Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5636f4bd-70ef-3a93-9aa4-be6bd3855be9.roa
File:                     5636f4bd-70ef-3a93-9aa4-be6bd3855be9.roa (raw, json)
Hash identifier:          xfRPx0gQzskwDLTgrcLHVybOaHCQ9EHq1BeKqJcG9Y0=
Subject key identifier:   BD:65:9F:EE:E7:5E:89:AB:14:82:4C:C1:A5:64:AB:91:16:12:63:1E
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285848F7C144A7ED824879754D4600
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5636f4bd-70ef-3a93-9aa4-be6bd3855be9.roa
Signing time:             Sat 22 Feb 2025 14:00:52 +0000
ROA not before:           Sat 22 Feb 2025 14:00:52 +0000
ROA not after:            Fri 23 May 2025 13:00:52 +0000
asID:                     216321
IP address blocks:        2605:dd40::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f7:c1:44:a7:ed:82:48:79:75:4d:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Feb 22 14:00:52 2025 GMT
            Not After : May 23 13:00:52 2025 GMT
        Subject: CN=863ba37a-1e3d-48e9-a0fe-395012d1baee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:16:e2:75:08:90:12:dd:7e:48:62:45:44:3e:
                    87:3e:1a:9d:66:1d:17:2a:f4:7f:6d:85:ee:9a:be:
                    f5:30:39:a9:5d:d3:be:04:66:3f:09:93:db:b8:36:
                    e2:b1:5d:40:5c:5b:2e:53:72:10:d6:42:25:96:ee:
                    14:81:15:b4:74:21:14:d6:a9:51:90:85:e9:22:25:
                    c4:0a:25:08:45:70:23:b2:c1:61:37:01:37:85:51:
                    e2:f4:27:56:e3:96:08:4d:87:59:b6:86:7f:56:2c:
                    d5:16:15:2d:69:73:52:77:87:95:67:a2:15:8b:df:
                    d9:57:39:4a:e7:08:58:da:48:40:14:9f:04:ad:3e:
                    26:06:84:23:8f:a5:f4:b0:29:53:4b:25:b3:dc:06:
                    d4:21:6a:0f:10:e4:9f:65:fc:b9:e5:6f:59:18:ae:
                    dc:e0:c1:ba:a5:be:8f:d2:51:63:39:17:1b:2f:a4:
                    e5:c7:25:0e:73:5a:21:70:e5:b9:1e:6d:92:78:12:
                    e4:fa:58:28:f9:f6:82:c8:78:64:f3:67:a1:a4:81:
                    4c:60:56:b3:e5:0c:f1:14:2f:60:fc:bf:3d:78:81:
                    a6:38:55:af:8c:ae:2f:a5:4c:49:f6:df:32:1f:80:
                    ca:34:85:ac:46:c2:ac:ad:bd:ae:bc:ce:21:7b:1e:
                    07:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:65:9F:EE:E7:5E:89:AB:14:82:4C:C1:A5:64:AB:91:16:12:63:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5636f4bd-70ef-3a93-9aa4-be6bd3855be9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:46:61:84:63:07:25:3e:f6:71:b1:19:69:bd:62:ee:15:36:
         d3:87:4a:5d:d8:06:45:8b:44:b2:3d:81:ef:ae:ea:b0:70:25:
         bb:5c:d9:46:81:80:7e:08:1e:7f:7b:61:85:0b:82:1b:a1:60:
         0c:95:41:00:de:c4:27:7d:7b:63:b5:ec:cf:c9:91:e9:3b:6d:
         da:ac:6d:a5:e5:52:f7:90:71:27:d3:a6:0a:c9:36:c0:11:1b:
         39:ff:1d:0a:1e:66:0a:01:f4:0d:cc:75:1e:7e:11:37:47:59:
         ac:4a:07:71:67:60:44:e1:70:31:9d:d2:37:da:87:01:d1:d0:
         11:25:19:ae:98:b4:e4:53:e5:76:6d:b9:ec:0e:46:9a:1e:06:
         3b:bc:29:bb:33:2c:84:3b:bc:f0:ec:a9:61:d1:eb:25:49:1e:
         0f:df:ab:13:77:5b:4e:c5:a9:f0:30:e9:d3:16:a5:a4:f7:46:
         c9:5e:fc:c3:a3:a1:84:d8:97:54:1f:d4:2c:2f:35:70:ce:9c:
         26:25:e4:5b:f3:d2:73:0f:31:7a:62:a9:92:28:09:9a:5c:49:
         2a:32:52:29:ab:57:8b:e4:5b:4b:a6:a9:24:97:e9:8e:b9:e8:
         9c:07:95:55:04:4a:5b:ab:f7:3b:cb:f7:87:9a:95:7c:b1:ea:
         17:ef:9a:5c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEj3wUSn7YJIeXVNRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4
OTc3MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk
ODYzYmEzN2EtMWUzZC00OGU5LWEwZmUtMzk1MDEyZDFiYWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhbidQiQEt1+SGJFRD6HPhqdZh0XKvR/bYXu
mr71MDmpXdO+BGY/CZPbuDbisV1AXFsuU3IQ1kIllu4UgRW0dCEU1qlRkIXpIiXE
CiUIRXAjssFhNwE3hVHi9CdW45YITYdZtoZ/VizVFhUtaXNSd4eVZ6IVi9/ZVzlK
5whY2khAFJ8ErT4mBoQjj6X0sClTSyWz3AbUIWoPEOSfZfy55W9ZGK7c4MG6pb6P
0lFjORcbL6TlxyUOc1ohcOW5Hm2SeBLk+lgo+faCyHhk82ehpIFMYFaz5QzxFC9g
/L89eIGmOFWvjK4vpUxJ9t8yH4DKNIWsRsKsrb2uvM4hex4HHQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFL1ln+7nXomrFIJMwaVkq5EWEmMeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl
ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvNTYzNmY0YmQtNzBlZi0z
YTkzLTlhYTQtYmU2YmQzODU1YmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj
NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4
ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy
ZDVjODg5NzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXdQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC2RmGEYwclPvZxsRlpvWLuFTbTh0pd2AZFi0SyPYHvruqwcCW7XNlG
gYB+CB5/e2GFC4IboWAMlUEA3sQnfXtjtezPyZHpO23arG2l5VL3kHEn06YKyTbA
ERs5/x0KHmYKAfQNzHUefhE3R1msSgdxZ2BE4XAxndI32ocB0dARJRmumLTkU+V2
bbnsDkaaHgY7vCm7MyyEO7zw7Klh0eslSR4P36sTd1tOxanwMOnTFqWk90bJXvzD
o6GE2JdUH9QsLzVwzpwmJeRb89JzDzF6YqmSKAmaXEkqMlIpq1eL5FtLpqkkl+mO
ueicB5VVBEpbq/c7y/eHmpV8seoX75pc
-----END CERTIFICATE-----