Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5af117be-6302-321b-9b42-6f7e31c1219f.roa
File:                     5af117be-6302-321b-9b42-6f7e31c1219f.roa (raw, json)
Hash identifier:          uq+/YLODC/jZk8fs+y5fHEQAI8EyuIXVtISKkw6IRHw=
Subject key identifier:   FA:1B:B2:E5:65:AE:1D:2C:FB:1B:70:D7:19:38:4D:54:0C:F0:7B:47
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848B73786872CB255A2774F3940
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5af117be-6302-321b-9b42-6f7e31c1219f.roa
Signing time:             Thu 30 Jan 2025 11:11:42 +0000
ROA not before:           Thu 30 Jan 2025 11:11:42 +0000
ROA not after:            Wed 30 Apr 2025 10:11:42 +0000
asID:                     30036
IP address blocks:        2604:2e88:9000::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:37:86:87:2c:b2:55:a2:77:4f:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 30 11:11:42 2025 GMT
            Not After : Apr 30 10:11:42 2025 GMT
        Subject: CN=45569e60-64bd-4ed0-b6da-7e784231e8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:31:7a:0e:f1:f6:f0:a6:2b:24:7f:50:f6:f9:
                    b8:88:79:f0:6a:1e:7a:ee:73:8f:32:6a:2f:06:9f:
                    07:82:d6:79:11:69:c0:0b:85:bb:fb:9b:35:3b:c8:
                    ea:13:99:fb:49:db:48:8a:81:44:e9:95:9e:a4:d1:
                    b6:45:6c:59:42:8d:5f:de:e2:69:a6:8d:5d:e9:7d:
                    c2:8d:44:e6:d6:bb:db:20:e4:67:93:e6:5a:2a:05:
                    6a:bd:7f:d4:f4:4e:d7:89:b9:be:ba:41:a2:3c:ad:
                    e0:21:a7:f2:55:42:ca:73:cb:26:21:d0:d7:aa:d8:
                    0b:25:5c:72:3a:f6:04:10:8f:89:78:2b:50:d2:14:
                    27:0c:a8:86:5b:bd:9b:4c:e5:f9:3d:97:97:2f:4b:
                    d4:19:bd:60:9a:87:14:3c:7a:0a:06:d0:0e:45:0a:
                    c7:75:f4:ce:fe:9e:e8:c6:07:e4:57:aa:4d:b8:68:
                    c5:28:57:34:3b:96:a4:12:91:1d:e6:90:2f:ce:46:
                    44:71:96:c0:3a:fc:cf:42:4f:0a:46:2c:aa:5e:e8:
                    bf:eb:c4:a5:26:5a:fd:5b:45:d8:40:af:11:c0:55:
                    6c:f4:48:2d:95:c4:d0:96:5a:2c:c0:1b:06:15:e4:
                    75:b0:28:70:3c:6f:aa:62:88:c2:5a:98:9e:6b:8a:
                    43:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1B:B2:E5:65:AE:1D:2C:FB:1B:70:D7:19:38:4D:54:0C:F0:7B:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5af117be-6302-321b-9b42-6f7e31c1219f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:9000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ca:d4:05:11:d6:e1:aa:b3:c1:18:fb:10:2e:90:18:5d:be:
         82:b3:0e:21:89:99:5e:ed:0c:05:a5:ee:48:f9:76:ea:39:c4:
         1d:50:14:10:3e:af:78:72:5f:9c:7c:6a:7e:7c:e3:4a:93:03:
         61:76:eb:75:44:a1:fe:c1:42:b3:df:49:14:25:71:00:5f:49:
         25:2a:17:14:cc:ec:e8:7d:fe:7f:3b:a5:09:fe:83:ca:76:fd:
         79:22:95:47:8f:2f:c4:66:e7:df:ef:69:32:76:f8:08:84:21:
         e4:31:c0:81:f8:55:a0:c3:7f:86:99:07:5f:ab:a5:b2:2b:63:
         bc:88:dd:1c:ad:db:31:29:e8:39:61:8f:a5:d1:31:a3:dd:2a:
         0a:5c:e5:29:2e:e8:d0:2d:d2:de:39:84:2e:e0:4f:3c:57:8e:
         81:92:21:02:a2:79:3d:d6:57:8c:e5:c1:dc:bc:d2:67:19:fd:
         cf:25:53:e9:dd:29:64:a7:bf:dd:7f:57:5a:d0:77:6f:29:8f:
         b5:97:91:3f:3d:be:f6:c1:23:b4:f0:dd:11:7d:a8:59:4f:c5:
         69:57:b4:d6:c6:96:2b:cd:0e:d6:bf:45:40:ed:f1:0e:a9:66:
         0a:7c:ef:fb:84:70:d6:d3:90:06:13:9f:0a:ad:ea:8b:c4:c5:
         43:f0:8f:66
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEi3N4aHLLJVondPOUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDEzMDExMTE0MloXDTI1MDQzMDEwMTE0MlowLzEtMCsGA1UEAxMk
NDU1NjllNjAtNjRiZC00ZWQwLWI2ZGEtN2U3ODQyMzFlOGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzF6DvH28KYrJH9Q9vm4iHnwah567nOPMmov
Bp8HgtZ5EWnAC4W7+5s1O8jqE5n7SdtIioFE6ZWepNG2RWxZQo1f3uJppo1d6X3C
jUTm1rvbIORnk+ZaKgVqvX/U9E7Xibm+ukGiPK3gIafyVULKc8smIdDXqtgLJVxy
OvYEEI+JeCtQ0hQnDKiGW72bTOX5PZeXL0vUGb1gmocUPHoKBtAORQrHdfTO/p7o
xgfkV6pNuGjFKFc0O5akEpEd5pAvzkZEcZbAOvzPQk8KRiyqXui/68SlJlr9W0XY
QK8RwFVs9EgtlcTQlloswBsGFeR1sChwPG+qYojCWpiea4pDdQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPobsuVlrh0s+xtw1xk4TVQM8HtHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWFmMTE3YmUtNjMwMi0z
MjFiLTliNDItNmY3ZTMxYzEyMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiJAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdMrUBRHW4aqzwRj7EC6QGF2+grMOIYmZXu0MBaXuSPl26jnEHVAU
ED6veHJfnHxqfnzjSpMDYXbrdUSh/sFCs99JFCVxAF9JJSoXFMzs6H3+fzulCf6D
ynb9eSKVR48vxGbn3+9pMnb4CIQh5DHAgfhVoMN/hpkHX6ulsitjvIjdHK3bMSno
OWGPpdExo90qClzlKS7o0C3S3jmELuBPPFeOgZIhAqJ5PdZXjOXB3LzSZxn9zyVT
6d0pZKe/3X9XWtB3bymPtZeRPz2+9sEjtPDdEX2oWU/FaVe01saWK80O1r9FQO3x
DqlmCnzv+4Rw1tOQBhOfCq3qi8TFQ/CPZg==
-----END CERTIFICATE-----