Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1d677695-9a44-3278-8ccf-c38cf7f592a3.roa
File:                     1d677695-9a44-3278-8ccf-c38cf7f592a3.roa (raw, json)
Hash identifier:          uNYaFaBhF3wiNgsFcqd1Ni9jScGagRy+yur5FFbwjqQ=
Subject key identifier:   06:E1:B0:68:B1:46:F3:86:EB:5E:12:59:11:35:53:3A:A6:FB:FB:62
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584A00DAC86AA7393E320AC67080
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1d677695-9a44-3278-8ccf-c38cf7f592a3.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6461
IP address blocks:        162.253.136.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c8:6a:a7:39:3e:32:0a:c6:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=ddc117bb-99a4-457d-b688-899fbe2200b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:05:e8:ee:db:87:a6:21:06:ec:5d:af:2a:58:
                    36:ef:2b:3c:86:54:11:28:a9:3b:09:b7:3e:d7:61:
                    ff:9e:eb:cd:93:63:10:4e:64:ad:68:11:86:ba:fd:
                    d0:f3:a3:7d:91:33:8d:f0:3f:7e:7f:e4:28:27:b7:
                    92:20:10:28:03:8e:f0:9d:ae:0a:98:37:38:63:78:
                    3c:c1:ba:76:9a:7d:80:f7:5a:0d:26:6b:22:1b:b9:
                    77:26:bc:fe:3a:4d:54:7e:9e:1d:b9:54:45:a3:1d:
                    cb:3f:a3:1e:a0:37:df:47:d7:23:3b:35:17:bc:fe:
                    7b:2e:dd:a4:51:67:ee:b0:11:39:e8:dc:59:71:6c:
                    c6:84:f5:70:94:99:18:11:bc:7b:4a:17:f8:e3:f8:
                    18:58:53:83:f6:35:02:4c:14:59:45:2e:24:d5:10:
                    46:f1:0e:03:6f:ba:bb:00:56:37:78:bf:7f:df:20:
                    9e:d2:7d:b5:68:9a:82:cf:42:9a:ad:75:f9:02:f1:
                    b4:4d:42:f9:7f:ff:5b:96:bb:7f:49:23:b7:ab:a2:
                    d4:f0:01:b0:1e:a4:06:b8:07:ea:8c:39:5e:12:55:
                    85:16:69:dd:3b:08:6a:b1:42:30:70:ac:12:37:4d:
                    65:4e:11:5c:62:2e:2b:03:72:5d:ff:1c:32:1c:e8:
                    b5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E1:B0:68:B1:46:F3:86:EB:5E:12:59:11:35:53:3A:A6:FB:FB:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1d677695-9a44-3278-8ccf-c38cf7f592a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:fd:9c:58:e8:3a:5d:c7:95:e9:6d:49:c8:b1:d1:7f:33:49:
         f7:f7:35:f4:84:30:82:64:df:c4:c7:5d:0b:34:83:67:4d:ae:
         22:55:61:f5:09:9c:ab:e2:39:30:75:18:17:ae:61:e9:bf:70:
         90:13:eb:29:f8:57:bf:11:44:2f:34:69:e7:97:44:a7:3a:ab:
         ee:af:4e:f6:bb:41:5b:78:e4:86:f0:80:85:c7:4f:aa:ab:93:
         96:22:81:0d:42:46:12:20:1b:30:4f:1a:c6:ef:06:17:59:e9:
         98:1a:05:42:45:5c:b6:09:31:44:eb:7e:70:58:7d:45:17:a5:
         54:12:4c:ed:35:31:a3:76:a5:c5:07:6e:28:b5:18:81:d3:01:
         79:c0:6c:5d:4e:e0:cf:7a:08:34:cb:b9:06:e9:fc:77:3e:8c:
         11:97:9a:6d:65:81:2e:15:4b:8d:fb:8e:3a:e5:1d:87:d5:19:
         51:04:a1:7a:98:78:a5:2c:b9:db:76:b2:da:b3:da:02:e7:99:
         7e:11:b1:ce:72:2c:b9:61:99:fe:b8:c2:44:45:cb:e6:d2:e3:
         2a:5b:00:4c:fa:c1:94:60:65:95:17:fb:d2:30:52:83:f2:16:
         50:bd:62:33:e2:79:e6:d8:c6:f7:67:bc:56:06:3f:77:e0:3c:
         0c:35:c7:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2shqpzk+MgrGcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
ZGRjMTE3YmItOTlhNC00NTdkLWI2ODgtODk5ZmJlMjIwMGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQXo7tuHpiEG7F2vKlg27ys8hlQRKKk7Cbc+
12H/nuvNk2MQTmStaBGGuv3Q86N9kTON8D9+f+QoJ7eSIBAoA47wna4KmDc4Y3g8
wbp2mn2A91oNJmsiG7l3Jrz+Ok1Ufp4duVRFox3LP6MeoDffR9cjOzUXvP57Lt2k
UWfusBE56NxZcWzGhPVwlJkYEbx7Shf44/gYWFOD9jUCTBRZRS4k1RBG8Q4Db7q7
AFY3eL9/3yCe0n21aJqCz0KarXX5AvG0TUL5f/9blrt/SSO3q6LU8AGwHqQGuAfq
jDleElWFFmndOwhqsUIwcKwSN01lThFcYi4rA3Jd/xwyHOi1CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAbhsGixRvOG614SWRE1Uzqm+/tiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMWQ2Nzc2OTUtOWE0NC0z
Mjc4LThjY2YtYzM4Y2Y3ZjU5MmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDov2IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABX9nFjoOl3HleltScix0X8zSff3NfSEMIJk38THXQs0g2dNriJVYfUJ
nKviOTB1GBeuYem/cJAT6yn4V78RRC80aeeXRKc6q+6vTva7QVt45IbwgIXHT6qr
k5YigQ1CRhIgGzBPGsbvBhdZ6ZgaBUJFXLYJMUTrfnBYfUUXpVQSTO01MaN2pcUH
bii1GIHTAXnAbF1O4M96CDTLuQbp/Hc+jBGXmm1lgS4VS437jjrlHYfVGVEEoXqY
eKUsudt2stqz2gLnmX4Rsc5yLLlhmf64wkRFy+bS4ypbAEz6wZRgZZUX+9IwUoPy
FlC9YjPieebYxvdnvFYGP3fgPAw1x8s=
-----END CERTIFICATE-----