Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/37dc2aa1-cb73-3211-9724-e0c93f58e298.roa
File:                     37dc2aa1-cb73-3211-9724-e0c93f58e298.roa (raw, json)
Hash identifier:          DTTd0Exebw5Nzu/knUzc2hqxq9VCunokjLkhfsISKdc=
Subject key identifier:   99:E5:95:2C:F8:FA:80:FD:28:F2:21:C4:F6:35:D4:AF:C9:D3:AB:DF
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858494039596359A257B53750B4A0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/37dc2aa1-cb73-3211-9724-e0c93f58e298.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:5d50::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:59:63:59:a2:57:b5:37:50:b4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=4d80ff27-0b9b-4dac-aadf-c51cb4eac8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:77:a9:82:de:ed:21:a8:ce:f3:af:84:f9:f7:
                    a1:89:c6:73:32:97:f9:26:40:da:6f:5c:ed:50:e1:
                    d1:8a:75:02:fd:4c:32:fb:ec:e1:86:1d:c4:de:81:
                    a8:d9:b1:1c:ba:45:13:2d:c1:f5:10:c1:95:c0:84:
                    f9:a7:c3:65:f2:10:4f:72:44:bd:6f:cc:70:bd:24:
                    7e:b5:01:8f:62:78:73:de:ad:37:21:b7:be:7d:01:
                    7e:56:2d:8f:aa:0f:89:bb:65:39:e0:75:3e:5b:a6:
                    30:2a:85:4f:16:f8:71:2f:c8:b4:a4:f6:6c:36:d8:
                    4c:8c:6b:00:87:d5:31:2a:ab:a4:15:16:76:fa:c5:
                    20:1f:de:5a:45:04:00:42:c7:33:08:de:be:ed:6f:
                    a2:ec:38:3f:d2:5e:d1:f4:1d:95:5b:90:8d:fb:b3:
                    e0:6d:89:ce:93:a7:2a:6e:e2:3d:57:c8:d5:18:b0:
                    e9:a0:8e:c4:f9:ac:c6:89:b7:e2:2c:5d:25:e3:d5:
                    5b:bf:da:66:ae:96:03:b9:a8:89:2f:82:fc:74:1f:
                    4c:53:1c:89:2a:6d:d9:50:ed:72:ed:59:ad:09:a1:
                    39:13:3d:42:c3:0d:c6:80:fe:2f:39:1f:70:79:3c:
                    78:db:02:af:12:cc:00:b7:d3:e2:20:92:90:e0:83:
                    96:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E5:95:2C:F8:FA:80:FD:28:F2:21:C4:F6:35:D4:AF:C9:D3:AB:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/37dc2aa1-cb73-3211-9724-e0c93f58e298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5d50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:03:3c:97:82:99:67:d6:ff:c3:17:6d:ca:c1:b6:51:7e:b8:
         d1:54:dd:aa:99:a6:58:e4:c2:71:83:d5:5b:20:9a:22:3c:2b:
         ba:3e:97:b8:93:54:76:f8:8a:2b:db:61:3f:b5:27:fc:85:44:
         f1:f2:0d:20:61:91:0b:0b:0e:c7:58:ab:f3:54:cf:2d:5c:5a:
         a4:27:8d:81:1b:e5:27:d6:42:d0:4f:06:0d:55:24:4b:39:cc:
         d7:c9:7f:e3:21:07:f1:e0:59:69:20:76:3c:82:3a:22:9c:b4:
         90:60:c3:96:68:2e:d4:b4:0f:d1:a3:47:c0:7f:ca:ca:0a:4b:
         93:5f:9b:7f:6b:32:ce:06:d9:00:f5:4e:6d:21:af:fd:e8:e7:
         79:26:83:93:7f:b7:c2:07:2d:b5:cf:ec:43:68:07:58:af:29:
         ba:a7:92:ca:3e:c9:d9:35:b2:f0:99:b0:91:98:64:ff:f5:9f:
         67:b0:17:e3:11:ef:58:da:11:ee:cb:bd:bc:c0:89:fb:b2:19:
         3e:88:f0:25:25:e1:b6:36:f6:fb:72:37:46:12:36:4a:0d:84:
         60:86:73:68:d6:dc:b9:ad:28:25:ab:e7:2d:b3:01:c0:9d:5d:
         ad:f3:66:1f:ad:4f:3a:dd:d6:33:fe:ed:aa:10:ce:e8:4a:80:
         6a:5b:76:6f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOVljWaJXtTdQtKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
NGQ4MGZmMjctMGI5Yi00ZGFjLWFhZGYtYzUxY2I0ZWFjOGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Hepgt7tIajO86+E+fehicZzMpf5JkDab1zt
UOHRinUC/Uwy++zhhh3E3oGo2bEcukUTLcH1EMGVwIT5p8Nl8hBPckS9b8xwvSR+
tQGPYnhz3q03Ibe+fQF+Vi2Pqg+Ju2U54HU+W6YwKoVPFvhxL8i0pPZsNthMjGsA
h9UxKqukFRZ2+sUgH95aRQQAQsczCN6+7W+i7Dg/0l7R9B2VW5CN+7PgbYnOk6cq
buI9V8jVGLDpoI7E+azGibfiLF0l49Vbv9pmrpYDuaiJL4L8dB9MUxyJKm3ZUO1y
7VmtCaE5Ez1Cww3GgP4vOR9weTx42wKvEswAt9PiIJKQ4IOWCQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJnllSz4+oD9KPIhxPY11K/J06vfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzdkYzJhYTEtY2I3My0z
MjExLTk3MjQtZTBjOTNmNThlMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQF1Q
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEgDPJeCmWfW/8MXbcrBtlF+uNFU3aqZpljkwnGD1VsgmiI8K7o+
l7iTVHb4iivbYT+1J/yFRPHyDSBhkQsLDsdYq/NUzy1cWqQnjYEb5SfWQtBPBg1V
JEs5zNfJf+MhB/HgWWkgdjyCOiKctJBgw5ZoLtS0D9GjR8B/ysoKS5Nfm39rMs4G
2QD1Tm0hr/3o53kmg5N/t8IHLbXP7ENoB1ivKbqnkso+ydk1svCZsJGYZP/1n2ew
F+MR71jaEe7LvbzAifuyGT6I8CUl4bY29vtyN0YSNkoNhGCGc2jW3LmtKCWr5y2z
AcCdXa3zZh+tTzrd1jP+7aoQzuhKgGpbdm8=
-----END CERTIFICATE-----