Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/8237230b-b2e4-3961-846b-fba6c8f1a7ae.roa
File:                     8237230b-b2e4-3961-846b-fba6c8f1a7ae.roa (raw, json)
Hash identifier:          Y5zmrpQ5cDShKEKlXeaELzCLk8uiD3A27Iky56zJPbY=
Subject key identifier:   00:27:B5:9A:93:FE:84:68:29:59:EC:9B:B1:4F:11:2D:67:6B:A1:33
Certificate issuer:       /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial:       010D0C9F432858492CB21318FCE617ED26C46F00
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/8237230b-b2e4-3961-846b-fba6c8f1a7ae.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     210630
IP address blocks:        2602:fc24:15::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:13:18:fc:e6:17:ed:26:c4:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=9b7b16e6-bc51-46d1-a0b7-53d4da805347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:ec:5a:d5:f8:ac:05:31:42:a0:88:93:a2:
                    59:cc:08:33:e8:ab:14:cc:61:dc:b4:87:52:6f:86:
                    06:4b:b6:7f:db:2c:58:06:8f:c2:e0:a3:4c:8f:2a:
                    9f:44:32:70:47:bf:4e:52:19:f9:69:a7:1b:89:06:
                    ab:95:5d:0c:d3:30:6a:31:c2:fa:98:a0:e2:c9:fd:
                    4c:72:c8:c0:15:25:33:0e:f4:58:d1:52:92:26:cd:
                    bf:26:06:38:ba:bf:97:b5:4b:f9:55:eb:99:d8:42:
                    a5:25:28:b8:d4:b4:2a:78:85:33:e5:d2:a1:9e:87:
                    c1:ec:e3:d8:b3:1d:df:44:57:69:cb:b4:1f:ac:06:
                    69:7d:ce:b9:16:5c:19:10:f7:36:ce:bd:ff:31:fc:
                    57:92:b2:3a:40:9a:bd:0e:f6:2a:44:4d:da:aa:f2:
                    81:65:db:02:53:79:dc:81:fa:b6:cd:4c:50:4e:cf:
                    05:18:26:3c:9d:45:70:b6:8d:cb:79:91:82:70:7d:
                    a9:d1:e9:4f:ab:b9:7f:c2:42:7a:6c:2e:99:c2:80:
                    94:ae:3c:dc:1f:51:62:4b:29:31:1d:f1:ee:f9:74:
                    3e:00:77:98:bd:6a:92:c9:2a:1e:30:2a:63:27:0a:
                    e9:e3:f9:f8:b8:32:9a:ef:62:5d:93:98:04:c1:37:
                    37:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:27:B5:9A:93:FE:84:68:29:59:EC:9B:B1:4F:11:2D:67:6B:A1:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/8237230b-b2e4-3961-846b-fba6c8f1a7ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl

            X509v3 Authority Key Identifier:
                keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc24:15::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:75:3d:d5:ac:18:6a:ce:53:71:3e:de:9c:ca:de:a2:1d:59:
         b3:d5:ab:78:e1:f1:c4:7e:9a:fc:f8:ac:9f:73:a1:93:11:83:
         48:0f:f5:e9:fb:0b:c4:f2:1f:06:ad:76:b2:7e:1e:a0:92:0b:
         bb:f0:5c:16:d9:74:0a:29:48:97:80:86:02:56:65:ef:bd:e9:
         de:ab:a9:5c:c3:67:c6:03:4a:4e:70:df:38:d5:9d:de:aa:d3:
         52:92:f4:e0:b0:fe:9b:0d:a9:06:ff:64:5d:3e:07:8f:e7:bd:
         f5:ec:0a:1e:04:39:c6:9b:67:04:33:ea:c3:9d:e0:3e:19:42:
         84:2d:90:fd:a0:52:b2:94:47:3d:45:f1:87:99:ee:1d:78:8c:
         bf:2d:c2:15:96:b7:96:c8:1f:c2:e0:db:fd:0f:4f:ef:f5:4d:
         12:8c:13:11:22:2d:ea:76:73:b2:f2:a5:33:20:5f:b0:30:a3:
         ac:3b:77:6e:1b:56:4a:9a:6c:f7:ba:ba:ed:86:fe:d3:eb:ce:
         54:8c:7a:ca:43:c1:27:da:e0:78:11:a0:5f:75:2a:b9:7d:3e:
         94:ef:9d:0a:d8:a3:45:7e:aa:63:01:9c:fb:e4:4c:00:64:1f:
         c0:14:49:d2:cd:20:56:85:1a:22:4e:88:81:ee:ba:2f:d8:8a:
         8d:80:ac:9f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEksshMY/OYX7SbEbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFlZWVhNjAtZTEyZS00NTcwLWEzMTAtY2FjNmY1MGMy
YmVmMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
OWI3YjE2ZTYtYmM1MS00NmQxLWEwYjctNTNkNGRhODA1MzQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+HsWtX4rAUxQqCIk6JZzAgz6KsUzGHctIdS
b4YGS7Z/2yxYBo/C4KNMjyqfRDJwR79OUhn5aacbiQarlV0M0zBqMcL6mKDiyf1M
csjAFSUzDvRY0VKSJs2/JgY4ur+XtUv5VeuZ2EKlJSi41LQqeIUz5dKhnofB7OPY
sx3fRFdpy7QfrAZpfc65FlwZEPc2zr3/MfxXkrI6QJq9DvYqRE3aqvKBZdsCU3nc
gfq2zUxQTs8FGCY8nUVwto3LeZGCcH2p0elPq7l/wkJ6bC6ZwoCUrjzcH1FiSykx
HfHu+XQ+AHeYvWqSySoeMCpjJwrp4/n4uDKa72Jdk5gEwTc3EwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAAntZqT/oRoKVnsm7FPES1na6EzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80YWVl
ZWE2MC1lMTJlLTQ1NzAtYTMxMC1jYWM2ZjUwYzJiZWYvODIzNzIzMGItYjJlNC0z
OTYxLTg0NmItZmJhNmM4ZjFhN2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGFlZWVhNjAtZTEyZS00NTcwLWEz
MTAtY2FjNmY1MGMyYmVmLzRhZWVlYTYwLWUxMmUtNDU3MC1hMzEwLWNhYzZmNTBj
MmJlZi5jcmwwHwYDVR0jBBgwFoAUpJDk1gjBX1VkEHVwfcHmpS1DnY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80YWVlZWE2MC1lMTJlLTQ1NzAtYTMxMC1jYWM2
ZjUwYzJiZWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8JAAV
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACZ1PdWsGGrOU3E+3pzK3qIdWbPVq3jh8cR+mvz4rJ9zoZMRg0gP
9en7C8TyHwatdrJ+HqCSC7vwXBbZdAopSJeAhgJWZe+96d6rqVzDZ8YDSk5w3zjV
nd6q01KS9OCw/psNqQb/ZF0+B4/nvfXsCh4EOcabZwQz6sOd4D4ZQoQtkP2gUrKU
Rz1F8YeZ7h14jL8twhWWt5bIH8Lg2/0PT+/1TRKMExEiLep2c7LypTMgX7Awo6w7
d24bVkqabPe6uu2G/tPrzlSMespDwSfa4HgRoF91Krl9PpTvnQrYo0V+qmMBnPvk
TABkH8AUSdLNIFaFGiJOiIHuui/Yio2ArJ8=
-----END CERTIFICATE-----