Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/75058518-5623-3b42-9241-6d43694b921c.roa
File:                     75058518-5623-3b42-9241-6d43694b921c.roa (raw, json)
Hash identifier:          kLmZJkLpAkMUoeTUbR/AzVW0ORBrNzM2ff06C3MzMJs=
Subject key identifier:   3E:74:6A:05:9E:CB:F7:5A:43:E0:42:42:3F:78:1E:72:5F:6C:D0:A7
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F43285848D67B7C8CC595402CC582DF00
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/75058518-5623-3b42-9241-6d43694b921c.roa
Signing time:             Mon 10 Feb 2025 15:58:41 +0000
ROA not before:           Mon 10 Feb 2025 15:58:41 +0000
ROA not after:            Sun 11 May 2025 14:58:41 +0000
asID:                     22652
IP address blocks:        2607:fad8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:7b:7c:8c:c5:95:40:2c:c5:82:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Feb 10 15:58:41 2025 GMT
            Not After : May 11 14:58:41 2025 GMT
        Subject: CN=cbf069e3-b1db-45ec-a81b-d9c7e0f5b5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:83:eb:28:23:35:08:3a:f2:04:ff:85:a6:
                    b1:b9:1a:f8:f1:bc:e7:82:b9:89:54:3e:2a:cf:d5:
                    cb:88:e0:50:8f:8f:62:ce:1c:e1:91:85:bf:3a:4b:
                    11:28:a5:dc:73:4e:18:ef:87:44:b4:84:f0:42:3f:
                    7d:ef:1d:64:c5:46:fa:53:7c:4e:8a:5e:1d:3d:07:
                    9c:92:58:f0:ee:f8:25:14:d9:6a:15:f4:c6:7e:62:
                    96:16:6b:73:3c:8f:78:19:39:3f:31:af:b8:92:58:
                    a8:35:43:4c:66:f7:73:3f:f2:e4:c1:27:b7:46:ee:
                    3a:cf:2d:ba:b9:95:e6:49:38:f0:36:3e:bc:37:e3:
                    a1:91:28:62:f4:a1:da:2d:84:0c:bb:4f:ae:e8:b8:
                    e6:f8:e3:4e:6d:97:2c:6e:a2:8a:82:c2:f5:32:4b:
                    85:d2:44:ce:b1:70:5a:12:57:3c:96:a7:5c:f8:6c:
                    09:d1:64:f3:a7:e1:a9:f7:57:ae:3b:6f:ea:df:19:
                    3c:b2:cd:91:e1:ee:7e:ad:2f:ae:e2:54:3d:6f:c6:
                    3f:de:a9:ee:2b:37:f2:5c:cb:5f:ef:2a:0c:bd:f6:
                    40:8f:5c:ae:92:b9:ea:c2:e4:c5:58:d4:e9:80:28:
                    06:61:1b:31:73:a7:03:25:de:29:0a:11:59:db:21:
                    d5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:74:6A:05:9E:CB:F7:5A:43:E0:42:42:3F:78:1E:72:5F:6C:D0:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/75058518-5623-3b42-9241-6d43694b921c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fad8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:06:9a:3e:57:fb:36:6f:6d:a7:af:ee:7f:b1:2c:65:f3:56:
         8d:0f:b2:cd:af:68:ed:b4:89:bf:c6:3e:9f:f8:8e:a1:31:56:
         1e:42:2a:bf:db:b5:25:2b:d5:c6:86:5f:32:66:5d:57:9d:bb:
         6d:8e:72:2e:1b:70:ab:89:49:ea:79:db:97:7e:81:80:01:6a:
         b4:f7:b5:2e:f8:17:f3:f4:71:ff:d0:71:cb:50:6a:9b:8c:68:
         ba:c4:8c:2b:e9:5f:96:b2:35:c0:06:2e:3a:09:f9:ba:3c:0f:
         f7:7e:31:b9:49:39:13:d3:93:52:b8:bf:03:05:8a:4f:2f:c3:
         13:87:3e:1d:bd:3b:6f:62:53:1d:b3:4b:02:4b:e2:05:6f:7b:
         59:68:64:26:a1:5f:a0:46:e6:f5:a7:f4:7b:ca:5e:16:21:75:
         ff:02:63:17:0d:cc:c0:2c:d5:69:5a:61:f3:c5:e4:03:8c:57:
         f0:46:1f:18:13:d0:de:db:2e:f9:de:7d:24:ba:82:e1:61:d4:
         3f:5a:64:f9:ee:d7:b8:07:d4:31:25:00:3d:1c:79:79:de:f4:
         26:84:d9:f7:aa:2f:ff:60:8c:8c:e4:52:21:81:65:c4:70:ed:
         b1:4a:1b:ed:27:f7:fa:03:21:32:09:b6:b0:af:f2:21:9d:9f:
         ff:53:cf:3d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjWe3yMxZVALMWC3wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDIxMDE1NTg0MVoXDTI1MDUxMTE0NTg0MVowLzEtMCsGA1UEAxMk
Y2JmMDY5ZTMtYjFkYi00NWVjLWE4MWItZDljN2UwZjViNWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbuD6ygjNQg68gT/haaxuRr48bzngrmJVD4q
z9XLiOBQj49izhzhkYW/OksRKKXcc04Y74dEtITwQj997x1kxUb6U3xOil4dPQec
kljw7vglFNlqFfTGfmKWFmtzPI94GTk/Ma+4klioNUNMZvdzP/LkwSe3Ru46zy26
uZXmSTjwNj68N+OhkShi9KHaLYQMu0+u6Ljm+ONObZcsbqKKgsL1MkuF0kTOsXBa
Elc8lqdc+GwJ0WTzp+Gp91euO2/q3xk8ss2R4e5+rS+u4lQ9b8Y/3qnuKzfyXMtf
7yoMvfZAj1yukrnqwuTFWNTpgCgGYRsxc6cDJd4pChFZ2yHVrQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFD50agWey/daQ+BCQj94HnJfbNCnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNzUwNTg1MTgtNTYyMy0z
YjQyLTkyNDEtNmQ0MzY5NGI5MjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf62DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBzBpo+V/s2b22nr+5/sSxl81aND7LNr2jttIm/xj6f+I6hMVYeQiq/
27UlK9XGhl8yZl1XnbttjnIuG3CriUnqeduXfoGAAWq097Uu+Bfz9HH/0HHLUGqb
jGi6xIwr6V+WsjXABi46Cfm6PA/3fjG5STkT05NSuL8DBYpPL8MThz4dvTtvYlMd
s0sCS+IFb3tZaGQmoV+gRub1p/R7yl4WIXX/AmMXDczALNVpWmHzxeQDjFfwRh8Y
E9De2y753n0kuoLhYdQ/WmT57te4B9QxJQA9HHl53vQmhNn3qi//YIyM5FIhgWXE
cO2xShvtJ/f6AyEyCbawr/IhnZ//U889
-----END CERTIFICATE-----