Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da567f33-f1b8-355b-8018-ed36c2beef3c.roa
File:                     da567f33-f1b8-355b-8018-ed36c2beef3c.roa (raw, json)
Hash identifier:          s7JkQDVgQkyKaTvnSXX0Z0M+5IVLN8U63iTCvBcADNU=
Subject key identifier:   3F:70:10:E3:12:33:29:97:2C:87:E4:9E:1A:F7:85:54:AF:0C:D0:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73F6901C339291B3C01240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da567f33-f1b8-355b-8018-ed36c2beef3c.roa
Signing time:             Fri 29 Nov 2024 13:58:37 +0000
ROA not before:           Fri 29 Nov 2024 13:58:37 +0000
ROA not after:            Thu 27 Feb 2025 13:58:37 +0000
asID:                     36629
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:f6:90:1c:33:92:91:b3:c0:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:37 2024 GMT
            Not After : Feb 27 13:58:37 2025 GMT
        Subject: CN=c7377e6d-b956-4f0b-8e25-32ca7d34f9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:34:ee:99:a4:fc:11:6b:97:40:22:f5:f5:96:
                    94:f9:6f:81:cf:a6:e4:c9:c7:41:17:1f:31:77:3b:
                    70:88:4d:d4:0c:b0:5e:30:3f:a9:be:9f:5b:9c:99:
                    cb:3a:c5:f3:a1:c2:38:30:d1:20:85:24:02:bc:a1:
                    df:eb:c7:56:71:ca:56:1b:1f:ef:a3:8f:3e:ca:d8:
                    47:b9:87:51:a5:6e:17:df:52:de:b3:8b:a4:c5:df:
                    03:c1:eb:3c:5c:43:f5:72:c4:fb:81:d3:8e:aa:e8:
                    7b:86:85:e5:d5:71:3c:b5:d5:c4:0b:38:0f:77:4b:
                    01:cf:66:7d:cf:73:d6:ab:59:3c:d6:35:fe:df:b6:
                    31:15:e8:67:27:01:9f:b1:96:9a:4e:1b:cc:6b:87:
                    eb:b1:68:f9:34:ae:11:da:e1:a6:29:39:ec:b6:2d:
                    ef:d8:86:67:a4:0f:0e:a0:3e:a9:79:f0:b4:1b:e0:
                    80:a3:3c:92:9f:8d:71:0e:0e:ac:42:5f:8d:86:99:
                    51:a5:25:fc:af:6a:24:7b:f3:52:71:7e:99:28:33:
                    67:35:ea:ca:48:6e:ea:f5:c0:04:d9:b6:f5:d1:f2:
                    c6:ef:d9:83:1b:cd:e9:00:18:cf:0f:65:cd:95:9f:
                    af:9d:ef:db:82:20:50:fb:3e:53:76:83:80:99:e7:
                    34:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:70:10:E3:12:33:29:97:2C:87:E4:9E:1A:F7:85:54:AF:0C:D0:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da567f33-f1b8-355b-8018-ed36c2beef3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:c4:2a:a9:dc:51:96:87:22:e1:b5:79:f9:5a:18:05:26:98:
         5e:8a:a6:66:f6:86:9d:71:ef:f4:48:e5:55:e2:9c:17:ba:ef:
         d4:ed:5b:48:62:71:01:46:a5:c0:ba:f3:fe:b7:16:c8:6e:74:
         52:b2:30:82:d6:4c:53:ea:57:63:23:0a:42:b4:75:2f:e4:da:
         af:3c:54:b5:94:25:2c:2a:53:74:bf:bc:81:a1:9b:7c:4a:f0:
         1d:4a:7f:40:80:b2:14:7f:05:64:02:fe:11:e1:81:c6:e1:e2:
         f6:5c:38:b2:0d:b2:39:37:e3:85:20:2f:b8:a8:3c:c4:02:05:
         44:a7:66:7a:a8:90:54:9a:15:13:8a:e2:59:49:8f:8a:36:1b:
         3b:d9:19:7b:50:dd:ba:d7:bc:ee:1a:03:26:3f:ee:b4:d7:6f:
         fa:da:4f:cd:c9:1b:aa:f3:2e:a6:03:b2:ed:05:06:cb:8c:16:
         ec:c4:be:a0:ec:f4:33:9e:ae:94:45:d1:f3:26:c1:61:df:32:
         11:f2:ec:2b:04:29:6a:3d:d9:7c:63:79:46:ff:48:6b:86:e5:
         21:30:5f:a2:75:b6:4f:c9:07:2a:1c:ef:b4:33:5a:28:cb:b4:
         9f:1c:ae:d3:18:76:54:51:cc:c2:4d:34:ae:db:d4:fd:60:73:
         f8:a5:bd:e9
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEgKc/aQHDOSkbPAEkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEyOTEzNTgzN1oXDTI1MDIyNzEzNTgzN1owLzEtMCsGA1UEAxMk
YzczNzdlNmQtYjk1Ni00ZjBiLThlMjUtMzJjYTdkMzRmOWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzTumaT8EWuXQCL19ZaU+W+Bz6bkycdBFx8x
dztwiE3UDLBeMD+pvp9bnJnLOsXzocI4MNEghSQCvKHf68dWccpWGx/vo48+ythH
uYdRpW4X31Les4ukxd8Dwes8XEP1csT7gdOOquh7hoXl1XE8tdXECzgPd0sBz2Z9
z3PWq1k81jX+37YxFehnJwGfsZaaThvMa4frsWj5NK4R2uGmKTnsti3v2IZnpA8O
oD6pefC0G+CAozySn41xDg6sQl+NhplRpSX8r2oke/NScX6ZKDNnNerKSG7q9cAE
2bb10fLG79mDG83pABjPD2XNlZ+vne/bgiBQ+z5TdoOAmec0UQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFD9wEOMSMymXLIfknhr3hVSvDNC4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGE1NjdmMzMtZjFiOC0z
NTViLTgwMTgtZWQzNmMyYmVlZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCExCqp3FGWhyLhtXn5WhgFJpheiqZm9oadce/0
SOVV4pwXuu/U7VtIYnEBRqXAuvP+txbIbnRSsjCC1kxT6ldjIwpCtHUv5NqvPFS1
lCUsKlN0v7yBoZt8SvAdSn9AgLIUfwVkAv4R4YHG4eL2XDiyDbI5N+OFIC+4qDzE
AgVEp2Z6qJBUmhUTiuJZSY+KNhs72Rl7UN2617zuGgMmP+6012/62k/NyRuq8y6m
A7LtBQbLjBbsxL6g7PQznq6URdHzJsFh3zIR8uwrBClqPdl8Y3lG/0hrhuUhMF+i
dbZPyQcqHO+0M1ooy7SfHK7TGHZUUczCTTSu29T9YHP4pb3p
-----END CERTIFICATE-----