Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa
File:                     885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa (raw, json)
Hash identifier:          /20PA7OSgvXi3/7DnsW4BBr8regjC3nVkxwt7MziFw4=
Subject key identifier:   90:40:66:4E:F3:75:B7:86:60:59:45:04:1B:79:47:80:4A:A1:96:1A
Certificate issuer:       /CN=acd38b39-740a-4881-b923-26d1a20ffbfe
Certificate serial:       010D0C9F43285848A1361258EB947A6E9BD75D00
Authority key identifier: E9:0D:0F:ED:47:FD:7A:07:EE:45:AF:63:02:94:4A:39:11:B5:BB:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     33724
IP address blocks:        2604:240::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:12:58:eb:94:7a:6e:9b:d7:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acd38b39-740a-4881-b923-26d1a20ffbfe
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=43882f50-3e0a-498b-8c76-190bcce99a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3c:10:bd:12:55:6b:e7:85:4c:1a:e4:27:41:
                    fc:fe:f4:2e:b2:da:33:3d:59:83:a4:ac:fa:78:54:
                    9f:44:56:ce:3b:70:0d:36:7a:d3:c9:0f:f9:e5:56:
                    7d:5c:5d:f1:65:f0:8e:8b:98:17:19:26:7a:d8:ea:
                    14:8a:4d:a3:2a:bd:a3:ba:0b:3a:6d:09:07:92:74:
                    ee:95:ef:a4:67:02:e6:7a:9c:bb:a5:30:44:b2:83:
                    92:8f:3c:98:95:23:b1:2d:7c:65:8a:09:2c:7e:01:
                    14:2e:7e:67:95:4d:ac:39:11:8a:0f:49:54:f2:ce:
                    71:91:7c:aa:ff:23:e0:72:66:9f:63:3e:79:23:bf:
                    84:18:72:83:07:a1:ba:76:fb:e5:0c:28:27:96:a8:
                    38:3c:5c:29:a9:02:b8:c4:25:ff:7b:2a:2c:c5:02:
                    33:ab:45:b8:cc:9e:5f:51:30:2d:e6:ea:f6:0d:99:
                    89:77:1a:df:19:25:da:a9:a3:41:a9:5a:69:0c:e0:
                    a8:35:45:50:b6:18:53:02:b7:f9:b4:b4:0f:9f:51:
                    47:97:bd:bf:ff:a5:6f:d7:42:ec:4b:4a:37:e9:46:
                    4f:98:f4:4d:6b:76:54:ea:6a:81:65:90:fc:13:1d:
                    25:23:51:a5:d8:44:d1:9f:77:8f:b9:c5:87:81:23:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:40:66:4E:F3:75:B7:86:60:59:45:04:1B:79:47:80:4A:A1:96:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/acd38b39-740a-4881-b923-26d1a20ffbfe.crl

            X509v3 Authority Key Identifier:
                keyid:E9:0D:0F:ED:47:FD:7A:07:EE:45:AF:63:02:94:4A:39:11:B5:BB:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:45:54:31:e6:71:48:70:6d:9e:13:a3:ee:53:cb:d5:28:bd:
         0a:fa:b7:60:87:b0:d1:e0:6a:7f:a7:2f:09:8f:70:ea:f3:20:
         5a:50:f4:df:57:b1:a6:a4:51:36:de:13:c2:77:f1:20:ad:bf:
         44:1d:b9:46:01:fe:c6:69:b5:ca:4a:dd:13:11:b2:c7:2e:11:
         25:33:34:4f:e0:d8:db:ce:2b:e4:b7:5c:ce:1b:25:e5:c6:cb:
         a1:ef:28:e0:b5:52:96:05:c0:9a:a4:c8:19:ee:78:f5:b9:7e:
         df:95:30:30:7b:33:83:73:41:72:de:f6:60:00:61:35:b7:bd:
         aa:74:34:e0:e1:09:78:6e:a9:a3:0c:34:a7:7b:8d:54:5f:90:
         0a:6b:25:86:41:93:31:10:ac:42:e8:01:7c:01:65:7e:5e:c0:
         c8:fd:da:0a:77:ef:f8:1f:6d:7e:74:4e:8c:ff:bc:af:b5:68:
         4b:55:b1:a0:c7:a3:5b:d1:bb:d0:19:3a:51:93:58:e8:66:b9:
         48:b9:53:b6:4d:e3:f6:87:81:45:86:1e:1f:50:8e:cd:b1:5b:
         eb:10:61:95:f2:dd:73:59:4d:75:58:9e:6c:bd:af:8b:36:5e:
         1c:ce:45:73:c4:a4:2b:1c:84:d8:eb:6b:bc:45:ae:ce:d3:73:
         4a:75:6b:5a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEihNhJY65R6bpvXXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWNkMzhiMzktNzQwYS00ODgxLWI5MjMtMjZkMWEyMGZm
YmZlMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
NDM4ODJmNTAtM2UwYS00OThiLThjNzYtMTkwYmNjZTk5YTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDwQvRJVa+eFTBrkJ0H8/vQustozPVmDpKz6
eFSfRFbOO3ANNnrTyQ/55VZ9XF3xZfCOi5gXGSZ62OoUik2jKr2jugs6bQkHknTu
le+kZwLmepy7pTBEsoOSjzyYlSOxLXxligksfgEULn5nlU2sORGKD0lU8s5xkXyq
/yPgcmafYz55I7+EGHKDB6G6dvvlDCgnlqg4PFwpqQK4xCX/eyosxQIzq0W4zJ5f
UTAt5ur2DZmJdxrfGSXaqaNBqVppDOCoNUVQthhTArf5tLQPn1FHl72//6Vv10Ls
S0o36UZPmPRNa3ZU6mqBZZD8Ex0lI1Gl2ETRn3ePucWHgSPX9QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJBAZk7zdbeGYFlFBBt5R4BKoZYaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hY2Qz
OGIzOS03NDBhLTQ4ODEtYjkyMy0yNmQxYTIwZmZiZmUvODg1YWZkOWEtOGQ4OC0z
OGRjLWI2MDgtOWYwMzkyZjRiOWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWNkMzhiMzktNzQwYS00ODgxLWI5
MjMtMjZkMWEyMGZmYmZlL2FjZDM4YjM5LTc0MGEtNDg4MS1iOTIzLTI2ZDFhMjBm
ZmJmZS5jcmwwHwYDVR0jBBgwFoAU6Q0P7Uf9egfuRa9jApRKORG1u2IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hY2QzOGIzOS03NDBhLTQ4ODEtYjkyMy0yNmQx
YTIwZmZiZmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQCQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBQRVQx5nFIcG2eE6PuU8vVKL0K+rdgh7DR4Gp/py8Jj3Dq8yBaUPTf
V7GmpFE23hPCd/Egrb9EHblGAf7GabXKSt0TEbLHLhElMzRP4Njbzivkt1zOGyXl
xsuh7yjgtVKWBcCapMgZ7nj1uX7flTAwezODc0Fy3vZgAGE1t72qdDTg4Ql4bqmj
DDSne41UX5AKayWGQZMxEKxC6AF8AWV+XsDI/doKd+/4H21+dE6M/7yvtWhLVbGg
x6Nb0bvQGTpRk1joZrlIuVO2TeP2h4FFhh4fUI7NsVvrEGGV8t1zWU11WJ5sva+L
Nl4czkVzxKQrHITY62u8Ra7O03NKdWta
-----END CERTIFICATE-----