Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9653b55-28f8-32a2-af3b-af22c9b0a27e.roa
File:                     d9653b55-28f8-32a2-af3b-af22c9b0a27e.roa (raw, json)
Hash identifier:          NOkxbLdogmVXiu8lFn83FZArn4YLRctAZEyLXZH9o9M=
Subject key identifier:   11:CB:69:5C:EF:16:5C:E5:7F:82:9A:1A:E2:3F:C0:4B:EE:6A:A3:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6CCA35AA009F1416DD4700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9653b55-28f8-32a2-af3b-af22c9b0a27e.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     7922
IP address blocks:        2603:2000::/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:ca:35:aa:00:9f:14:16:dd:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=410f48dd-b95b-4ec8-9d06-9e420ffce362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d3:4a:12:98:05:13:80:b9:c3:ce:3e:e3:d8:
                    70:fb:78:1b:fd:4d:0e:0b:5f:86:01:b7:82:4f:f5:
                    ce:97:20:dc:cb:ca:80:f3:71:da:33:59:2d:3e:4c:
                    6b:77:98:45:16:24:35:24:17:18:1b:42:82:33:38:
                    b4:5e:21:35:39:37:f6:3c:cb:5d:9c:67:b9:f6:30:
                    a4:00:51:9d:5e:f1:6f:7e:d3:3b:c4:4f:17:9a:79:
                    5f:27:4d:7c:06:ca:25:35:c2:e3:ed:09:17:70:e2:
                    49:01:6f:7a:61:40:e8:1f:3f:d0:9d:39:92:35:54:
                    4b:e9:e0:34:51:24:28:7e:80:45:9e:b5:69:29:a5:
                    b5:60:18:16:1a:c6:d9:bf:2e:1c:5a:67:f4:c4:d7:
                    8c:dd:2b:1f:2d:b5:38:d2:df:e6:4f:2c:55:8f:69:
                    dd:55:af:34:14:1f:a6:e9:03:89:e5:49:79:b5:df:
                    78:58:87:b9:e2:3a:13:3b:d9:0b:8f:b5:ae:4c:68:
                    96:df:d7:7c:b5:1e:58:ce:09:39:6f:e9:20:83:9b:
                    37:02:5b:32:c6:c2:f9:5c:01:bc:e5:4a:0e:41:c5:
                    6c:d9:af:c3:12:4f:c9:f2:e9:d1:81:b1:44:a2:42:
                    f6:d8:14:ec:71:f9:48:4c:26:6b:82:05:e2:42:7e:
                    d2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CB:69:5C:EF:16:5C:E5:7F:82:9A:1A:E2:3F:C0:4B:EE:6A:A3:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9653b55-28f8-32a2-af3b-af22c9b0a27e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2000::/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:20:b3:74:f8:19:65:dc:07:f5:67:c3:5f:da:61:bf:c1:89:
         d5:2d:c8:86:6a:47:d2:d1:85:f3:f8:20:0b:07:3c:72:5a:71:
         54:80:0b:b8:50:a5:97:21:f4:b2:4e:99:33:00:16:bf:00:02:
         ab:8c:9a:61:7b:3a:f2:99:61:37:e9:e4:57:f2:93:f9:04:0d:
         e5:c4:71:18:e2:02:e5:38:04:52:2e:51:aa:08:da:31:f5:68:
         f2:d8:7a:05:7f:9f:4d:16:31:92:d3:53:3f:0d:07:c5:0f:85:
         d9:68:27:74:66:e3:5a:e4:6b:c4:bc:8b:8c:ea:76:ad:a5:ea:
         da:9f:28:ed:b8:c9:af:41:14:24:9e:53:5d:0d:bc:2e:d1:71:
         ba:65:31:16:1f:e9:6d:c9:52:f6:7f:0e:fe:ff:77:f0:e5:ab:
         f0:17:f9:58:56:18:87:90:69:e2:6b:e0:26:bf:d8:75:ec:00:
         f0:36:d2:ca:0d:58:21:60:1d:8c:bd:de:ff:90:df:26:51:1d:
         61:99:98:e8:00:86:f4:d9:d8:68:dd:b2:6f:8e:59:e4:d4:3d:
         a8:74:5b:6e:43:5d:9e:ef:ce:da:87:e0:43:a2:29:c2:a6:25:
         2e:a4:fc:38:84:40:ee:a3:d6:ee:e9:7d:76:80:08:1f:d2:15:
         28:09:9e:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebMo1qgCfFBbdRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
NDEwZjQ4ZGQtYjk1Yi00ZWM4LTlkMDYtOWU0MjBmZmNlMzYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9NKEpgFE4C5w84+49hw+3gb/U0OC1+GAbeC
T/XOlyDcy8qA83HaM1ktPkxrd5hFFiQ1JBcYG0KCMzi0XiE1OTf2PMtdnGe59jCk
AFGdXvFvftM7xE8XmnlfJ018BsolNcLj7QkXcOJJAW96YUDoHz/QnTmSNVRL6eA0
USQofoBFnrVpKaW1YBgWGsbZvy4cWmf0xNeM3SsfLbU40t/mTyxVj2ndVa80FB+m
6QOJ5Ul5td94WIe54joTO9kLj7WuTGiW39d8tR5Yzgk5b+kgg5s3AlsyxsL5XAG8
5UoOQcVs2a/DEk/J8unRgbFEokL22BTscflITCZrggXiQn7SdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBHLaVzvFlzlf4KaGuI/wEvuaqOWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDk2NTNiNTUtMjhmOC0z
MmEyLWFmM2ItYWYyMmM5YjBhMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAAjAGAwQEJgMgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFUgs3T4GWXcB/Vnw1/aYb/BidUtyIZqR9LRhfP4IAsHPHJacVSAC7hQ
pZch9LJOmTMAFr8AAquMmmF7OvKZYTfp5Ffyk/kEDeXEcRjiAuU4BFIuUaoI2jH1
aPLYegV/n00WMZLTUz8NB8UPhdloJ3Rm41rka8S8i4zqdq2l6tqfKO24ya9BFCSe
U10NvC7RcbplMRYf6W3JUvZ/Dv7/d/Dlq/AX+VhWGIeQaeJr4Ca/2HXsAPA20soN
WCFgHYy93v+Q3yZRHWGZmOgAhvTZ2Gjdsm+OWeTUPah0W25DXZ7vztqH4EOiKcKm
JS6k/DiEQO6j1u7pfXaACB/SFSgJntM=
-----END CERTIFICATE-----