Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22e1f27c-aa8d-306b-91c5-df508c3aa799.roa
File:                     22e1f27c-aa8d-306b-91c5-df508c3aa799.roa (raw, json)
Hash identifier:          0vLS5gBDJTjs/cHApO3eoIH/xo7gU8vwh6FumsN2aoU=
Subject key identifier:   E5:3D:CC:FA:1F:8C:16:E7:77:90:0D:8C:1C:13:71:1D:08:9A:9F:42
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF3364F7F8F540C326CEC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22e1f27c-aa8d-306b-91c5-df508c3aa799.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        2601:243::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:33:64:f7:f8:f5:40:c3:26:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=6fb8d3dc-ddef-4e1d-a08b-15edc2902363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b1:6e:0c:ed:63:3e:ab:c3:79:7e:91:63:d3:
                    54:38:07:0f:ba:ff:4c:e2:ea:99:9a:f3:05:c4:af:
                    86:50:34:5c:2a:20:c0:9f:f0:48:3e:f4:37:60:97:
                    f3:88:79:99:68:35:e7:b9:1a:22:b6:00:90:63:8f:
                    4c:2e:ee:f6:1c:38:ef:75:6a:ed:40:2c:5b:e8:9b:
                    ea:7a:08:c3:cd:35:de:eb:f9:cd:e8:ee:f8:3e:3d:
                    7a:a8:c2:d4:e9:ee:3a:6c:22:58:5a:3f:41:24:6a:
                    38:4c:47:f5:cc:a2:e5:b4:db:21:3f:e3:cc:ad:3c:
                    0f:2a:dd:44:06:d5:cd:55:5f:bf:7d:a1:c6:9b:8c:
                    ac:32:95:e0:78:62:ed:ec:b0:27:14:24:33:37:81:
                    a1:5f:65:ba:6e:51:66:1c:18:51:1f:ee:c8:fa:cb:
                    5d:51:a4:d5:f9:a8:f8:c4:18:0c:e8:76:1d:e2:b3:
                    5a:a3:b9:7c:73:ca:10:ed:71:27:29:b6:7a:20:72:
                    1a:a7:20:eb:bc:7a:46:83:a7:66:57:8d:2c:bd:fb:
                    3b:f0:41:20:04:94:f7:de:a7:32:7b:7c:aa:aa:bf:
                    d3:cc:86:de:16:a9:95:fd:d1:ad:ec:05:b3:d5:e1:
                    33:04:e9:93:0a:78:75:f3:91:6d:a9:41:39:0c:5b:
                    d9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3D:CC:FA:1F:8C:16:E7:77:90:0D:8C:1C:13:71:1D:08:9A:9F:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22e1f27c-aa8d-306b-91c5-df508c3aa799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:243::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ff:20:15:56:58:77:f9:be:73:f2:7d:bd:2f:00:17:78:c8:
         37:4b:cb:ff:7d:e7:91:8f:5c:76:fe:b2:36:82:e2:40:8a:86:
         d4:b0:d9:92:92:0a:a4:9c:db:02:80:ff:f0:0b:78:87:24:5f:
         51:97:10:a0:ec:0e:f0:8e:20:e2:dc:85:35:7c:b4:6e:11:05:
         61:a5:02:ce:35:2e:1d:de:5f:75:74:ea:68:69:43:6f:98:66:
         8c:d3:95:7f:98:9c:df:62:13:0c:a9:e3:f9:5d:14:14:28:67:
         3a:e6:57:6b:ee:d1:ff:84:fa:5f:3c:2f:12:cb:81:38:1a:37:
         bf:70:56:fa:7b:fa:f6:21:e5:c5:cc:e5:0c:29:af:dc:96:8c:
         01:ca:2b:b1:e3:85:62:20:40:ea:40:ba:32:39:7e:df:6f:ae:
         16:92:53:38:ca:55:76:00:e1:ef:2f:0a:41:e4:c6:d9:1a:7e:
         11:f2:f3:2d:a2:64:f0:1d:f2:fe:7e:e2:68:6d:fa:42:bc:80:
         33:03:e2:ff:67:87:ae:c8:fb:08:63:44:64:7b:b7:9f:d8:fd:
         c0:a7:9f:7e:89:50:37:d3:e1:5f:8e:45:08:70:a7:b3:1d:f2:
         24:22:0c:f5:ff:c0:cb:e4:da:0d:7f:32:ba:48:56:f4:49:19:
         9a:7e:10:d0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEksrzNk9/j1QMMmzsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NmZiOGQzZGMtZGRlZi00ZTFkLWEwOGItMTVlZGMyOTAyMzYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrFuDO1jPqvDeX6RY9NUOAcPuv9M4uqZmvMF
xK+GUDRcKiDAn/BIPvQ3YJfziHmZaDXnuRoitgCQY49MLu72HDjvdWrtQCxb6Jvq
egjDzTXe6/nN6O74Pj16qMLU6e46bCJYWj9BJGo4TEf1zKLltNshP+PMrTwPKt1E
BtXNVV+/faHGm4ysMpXgeGLt7LAnFCQzN4GhX2W6blFmHBhRH+7I+stdUaTV+aj4
xBgM6HYd4rNao7l8c8oQ7XEnKbZ6IHIapyDrvHpGg6dmV40svfs78EEgBJT33qcy
e3yqqr/TzIbeFqmV/dGt7AWz1eEzBOmTCnh185FtqUE5DFvZCwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOU9zPofjBbnd5ANjBwTcR0Imp9CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjJlMWYyN2MtYWE4ZC0z
MDZiLTkxYzUtZGY1MDhjM2FhNzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgECQwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAD/8gFVZYd/m+c/J9vS8AF3jIN0vL/33nkY9cdv6yNoLiQIqG1LDZ
kpIKpJzbAoD/8At4hyRfUZcQoOwO8I4g4tyFNXy0bhEFYaUCzjUuHd5fdXTqaGlD
b5hmjNOVf5ic32ITDKnj+V0UFChnOuZXa+7R/4T6XzwvEsuBOBo3v3BW+nv69iHl
xczlDCmv3JaMAcorseOFYiBA6kC6Mjl+32+uFpJTOMpVdgDh7y8KQeTG2Rp+EfLz
LaJk8B3y/n7iaG36QryAMwPi/2eHrsj7CGNEZHu3n9j9wKeffolQN9PhX45FCHCn
sx3yJCIM9f/Ay+TaDX8yukhW9EkZmn4Q0A==
-----END CERTIFICATE-----