Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/890a156a-1cd0-3d65-8f2f-b53830af891f.roa
File:                     890a156a-1cd0-3d65-8f2f-b53830af891f.roa (raw, json)
Hash identifier:          j1IdcbJO3335wMzAdtQb+EbRM1tlUXX/XP27mRpMMqk=
Subject key identifier:   74:FE:54:9C:3A:38:FA:63:F9:9A:77:E5:63:7C:63:B6:41:F5:A3:2A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848B1F624ADA4D676607E334B00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/890a156a-1cd0-3d65-8f2f-b53830af891f.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     7861
IP address blocks:        2001:56b:e::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:24:ad:a4:d6:76:60:7e:33:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=783f9463-a365-4289-8ed7-ea913fd9efa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ae:94:ae:34:09:52:b8:92:19:3a:df:8d:87:
                    75:5f:a7:e7:f1:39:99:6a:c7:9d:fb:4f:61:da:c3:
                    7b:98:e5:ee:02:ce:ce:8f:29:2d:f2:a8:ec:cf:f9:
                    62:99:12:a2:27:dd:e9:20:b2:1e:ea:db:72:d9:43:
                    cb:ae:b4:b8:b0:42:9f:cf:36:b6:6f:be:33:60:48:
                    43:be:c2:5e:33:c2:b1:9b:52:0b:71:0b:fc:05:e4:
                    f7:fc:16:b8:ee:96:75:02:d0:7b:e5:54:32:62:7a:
                    36:3b:84:6a:48:af:37:bf:3d:37:96:60:46:df:fe:
                    ec:17:df:7f:12:6c:a2:d6:ad:44:61:36:7e:43:bf:
                    0d:1f:92:5c:8f:a0:03:c7:4c:32:72:ad:a7:c6:08:
                    de:b6:9d:e7:5e:c6:2a:2c:78:7d:a5:7d:c9:2f:c4:
                    af:2b:10:36:2e:cb:64:84:ba:d6:96:d6:bd:6c:e8:
                    a0:13:27:2b:af:ce:04:f8:d5:1b:b3:c0:92:89:30:
                    1e:d0:e0:2b:b4:fa:d0:45:2f:93:4a:64:61:3c:df:
                    c1:c2:04:db:db:23:56:f2:3a:10:ab:47:14:52:22:
                    b5:dc:2c:8e:85:b0:b0:63:7f:41:4b:11:2e:6b:b5:
                    71:61:79:42:f5:e6:a5:dd:66:b1:34:09:db:28:db:
                    08:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FE:54:9C:3A:38:FA:63:F9:9A:77:E5:63:7C:63:B6:41:F5:A3:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/890a156a-1cd0-3d65-8f2f-b53830af891f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:fa:d7:95:84:84:45:ff:f1:98:5b:6e:3f:d9:f0:83:61:04:
         40:d5:ff:20:c3:51:c3:94:fc:3b:32:2f:6b:79:70:3f:8a:10:
         91:5a:28:37:6c:dd:8a:ac:48:e0:2d:4a:e0:61:6f:a3:28:11:
         ae:11:4c:71:6d:48:9b:f7:7b:6a:3c:12:b6:7d:4b:c9:98:3e:
         48:a8:27:a6:e2:4f:8c:7f:b0:4c:5f:fb:3a:8d:2c:de:88:6e:
         88:4c:59:fb:65:70:45:a4:28:6c:93:56:6d:12:cd:b9:ab:4a:
         33:46:30:2a:75:7a:09:db:53:1b:67:39:93:e6:5e:bc:af:df:
         8a:07:7d:1a:2e:7a:3b:de:9a:da:9f:b5:cf:1b:c1:77:bf:3e:
         5d:c5:bd:51:d4:71:a5:4d:d6:30:3c:76:f6:c0:c7:91:a0:d1:
         40:ac:3e:0b:1e:10:da:4d:bc:d6:ca:36:ed:30:e8:ab:d5:44:
         24:25:7f:63:fa:b5:ce:60:58:88:f4:c0:e9:9b:4f:c7:c3:2d:
         97:62:35:04:2f:c5:71:0e:28:55:e4:e6:ce:1e:f4:69:d7:56:
         c0:e2:3c:99:b4:ca:7e:38:b3:a2:2b:62:cd:91:15:4e:66:c0:
         3d:ae:b7:1c:d3:32:f5:8d:72:f8:83:f0:c2:bd:0d:8e:01:a0:
         fc:bd:60:8e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEix9iStpNZ2YH4zSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
NzgzZjk0NjMtYTM2NS00Mjg5LThlZDctZWE5MTNmZDllZmE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK6UrjQJUriSGTrfjYd1X6fn8TmZased+09h
2sN7mOXuAs7Ojykt8qjsz/limRKiJ93pILIe6tty2UPLrrS4sEKfzza2b74zYEhD
vsJeM8Kxm1ILcQv8BeT3/Ba47pZ1AtB75VQyYno2O4RqSK83vz03lmBG3/7sF99/
Emyi1q1EYTZ+Q78NH5Jcj6ADx0wycq2nxgjetp3nXsYqLHh9pX3JL8SvKxA2Lstk
hLrWlta9bOigEycrr84E+NUbs8CSiTAe0OArtPrQRS+TSmRhPN/BwgTb2yNW8joQ
q0cUUiK13CyOhbCwY39BSxEua7VxYXlC9eal3WaxNAnbKNsIBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHT+VJw6OPpj+Zp35WN8Y7ZB9aMqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODkwYTE1NmEtMWNkMC0z
ZDY1LThmMmYtYjUzODMwYWY4OTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFawAO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACH615WEhEX/8Zhbbj/Z8INhBEDV/yDDUcOU/DsyL2t5cD+KEJFa
KDds3YqsSOAtSuBhb6MoEa4RTHFtSJv3e2o8ErZ9S8mYPkioJ6biT4x/sExf+zqN
LN6IbohMWftlcEWkKGyTVm0SzbmrSjNGMCp1egnbUxtnOZPmXryv34oHfRouejve
mtqftc8bwXe/Pl3FvVHUcaVN1jA8dvbAx5Gg0UCsPgseENpNvNbKNu0w6KvVRCQl
f2P6tc5gWIj0wOmbT8fDLZdiNQQvxXEOKFXk5s4e9GnXVsDiPJm0yn44s6IrYs2R
FU5mwD2utxzTMvWNcviD8MK9DY4BoPy9YI4=
-----END CERTIFICATE-----