Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/40b301b2-4202-35c2-addc-14e70c78a526.roa
File:                     40b301b2-4202-35c2-addc-14e70c78a526.roa (raw, json)
Hash identifier:          sHXQbxvWHX/uYbu1YxNiCZqN51rPihgSWAlZewWdQpo=
Subject key identifier:   3E:82:2B:9C:B5:61:96:D5:EA:0A:03:FC:03:84:3C:41:DE:30:73:0C
Certificate issuer:       /CN=bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16
Certificate serial:       010D0C9F432858489E6B64E045C8C40A1D669B80
Authority key identifier: EE:70:3D:40:DA:37:1C:84:70:75:A1:4D:9A:FC:98:73:DD:0B:8F:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/40b301b2-4202-35c2-addc-14e70c78a526.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     397270
IP address blocks:        2602:fa9a::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:64:e0:45:c8:c4:0a:1d:66:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=3de2b381-a469-4dc0-93b4-f0defbd0e14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:70:5a:86:97:3d:26:cf:62:27:22:e9:b5:
                    ff:28:d9:82:09:e1:25:78:d3:22:c8:b2:d4:02:5a:
                    b3:84:ef:de:4a:37:f6:9a:27:e0:3c:53:76:58:7e:
                    9f:f9:71:84:ab:f7:3a:e2:54:fe:30:a0:39:9f:9b:
                    9f:70:be:db:01:09:b6:da:2c:d4:21:aa:60:a0:cf:
                    64:93:bb:b2:4f:37:cd:86:f3:5c:fe:16:d3:59:00:
                    2a:8b:72:4b:6f:db:7a:3a:69:33:6d:91:ea:4a:71:
                    74:2b:2f:73:aa:53:5c:22:c7:8c:d4:81:aa:cd:ce:
                    25:74:88:67:5e:c0:13:f8:11:5d:c8:6b:ec:59:32:
                    6e:c2:ee:58:a4:99:50:9d:ea:49:22:19:22:46:4d:
                    cf:71:aa:5b:4d:03:7c:4c:e2:db:13:9b:90:01:3c:
                    25:99:ea:88:09:e6:53:3f:90:d9:54:4b:99:c6:23:
                    19:86:25:f0:49:a2:90:4a:7b:4c:e5:cc:8d:bd:ef:
                    98:b6:01:85:a8:01:63:8a:07:73:39:50:96:6b:fe:
                    80:28:3c:a6:d6:2e:16:8a:eb:c9:6a:73:50:28:15:
                    47:fa:bf:e8:8e:4e:3f:52:c3:1e:03:fb:32:2e:76:
                    09:e9:b4:5e:77:79:78:ab:a3:03:a9:bf:83:9b:bc:
                    23:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:82:2B:9C:B5:61:96:D5:EA:0A:03:FC:03:84:3C:41:DE:30:73:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/40b301b2-4202-35c2-addc-14e70c78a526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.crl

            X509v3 Authority Key Identifier:
                keyid:EE:70:3D:40:DA:37:1C:84:70:75:A1:4D:9A:FC:98:73:DD:0B:8F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbb0f0d6-2cb9-4846-be9f-66ce6dbf3a16.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:59:b3:67:30:56:61:60:bd:34:85:24:fd:ca:14:00:ab:ab:
         45:78:38:b9:6b:1c:5d:88:72:97:2c:b9:45:ed:cb:28:7c:51:
         66:b2:5c:34:56:c8:28:73:37:d5:1b:2d:f2:40:4a:22:ec:08:
         11:ac:81:e9:6b:28:29:d4:62:f2:ab:a0:da:b9:59:1a:40:a1:
         d4:79:46:61:4b:ad:fa:e2:4c:d0:08:ec:9c:25:89:5c:80:bc:
         57:36:13:8e:8b:e4:76:02:b1:ad:0b:53:ed:48:73:37:b1:ab:
         5b:6b:82:f1:26:cf:34:2a:cb:37:c8:d6:50:61:93:fe:20:01:
         23:93:d3:ff:bd:f9:4f:e6:7e:45:17:ab:9f:f3:83:0a:7e:24:
         61:bd:76:21:de:0a:8b:43:6e:50:35:1a:c3:81:8a:cd:19:2c:
         be:c5:11:9f:8f:af:c4:b2:f8:16:84:7d:67:5d:5f:b5:5b:54:
         e8:41:aa:77:db:9c:b3:5d:65:5f:c8:94:11:ac:01:9f:57:c0:
         eb:5e:e5:6c:74:17:44:3d:da:07:ff:e2:9a:d9:22:b6:66:05:
         75:d6:bb:05:53:21:b2:15:9e:a1:08:d7:c2:85:8a:57:e9:68:
         5d:c8:b0:9a:2a:ed:6a:6a:25:23:fa:e9:f5:1a:5f:2e:37:0e:
         3a:77:6e:b7
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiea2TgRcjECh1mm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmJiMGYwZDYtMmNiOS00ODQ2LWJlOWYtNjZjZTZkYmYz
YTE2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
M2RlMmIzODEtYTQ2OS00ZGMwLTkzYjQtZjBkZWZiZDBlMTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9RwWoaXPSbPYici6bX/KNmCCeEleNMiyLLU
AlqzhO/eSjf2mifgPFN2WH6f+XGEq/c64lT+MKA5n5ufcL7bAQm22izUIapgoM9k
k7uyTzfNhvNc/hbTWQAqi3JLb9t6OmkzbZHqSnF0Ky9zqlNcIseM1IGqzc4ldIhn
XsAT+BFdyGvsWTJuwu5YpJlQnepJIhkiRk3PcapbTQN8TOLbE5uQATwlmeqICeZT
P5DZVEuZxiMZhiXwSaKQSntM5cyNve+YtgGFqAFjigdzOVCWa/6AKDym1i4WiuvJ
anNQKBVH+r/ojk4/UsMeA/syLnYJ6bRed3l4q6MDqb+Dm7wj/wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFD6CK5y1YZbV6goD/AOEPEHeMHMMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYmIw
ZjBkNi0yY2I5LTQ4NDYtYmU5Zi02NmNlNmRiZjNhMTYvNDBiMzAxYjItNDIwMi0z
NWMyLWFkZGMtMTRlNzBjNzhhNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmJiMGYwZDYtMmNiOS00ODQ2LWJl
OWYtNjZjZTZkYmYzYTE2L2JiYjBmMGQ2LTJjYjktNDg0Ni1iZTlmLTY2Y2U2ZGJm
M2ExNi5jcmwwHwYDVR0jBBgwFoAU7nA9QNo3HIRwdaFNmvyYc90Lj7cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iYmIwZjBkNi0yY2I5LTQ4NDYtYmU5Zi02NmNl
NmRiZjNhMTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6mgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABFmzZzBWYWC9NIUk/coUAKurRXg4uWscXYhylyy5Re3LKHxRZrJc
NFbIKHM31Rst8kBKIuwIEayB6WsoKdRi8qug2rlZGkCh1HlGYUut+uJM0AjsnCWJ
XIC8VzYTjovkdgKxrQtT7UhzN7GrW2uC8SbPNCrLN8jWUGGT/iABI5PT/735T+Z+
RRern/ODCn4kYb12Id4Ki0NuUDUaw4GKzRksvsURn4+vxLL4FoR9Z11ftVtU6EGq
d9ucs11lX8iUEawBn1fA617lbHQXRD3aB//imtkitmYFdda7BVMhshWeoQjXwoWK
V+loXciwmirtamolI/rp9RpfLjcOOndutw==
-----END CERTIFICATE-----