Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/c36c57f6-3744-3d5b-ac9e-940ad4f1395e.roa
File:                     c36c57f6-3744-3d5b-ac9e-940ad4f1395e.roa (raw, json)
Hash identifier:          ycGnKaeBhATwa+Yt7lYWOCmkbmrVEoV1SayyPIy39NA=
Subject key identifier:   69:7A:54:AB:BD:6D:70:D6:EF:39:F1:90:8A:81:63:AA:C0:99:D9:3E
Certificate issuer:       /CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
Certificate serial:       010D0C9F4328584908815B67795E4373E81BA3B0
Authority key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/c36c57f6-3744-3d5b-ac9e-940ad4f1395e.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2602:80a:2002::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:5b:67:79:5e:43:73:e8:1b:a3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=e0f80e48-2bdb-4334-af73-ebed8c09cae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5d:00:0b:02:5b:d7:6f:64:1d:3a:34:df:16:
                    f5:9f:f6:b0:df:f0:0e:34:89:f0:0e:19:d4:49:e7:
                    dd:4c:e1:91:0e:b0:12:b4:f7:42:a3:3f:6d:61:53:
                    17:79:51:34:5b:3e:72:10:c1:ac:fb:0b:83:d5:3a:
                    aa:3f:83:90:37:84:2c:e3:ac:7d:98:9e:48:26:f7:
                    32:6b:75:0c:fc:96:f8:7b:5b:36:58:5e:91:ee:74:
                    9e:5f:38:f2:77:76:87:dc:bd:22:ed:31:27:76:62:
                    60:d2:6f:ba:9e:e6:f4:73:96:1f:ac:a8:24:de:38:
                    dc:1d:ba:30:6e:a1:92:85:63:12:4c:bb:ee:b7:39:
                    a4:2e:a7:c4:ac:0b:27:99:e7:e1:de:70:dd:76:d2:
                    a5:62:d6:84:03:dc:f1:ae:3c:6f:1b:50:4c:44:64:
                    39:d4:47:c2:34:26:1b:b0:85:ff:c7:7c:bf:bd:8d:
                    55:19:a8:05:db:1a:c5:ce:4b:e1:c1:6b:7b:44:a8:
                    04:98:1d:55:c3:03:f8:fc:48:fc:87:67:e9:f7:4e:
                    8b:6c:a1:1c:f6:8e:29:70:51:5d:23:07:5b:78:df:
                    15:f7:89:c1:4c:74:bb:8e:e4:29:6f:be:ff:c1:58:
                    99:84:2a:19:30:20:a1:ab:e0:82:92:33:50:ab:e7:
                    31:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7A:54:AB:BD:6D:70:D6:EF:39:F1:90:8A:81:63:AA:C0:99:D9:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/c36c57f6-3744-3d5b-ac9e-940ad4f1395e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl

            X509v3 Authority Key Identifier:
                keyid:17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:2002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b2:25:2c:6e:bb:1d:0c:6a:d8:66:e5:9d:b7:20:19:e9:cc:
         d3:1a:36:22:85:eb:43:56:49:08:77:43:07:2b:9c:5d:74:05:
         db:23:ff:16:5a:52:07:db:af:3d:23:90:7d:2f:e9:1f:39:e1:
         02:78:a6:f8:5a:35:e9:d2:dd:3b:a2:b2:82:4d:21:95:6b:63:
         6c:40:d0:f1:46:f3:e4:64:f4:8d:98:0a:66:78:48:b5:e9:a1:
         99:5d:70:ec:a8:de:61:5f:e7:3e:b3:66:74:6b:6d:3e:88:17:
         cd:62:47:2a:ca:35:aa:72:84:9b:30:e8:db:d3:02:86:87:88:
         e2:17:c8:72:45:9a:3b:19:f0:df:ac:78:8f:26:16:7f:55:7e:
         5c:96:e3:a0:e7:f6:99:5d:cb:38:5c:1b:07:b6:4d:96:42:19:
         c7:58:d6:1c:4b:15:e6:23:f2:54:43:da:a3:9c:81:02:38:77:
         18:82:35:32:73:40:2c:02:b9:39:28:13:9c:14:ca:2c:a3:47:
         ec:41:43:06:24:f5:16:2f:8a:1b:d9:2b:f8:cb:8a:0a:32:07:
         c4:99:9e:d6:f1:51:3d:62:4a:b7:23:eb:16:31:67:de:f4:36:
         22:a8:9b:28:2c:e9:51:f7:c5:41:06:21:9e:7b:55:22:42:e5:
         12:58:70:53
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkIgVtneV5Dc+gbo7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTkxOGVlNTYtMzQzYy00MGRjLWIwMWQtZmI1ZWZkNTFl
MjZhMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTBmODBlNDgtMmJkYi00MzM0LWFmNzMtZWJlZDhjMDljYWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml0ACwJb129kHTo03xb1n/aw3/AONInwDhnU
SefdTOGRDrAStPdCoz9tYVMXeVE0Wz5yEMGs+wuD1TqqP4OQN4Qs46x9mJ5IJvcy
a3UM/Jb4e1s2WF6R7nSeXzjyd3aH3L0i7TEndmJg0m+6nub0c5YfrKgk3jjcHbow
bqGShWMSTLvutzmkLqfErAsnmefh3nDddtKlYtaEA9zxrjxvG1BMRGQ51EfCNCYb
sIX/x3y/vY1VGagF2xrFzkvhwWt7RKgEmB1VwwP4/Ej8h2fp906LbKEc9o4pcFFd
IwdbeN8V94nBTHS7juQpb77/wViZhCoZMCChq+CCkjNQq+cxVQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGl6VKu9bXDW7znxkIqBY6rAmdk+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xOTE4
ZWU1Ni0zNDNjLTQwZGMtYjAxZC1mYjVlZmQ1MWUyNmEvYzM2YzU3ZjYtMzc0NC0z
ZDViLWFjOWUtOTQwYWQ0ZjEzOTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTkxOGVlNTYtMzQzYy00MGRjLWIw
MWQtZmI1ZWZkNTFlMjZhLzE5MThlZTU2LTM0M2MtNDBkYy1iMDFkLWZiNWVmZDUx
ZTI2YS5jcmwwHwYDVR0jBBgwFoAUFzlJxoOm8qM5Fg81AM2BgXVrf+MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xOTE4ZWU1Ni0zNDNjLTQwZGMtYjAxZC1mYjVl
ZmQ1MWUyNmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIICiAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACOyJSxuux0Mathm5Z23IBnpzNMaNiKF60NWSQh3QwcrnF10Bdsj
/xZaUgfbrz0jkH0v6R854QJ4pvhaNenS3TuisoJNIZVrY2xA0PFG8+Rk9I2YCmZ4
SLXpoZldcOyo3mFf5z6zZnRrbT6IF81iRyrKNapyhJsw6NvTAoaHiOIXyHJFmjsZ
8N+seI8mFn9VflyW46Dn9pldyzhcGwe2TZZCGcdY1hxLFeYj8lRD2qOcgQI4dxiC
NTJzQCwCuTkoE5wUyiyjR+xBQwYk9RYvihvZK/jLigoyB8SZntbxUT1iSrcj6xYx
Z970NiKomygs6VH3xUEGIZ57VSJC5RJYcFM=
-----END CERTIFICATE-----