Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/27f99c2d-6701-3211-99a5-48553372cb61.roa
File:                     27f99c2d-6701-3211-99a5-48553372cb61.roa (raw, json)
Hash identifier:          FXhzwqIzejKB+HLaGMVhf50+u/qSlo484vbtcg3RXwA=
Subject key identifier:   FD:FA:47:78:2C:F5:AB:9C:F0:BF:92:A4:67:B8:25:92:77:A4:BD:AC
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F43285849287E53E219D38B8C01F11410
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/27f99c2d-6701-3211-99a5-48553372cb61.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     21928
IP address blocks:        2607:fc20::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:53:e2:19:d3:8b:8c:01:f1:14:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=417a63c2-732a-4c0d-aba3-fb544d4bbaaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a8:8e:91:e0:a8:ff:19:66:20:1d:4e:8a:e4:
                    8a:84:26:c3:ed:05:f4:fc:fc:4c:e4:16:da:84:af:
                    52:ef:73:93:36:1c:48:11:d6:19:1b:5f:0b:f0:50:
                    a5:e9:b3:f8:79:87:89:ee:8a:81:64:f6:e2:3e:d9:
                    1f:13:a7:8b:6a:ff:78:f4:30:ec:6e:73:f3:7e:b8:
                    65:4e:4d:73:67:be:5c:22:a2:af:87:d3:9c:5b:d3:
                    84:84:04:2f:f5:44:c9:c0:b8:75:62:c7:dc:de:38:
                    e9:2e:95:85:93:29:26:30:34:c8:1a:87:62:21:85:
                    28:93:07:77:7f:11:af:2a:81:68:8f:95:ea:9f:77:
                    01:6e:2d:58:73:36:7a:8f:e4:89:b0:27:92:dd:31:
                    24:d6:6e:a7:30:c8:2f:76:fa:7b:3f:9c:89:9a:9f:
                    dc:f3:30:ec:af:6a:c2:c4:7c:05:0f:f9:ed:65:4c:
                    79:04:b8:4a:34:9f:f6:31:b4:78:90:47:e8:74:f5:
                    9f:46:1f:20:b5:38:e4:d7:a6:ca:bc:56:14:2c:66:
                    1f:ad:17:96:58:1a:f9:57:16:31:83:1f:c5:ce:72:
                    fd:91:f4:29:a8:f6:33:c2:f4:6d:6f:4f:6e:50:69:
                    d5:82:e8:fa:7e:e1:ae:f1:fd:37:c3:cb:d7:08:69:
                    47:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FA:47:78:2C:F5:AB:9C:F0:BF:92:A4:67:B8:25:92:77:A4:BD:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/27f99c2d-6701-3211-99a5-48553372cb61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:16:52:91:46:59:e6:7c:be:30:5a:d8:92:f1:0b:40:73:60:
         97:19:c0:55:e7:28:0b:63:a0:98:f3:da:93:40:b6:be:bb:96:
         da:27:a3:38:91:a1:df:89:2c:49:3c:ae:b0:05:8f:95:5f:76:
         58:fa:66:60:3e:85:d3:0e:50:f6:ad:8e:6b:d6:44:b2:5a:3f:
         58:c9:25:e6:57:73:0b:15:bd:29:06:4a:42:fa:7a:dd:d9:b0:
         9c:39:1b:90:2f:b0:e4:4b:6f:a2:f7:d1:4c:d2:c8:8b:88:f9:
         9c:78:c6:3b:3e:68:24:85:eb:0c:14:e7:39:4e:7f:fa:c3:9c:
         ce:c4:65:5c:a1:e8:50:f9:f4:e8:01:36:a9:18:64:b7:ef:06:
         0f:a9:84:3d:0a:97:a3:bd:92:fb:98:c8:38:1a:5a:81:ca:2c:
         5c:84:58:f2:db:1a:cd:6f:dc:10:c2:73:47:19:79:e2:96:c4:
         bd:70:a9:04:6e:66:bc:8a:0c:37:3b:53:63:84:3a:ad:fb:a4:
         80:94:08:ef:e9:f4:42:1c:6e:4c:c1:f8:24:d5:59:99:dd:cf:
         5f:44:fa:92:17:fd:5c:41:47:28:f3:f9:8f:f2:b6:90:6c:75:
         18:7e:61:2b:34:c0:71:e2:42:55:dc:b4:d9:44:93:db:33:42:
         9c:06:be:d0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkoflPiGdOLjAHxFBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm
MGMzMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk
NDE3YTYzYzItNzMyYS00YzBkLWFiYTMtZmI1NDRkNGJiYWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKiOkeCo/xlmIB1OiuSKhCbD7QX0/PxM5Bba
hK9S73OTNhxIEdYZG18L8FCl6bP4eYeJ7oqBZPbiPtkfE6eLav949DDsbnPzfrhl
Tk1zZ75cIqKvh9OcW9OEhAQv9UTJwLh1Ysfc3jjpLpWFkykmMDTIGodiIYUokwd3
fxGvKoFoj5Xqn3cBbi1YczZ6j+SJsCeS3TEk1m6nMMgvdvp7P5yJmp/c8zDsr2rC
xHwFD/ntZUx5BLhKNJ/2MbR4kEfodPWfRh8gtTjk16bKvFYULGYfrReWWBr5VxYx
gx/FznL9kfQpqPYzwvRtb09uUGnVguj6fuGu8f03w8vXCGlHIQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFP36R3gs9auc8L+SpGe4JZJ3pL2sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm
MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvMjdmOTljMmQtNjcwMS0z
MjExLTk5YTUtNDg1NTMzNzJjYjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk
OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl
ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi
ZjVjZWYwYzMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf8IDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC5FlKRRlnmfL4wWtiS8QtAc2CXGcBV5ygLY6CY89qTQLa+u5baJ6M4
kaHfiSxJPK6wBY+VX3ZY+mZgPoXTDlD2rY5r1kSyWj9YySXmV3MLFb0pBkpC+nrd
2bCcORuQL7DkS2+i99FM0siLiPmceMY7PmgkhesMFOc5Tn/6w5zOxGVcoehQ+fTo
ATapGGS37wYPqYQ9CpejvZL7mMg4GlqByixchFjy2xrNb9wQwnNHGXnilsS9cKkE
bma8igw3O1NjhDqt+6SAlAjv6fRCHG5Mwfgk1VmZ3c9fRPqSF/1cQUco8/mP8raQ
bHUYfmErNMBx4kJV3LTZRJPbM0KcBr7Q
-----END CERTIFICATE-----