Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa
File:                     1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa (raw, json)
Hash identifier:          uI9W3xMXbT0k7xh6lJlrAh2y1hnS5uCMnd5yIi1DgvY=
Subject key identifier:   DE:82:0C:E8:C5:51:BA:06:95:C7:C9:B1:2E:6A:86:17:DB:2F:6B:75
Certificate issuer:       /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial:       010D0C9F43285848EC7449AF345090EEF1BED388
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa
Signing time:             Tue 18 Feb 2025 12:51:58 +0000
ROA not before:           Tue 18 Feb 2025 12:51:58 +0000
ROA not after:            Mon 19 May 2025 11:51:58 +0000
asID:                     14618
IP address blocks:        2604:ba80::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:74:49:af:34:50:90:ee:f1:be:d3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
        Validity
            Not Before: Feb 18 12:51:58 2025 GMT
            Not After : May 19 11:51:58 2025 GMT
        Subject: CN=9af96449-f422-41df-8aeb-bb4571aea886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:21:b9:f4:b2:1e:a6:88:a7:1d:68:88:98:44:
                    18:5e:c8:0d:54:d8:6e:89:08:64:b0:a4:5a:7a:9d:
                    39:fb:c1:78:80:f5:c3:cf:14:75:d2:5c:57:8b:1b:
                    8f:36:0b:38:c1:a1:f4:d5:c2:b9:13:32:1d:55:cd:
                    2f:e3:50:67:a4:59:21:0b:6d:ad:ca:81:58:84:19:
                    f7:74:e4:ce:63:a3:85:55:93:02:8f:4a:b6:24:eb:
                    a6:10:c2:ee:b9:a8:a8:58:ce:29:f8:fc:51:a7:ee:
                    83:73:d9:88:48:92:8a:1c:b1:a8:69:a8:69:8f:d7:
                    ad:49:f7:93:a6:d1:dc:ef:e7:26:35:32:47:bd:ac:
                    59:99:c3:6b:b5:9d:bb:bc:88:c3:b2:d9:03:7a:dc:
                    8e:91:14:2e:37:92:78:9c:fa:3b:97:b7:ba:16:aa:
                    79:08:db:be:12:03:a5:65:b6:20:db:4d:63:a7:6e:
                    0e:e8:5f:b9:18:ff:0b:4d:79:b6:b1:62:d4:ac:f7:
                    16:b0:3b:3e:45:59:08:c3:22:57:f8:df:78:fb:45:
                    88:67:5a:da:34:7c:1a:1a:eb:97:88:75:ce:2b:2a:
                    23:31:fa:92:5e:5f:db:28:d6:27:6d:0c:fd:25:9f:
                    f0:4f:40:64:a8:7e:f1:39:97:25:d3:90:73:92:6e:
                    ee:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:82:0C:E8:C5:51:BA:06:95:C7:C9:B1:2E:6A:86:17:DB:2F:6B:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl

            X509v3 Authority Key Identifier:
                keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ba80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b6:9f:f8:4b:9e:3e:de:6d:5a:90:6e:91:90:fc:e9:5f:1c:
         2a:35:0e:bc:de:fb:48:e6:40:96:f7:ad:55:1e:76:da:85:0a:
         ba:e0:87:22:ae:53:44:68:34:51:2a:8b:e9:5e:c9:2b:8d:16:
         19:bc:78:d8:2b:fa:4d:dd:05:67:bc:32:95:2c:26:25:16:fc:
         56:c0:b4:f2:fd:11:1d:8f:c2:1c:ad:82:46:e8:68:00:a3:04:
         f9:65:81:73:d1:d7:a6:50:7c:41:92:98:92:d2:ae:e9:14:3e:
         d7:44:0b:bf:31:3a:6b:80:43:1e:53:2f:a7:f7:1b:36:60:cb:
         ed:a9:f8:e2:2e:03:67:3d:ea:7a:9a:bc:07:83:92:b3:0b:c8:
         df:e0:72:20:d8:c2:13:09:d4:92:2d:98:30:1e:11:74:b2:2c:
         f4:64:ed:02:fe:6a:1c:1c:4b:48:a0:b5:1c:bb:08:56:a9:cf:
         b7:5b:ae:ff:b2:6e:ed:e3:2c:9d:51:d8:20:43:4e:29:be:94:
         31:c6:b0:b7:c4:cd:fb:0a:fe:9e:6f:f4:3b:91:cd:c7:d4:48:
         78:d5:e7:d5:fa:5f:d1:78:e3:6c:53:a4:9e:d5:31:9f:77:50:
         13:e6:a6:c3:34:d3:46:b9:b7:6b:45:6d:47:65:5b:dd:21:96:
         e8:96:e7:43
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjsdEmvNFCQ7vG+04gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2
ZDcyMB4XDTI1MDIxODEyNTE1OFoXDTI1MDUxOTExNTE1OFowLzEtMCsGA1UEAxMk
OWFmOTY0NDktZjQyMi00MWRmLThhZWItYmI0NTcxYWVhODg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCG59LIepoinHWiImEQYXsgNVNhuiQhksKRa
ep05+8F4gPXDzxR10lxXixuPNgs4waH01cK5EzIdVc0v41BnpFkhC22tyoFYhBn3
dOTOY6OFVZMCj0q2JOumEMLuuaioWM4p+PxRp+6Dc9mISJKKHLGoaahpj9etSfeT
ptHc7+cmNTJHvaxZmcNrtZ27vIjDstkDetyOkRQuN5J4nPo7l7e6Fqp5CNu+EgOl
ZbYg201jp24O6F+5GP8LTXm2sWLUrPcWsDs+RVkIwyJX+N94+0WIZ1raNHwaGuuX
iHXOKyojMfqSXl/bKNYnbQz9JZ/wT0BkqH7xOZcl05Bzkm7uyQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN6CDOjFUboGlcfJsS5qhhfbL2t1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5
MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvMWRiYjQzYWYtOTIwNi0z
YzFkLWIyOTItZjhkMjhjMWQ0ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz
MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw
NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5
MWE1MDZkNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgS6gAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHW2n/hLnj7ebVqQbpGQ/OlfHCo1Drze+0jmQJb3rVUedtqFCrrg
hyKuU0RoNFEqi+leySuNFhm8eNgr+k3dBWe8MpUsJiUW/FbAtPL9ER2Pwhytgkbo
aACjBPllgXPR16ZQfEGSmJLSrukUPtdEC78xOmuAQx5TL6f3GzZgy+2p+OIuA2c9
6nqavAeDkrMLyN/gciDYwhMJ1JItmDAeEXSyLPRk7QL+ahwcS0igtRy7CFapz7db
rv+ybu3jLJ1R2CBDTim+lDHGsLfEzfsK/p5v9DuRzcfUSHjV59X6X9F442xTpJ7V
MZ93UBPmpsM000a5t2tFbUdlW90hluiW50M=
-----END CERTIFICATE-----