uaVQ/LDZwb7noyel56P
dezx2MUD1Tj9YwmNkT8cHpS8bffh+2gjsAOtcNmWhxiSePdYvfxyKGKh0LU5JZEo
t+EQxiyZx5C8QEVV38Wr7DeYXNqiVMq0rhyH8urNpFMhHQ1XBnXlfUVGQqugoXry
QfCao+zkuzpbugi47/RdZSFzgwRgDG5BpV7rZK6qKc4iWfA6pwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPUn4SD5I40UGoWRDgArz6GHTJY/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85Zjk4
MzIwNy04MDczLTQyYWYtODhlZS1kZjQ5MDJjOGFkYWYvYmNmNzVjNTgtMWJhMy0z
Y2FlLWFlZTItZTEwM2Q0YmZhODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWY5ODMyMDctODA3My00MmFmLTg4
ZWUtZGY0OTAyYzhhZGFmLzlmOTgzMjA3LTgwNzMtNDJhZi04OGVlLWRmNDkwMmM4
YWRhZi5jcmwwHwYDVR0jBBgwFoAUwyy5+3oif0oFHkqZqPtujWhZyqEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85Zjk4MzIwNy04MDczLTQyYWYtODhlZS1kZjQ5
MDJjOGFkYWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6Lgii
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB+tU2SOc77GUJWhm+phBCY/0ReNE5vaXq875LgwtmiMz2fwkhfV
YvDyaMunWfmM1gmGZxOTJ0lVJzzVtaZVNzoS3MKeqhZEgWmFkPJiid016PN/fNzG
YDNmYYYp6YUIin9+zywLCmxq7SPenjQn/ww0bF0+Bq/N12RuK6gZRO4w8iNGRbqY
s4q28EhfTsmw6xtU6c6zwHpXB396mUoAdPn9m+1bjp6IroBwgD8Oxk4GpKs9/nfN
BB6/BkSqhm8cP/QzdRm7NBjYHGt3DeNRb5Bkqn4VrN6tDnB+qMAAWXwRFg47Lxhw
8Fqc7Rd5uDRavC++bp4cgauNfWNuW2BeVaU=
-----END CERTIFICATE-----