Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/2e34a07c-b74c-3aa4-ab19-a5965764e773.roa
File:                     2e34a07c-b74c-3aa4-ab19-a5965764e773.roa (raw, json)
Hash identifier:          a/CiymtDjiYDHWekojA/AN0Q0a9ULDoqZRs/jHe8x7U=
Subject key identifier:   95:6C:21:4D:95:5C:8E:3F:A6:55:CD:B0:16:65:FC:9F:28:07:B3:CC
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F4328584949FE91C0337BD37FCEDB2180
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/2e34a07c-b74c-3aa4-ab19-a5965764e773.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     393885
IP address blocks:        2604:4a00:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:91:c0:33:7b:d3:7f:ce:db:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=18e64e0d-ae83-4cf6-81c2-35193cc2b17a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:da:4b:48:2d:2e:dd:25:51:35:3c:65:a3:
                    d9:bf:86:1a:40:1a:bb:dc:70:d6:f9:7d:2e:2b:fb:
                    cd:33:6d:59:96:b8:4e:0f:42:17:df:39:dd:f9:aa:
                    4b:2b:d0:ed:e7:ce:a4:ca:95:a9:46:f9:35:db:a9:
                    8f:ec:51:4f:ab:60:60:a0:d0:5e:bf:84:da:bf:b3:
                    69:f4:67:ba:79:14:3f:ab:4a:a7:6f:8c:6f:bd:fb:
                    54:6d:71:21:af:b9:22:0d:46:5a:72:05:1b:6d:89:
                    b9:43:1d:2c:1a:6c:34:2e:48:27:af:13:da:74:f2:
                    c3:fa:79:33:58:90:e4:09:eb:c0:a8:d8:25:f2:f8:
                    e0:39:14:a7:7c:da:44:c0:9d:bf:a9:1e:3c:10:16:
                    61:d5:2d:a4:20:a2:33:fe:cc:5b:a8:10:df:56:22:
                    df:16:3c:e2:23:0c:77:34:d4:de:1f:c2:0d:5a:e5:
                    78:15:3c:ca:43:da:b9:2f:65:8e:65:96:6e:6c:51:
                    74:08:65:9a:1a:17:14:02:71:1d:91:14:0b:e7:4a:
                    dc:6d:52:d5:35:c2:94:f1:c9:26:b7:96:6c:fd:04:
                    85:46:de:35:8a:72:2a:53:16:27:b6:b0:68:83:dc:
                    29:9f:0e:8c:38:f3:80:30:4f:fd:e5:c7:2b:74:13:
                    0a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6C:21:4D:95:5C:8E:3F:A6:55:CD:B0:16:65:FC:9F:28:07:B3:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/2e34a07c-b74c-3aa4-ab19-a5965764e773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:6e:e3:d6:20:01:81:cc:ac:4c:89:c5:77:c3:fb:4b:74:94:
         9f:23:ab:06:af:fb:bb:57:f0:8c:97:80:a8:b8:bf:3f:5f:03:
         f2:61:eb:a4:56:58:1d:a6:79:21:9f:61:14:69:25:c9:b9:25:
         6f:8f:ba:dd:a6:ab:55:61:ac:40:5b:c3:d1:18:f9:6b:32:81:
         0e:21:f7:92:55:a6:68:1d:b1:da:49:c0:97:2c:0f:b3:c0:02:
         c7:b3:85:50:83:8d:e8:32:3b:09:e1:0a:a3:af:04:af:c8:16:
         af:be:ff:11:10:37:26:e9:64:f0:f9:df:09:4a:b6:b0:e0:ee:
         c9:9e:0a:43:e3:32:0e:c2:fa:53:7a:58:78:4e:98:ae:01:53:
         bd:40:c6:0e:4c:43:0c:79:2c:a8:15:9b:cd:26:80:6b:cf:92:
         53:bf:f1:06:b7:d3:f2:cb:f7:cd:a1:26:65:16:80:b2:a3:59:
         f0:8e:6a:3e:02:97:76:da:f4:88:8f:bb:5b:98:fa:cf:9a:76:
         68:cc:b7:77:a7:1b:2f:23:92:36:a2:40:8f:66:fd:ae:6e:7a:
         ca:b3:3e:b5:9f:a6:2c:3e:19:26:12:48:5c:c7:2d:b7:51:96:
         4b:e7:bb:e6:bf:60:b0:0b:41:21:01:d2:de:94:92:48:11:25:
         d3:a2:53:1f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElJ/pHAM3vTf87bIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk
NjZkMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk
MThlNjRlMGQtYWU4My00Y2Y2LTgxYzItMzUxOTNjYzJiMTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOPaS0gtLt0lUTU8ZaPZv4YaQBq73HDW+X0u
K/vNM21ZlrhOD0IX3znd+apLK9Dt586kypWpRvk126mP7FFPq2BgoNBev4Tav7Np
9Ge6eRQ/q0qnb4xvvftUbXEhr7kiDUZacgUbbYm5Qx0sGmw0LkgnrxPadPLD+nkz
WJDkCevAqNgl8vjgORSnfNpEwJ2/qR48EBZh1S2kIKIz/sxbqBDfViLfFjziIwx3
NNTeH8INWuV4FTzKQ9q5L2WOZZZubFF0CGWaGhcUAnEdkRQL50rcbVLVNcKU8ckm
t5Zs/QSFRt41inIqUxYntrBog9wpnw6MOPOAME/95ccrdBMKnQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJVsIU2VXI4/plXNsBZl/J8oB7PMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk
ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvMmUzNGEwN2MtYjc0Yy0z
YWE0LWFiMTktYTU5NjU3NjRlNzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl
ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1
ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh
M2UzNWQ2NmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRKAEAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZ27j1iABgcysTInFd8P7S3SUnyOrBq/7u1fwjJeAqLi/P18D8mHr
pFZYHaZ5IZ9hFGklybklb4+63aarVWGsQFvD0Rj5azKBDiH3klWmaB2x2knAlywP
s8ACx7OFUION6DI7CeEKo68Er8gWr77/ERA3Julk8PnfCUq2sODuyZ4KQ+MyDsL6
U3pYeE6YrgFTvUDGDkxDDHksqBWbzSaAa8+SU7/xBrfT8sv3zaEmZRaAsqNZ8I5q
PgKXdtr0iI+7W5j6z5p2aMy3d6cbLyOSNqJAj2b9rm56yrM+tZ+mLD4ZJhJIXMct
t1GWS+e75r9gsAtBIQHS3pSSSBEl06JTHw==
-----END CERTIFICATE-----