Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/1d098801-c2ca-3653-bfa6-32076275a1ca.roa
File:                     1d098801-c2ca-3653-bfa6-32076275a1ca.roa (raw, json)
Hash identifier:          bNCY1xpMWV4n8OkH/Vo+vTJKIJWc9o6ZbAd3sfF9udE=
Subject key identifier:   2B:AD:BA:3A:FB:3D:4B:17:B6:10:35:5C:64:99:E6:A6:69:85:1E:F2
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584930DE7739F60B85035F353900
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/1d098801-c2ca-3653-bfa6-32076275a1ca.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     397913
IP address blocks:        2607:2240:b000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:77:39:f6:0b:85:03:5f:35:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=795bbf7c-cc96-426f-8dac-f110d88748c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b5:17:85:6f:d3:4a:82:ef:c3:86:d4:0e:db:
                    e2:d9:35:58:aa:bc:2c:da:ac:05:b8:57:6d:e5:4b:
                    1f:1d:20:8d:7f:c1:73:2b:ad:18:85:e6:c3:52:35:
                    24:1d:fd:b8:39:b2:38:44:4f:c1:d0:8b:d2:6a:ce:
                    a2:04:0a:35:0d:46:9c:61:fb:d5:a5:b7:99:55:52:
                    ce:45:f7:97:52:ae:7c:6f:e1:12:a5:e9:d6:3f:57:
                    1f:00:ca:56:be:0d:45:59:d5:4a:3a:86:ca:c3:f7:
                    ff:a0:ad:b1:c2:76:f9:88:37:c9:ab:5e:d5:11:e8:
                    7c:87:f8:0c:09:b8:38:7a:43:f8:bc:da:22:b6:61:
                    13:5c:c5:56:46:5f:ee:16:7b:d0:1f:81:d7:ed:2d:
                    31:46:9b:6d:87:32:f9:63:e0:b8:41:8c:4a:69:1c:
                    78:56:f5:ea:9e:4c:2b:a8:19:a8:5f:3e:ed:5d:11:
                    98:c5:99:d3:4c:c1:8c:74:88:1b:7c:6c:e8:5d:a9:
                    7f:0d:7e:fd:dc:ea:eb:9f:7f:9b:7c:a2:3a:9f:c2:
                    16:a5:4c:a7:3c:32:ae:0b:7d:d6:67:22:d3:43:97:
                    c6:b6:c0:82:ef:07:81:c8:ba:75:b2:f4:af:5a:5e:
                    47:05:95:6e:1d:e9:5b:ee:3d:0c:19:c3:eb:fe:c9:
                    f0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AD:BA:3A:FB:3D:4B:17:B6:10:35:5C:64:99:E6:A6:69:85:1E:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/1d098801-c2ca-3653-bfa6-32076275a1ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:b000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:2b:6e:44:20:f9:07:e2:da:b4:1f:85:e9:97:b7:18:13:5f:
         5d:c8:1f:84:94:ce:9f:7a:0b:c2:e7:cd:8e:92:b9:ba:92:47:
         b5:73:40:3e:9e:ca:33:c7:4a:68:e5:2f:c3:07:b9:a1:46:1c:
         ed:dd:d2:f3:b1:6a:38:c7:b6:36:f5:7f:b7:6f:59:b2:7f:61:
         2b:1e:a3:46:3e:68:04:40:de:93:ae:3a:b7:08:39:39:c4:88:
         93:32:72:7d:e2:6f:06:9b:11:e0:5f:62:ab:f7:b6:90:39:25:
         31:bb:77:f5:e1:52:4a:b1:be:18:56:75:78:ca:ce:87:54:fc:
         b6:0d:b5:f4:cd:0b:87:17:ef:04:1f:44:a4:20:62:84:6a:b1:
         e9:ba:1e:e9:66:0f:db:96:0d:0f:aa:8b:e5:2b:93:5f:27:02:
         f5:ba:e5:5a:f0:55:fc:e7:5e:38:50:e6:ef:e9:e8:c9:3c:69:
         c6:7d:d2:a9:c8:12:03:d4:f9:c3:7a:82:7c:b8:2c:6f:ca:26:
         b2:da:61:b0:6f:aa:f0:ae:da:1a:45:b0:f9:ea:aa:85:d6:75:
         7f:b9:25:37:14:d6:d8:b3:03:11:fe:e8:a8:44:12:9f:87:fb:
         1b:fb:49:b6:cb:34:52:f2:78:d0:30:54:5a:8b:e2:74:28:4f:
         36:66:5a:04
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkw3nc59guFA181OQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTNjYWE5ZmUtZDA4MS00ZTE4LWFkNjYtNDk5YTkyMDk5
NDVlMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk
Nzk1YmJmN2MtY2M5Ni00MjZmLThkYWMtZjExMGQ4ODc0OGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrUXhW/TSoLvw4bUDtvi2TVYqrws2qwFuFdt
5UsfHSCNf8FzK60YhebDUjUkHf24ObI4RE/B0IvSas6iBAo1DUacYfvVpbeZVVLO
RfeXUq58b+ESpenWP1cfAMpWvg1FWdVKOobKw/f/oK2xwnb5iDfJq17VEeh8h/gM
Cbg4ekP4vNoitmETXMVWRl/uFnvQH4HX7S0xRptthzL5Y+C4QYxKaRx4VvXqnkwr
qBmoXz7tXRGYxZnTTMGMdIgbfGzoXal/DX793Orrn3+bfKI6n8IWpUynPDKuC33W
ZyLTQ5fGtsCC7weByLp1svSvWl5HBZVuHelb7j0MGcPr/snw/wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCutujr7PUsXthA1XGSZ5qZphR7yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85M2Nh
YTlmZS1kMDgxLTRlMTgtYWQ2Ni00OTlhOTIwOTk0NWUvMWQwOTg4MDEtYzJjYS0z
NjUzLWJmYTYtMzIwNzYyNzVhMWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTNjYWE5ZmUtZDA4MS00ZTE4LWFk
NjYtNDk5YTkyMDk5NDVlLzkzY2FhOWZlLWQwODEtNGUxOC1hZDY2LTQ5OWE5MjA5
OTQ1ZS5jcmwwHwYDVR0jBBgwFoAUNK7eDz6RKTe1CzdmL3JPv2I8+6swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85M2NhYTlmZS1kMDgxLTRlMTgtYWQ2Ni00OTlh
OTIwOTk0NWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgciQLAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAfCtuRCD5B+LatB+F6Ze3GBNfXcgfhJTOn3oLwufNjpK5upJHtXNA
Pp7KM8dKaOUvwwe5oUYc7d3S87FqOMe2NvV/t29Zsn9hKx6jRj5oBEDek646twg5
OcSIkzJyfeJvBpsR4F9iq/e2kDklMbt39eFSSrG+GFZ1eMrOh1T8tg219M0Lhxfv
BB9EpCBihGqx6boe6WYP25YND6qL5SuTXycC9brlWvBV/OdeOFDm7+noyTxpxn3S
qcgSA9T5w3qCfLgsb8omstphsG+q8K7aGkWw+eqqhdZ1f7klNxTW2LMDEf7oqEQS
n4f7G/tJtss0UvJ40DBUWovidChPNmZaBA==
-----END CERTIFICATE-----