Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/28ef451c-529a-3b07-b5b7-3615896ec10c.roa
File:                     28ef451c-529a-3b07-b5b7-3615896ec10c.roa (raw, json)
Hash identifier:          vQN6gWm0xId4nm7mE2XGevFjN8VA/+Wn53XrTp4J/LI=
Subject key identifier:   C1:CC:4E:ED:22:8C:5B:A3:33:C4:A8:56:0A:CF:55:70:45:60:37:9B
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F43285848E2D11A48273BB18DD562F200
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/28ef451c-529a-3b07-b5b7-3615896ec10c.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     19651
IP address blocks:        2602:f9ec:134::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:1a:48:27:3b:b1:8d:d5:62:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=0f2495d8-40a3-455a-b73d-2db18f89a3b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b2:89:13:83:d0:eb:6c:db:c5:e8:8b:2d:90:
                    bb:42:cd:ea:bf:80:67:2a:da:9a:b2:fc:3c:1f:25:
                    9d:24:de:68:92:14:be:e1:08:de:00:8f:9b:b9:f9:
                    94:cb:bc:34:06:3d:72:e5:8c:d3:97:2c:d0:ba:48:
                    38:a0:84:e2:69:91:7b:60:ca:a8:a9:f7:53:42:80:
                    c6:b0:9d:4e:60:48:e8:44:79:aa:12:2b:4d:6f:1d:
                    d7:06:4e:93:77:be:4c:ff:4f:a5:94:30:d2:ed:a9:
                    09:a1:ca:88:c7:1b:87:e0:7c:ef:39:ab:d6:bc:60:
                    4b:8d:f6:a3:a0:4b:2d:78:16:68:18:d1:58:3a:20:
                    05:98:1d:19:84:02:a4:8f:cc:57:c6:6a:36:13:9b:
                    66:6c:ba:19:7f:3a:36:17:67:e5:46:d8:07:ef:ca:
                    15:6e:d1:4e:aa:8f:de:8a:4a:0d:e5:e5:c8:79:ee:
                    2e:71:cd:be:bb:7e:7f:f5:2c:16:09:51:bd:08:e6:
                    f4:2f:55:5f:06:b1:83:d6:ee:3d:f2:52:45:c7:38:
                    55:52:34:f8:56:77:eb:12:1f:a5:8b:3b:2e:04:6f:
                    64:48:7a:1f:5b:5f:59:7c:d1:b5:5e:3c:8d:47:98:
                    48:6e:7c:79:e6:8a:fb:03:df:bb:8b:41:4c:21:04:
                    26:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CC:4E:ED:22:8C:5B:A3:33:C4:A8:56:0A:CF:55:70:45:60:37:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/28ef451c-529a-3b07-b5b7-3615896ec10c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ec:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:b8:d6:60:36:dd:e9:27:1f:32:35:d1:b0:d4:48:2c:b9:e8:
         fc:9a:e8:2f:a7:49:46:f7:52:c7:12:da:e6:a8:2a:87:81:22:
         84:5b:3a:d2:c9:62:e9:15:81:99:05:30:98:49:bd:0a:6d:4b:
         fc:e1:77:21:b6:8c:0a:81:11:62:da:2b:d4:d9:3d:6d:84:59:
         27:47:71:c0:45:d6:55:14:c1:00:a6:f6:4d:a5:07:9b:1d:4f:
         4a:0f:36:e9:a6:d1:92:8f:59:6e:5b:ae:1c:e9:a9:db:04:f8:
         0e:e5:e5:c2:d3:17:d6:d6:a2:1b:05:0f:35:16:2e:03:b0:6e:
         6a:0c:68:fd:60:6f:10:f2:d9:21:59:5b:e8:0c:50:d4:f1:3e:
         f8:1e:db:68:37:de:8a:f4:a7:46:27:0f:06:e8:2a:6d:1d:44:
         7b:50:70:e6:a4:8f:d0:3b:da:91:70:32:b1:73:bd:71:f0:1b:
         ec:c2:24:1f:f8:40:84:67:63:3e:91:c4:d8:d3:0c:d0:55:90:
         3e:aa:33:01:9e:be:84:7c:1f:f5:82:63:c4:5c:ed:64:02:4e:
         47:f8:99:30:62:68:ec:3e:a3:20:b7:33:1c:5b:0d:24:ca:63:
         01:2d:e4:71:f4:5d:41:55:f2:c0:67:ee:1d:3b:31:45:77:ed:
         da:98:14:00
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEji0RpIJzuxjdVi8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA3NTYxZmUtNGIwNC00MTdhLWI0MjMtMzQ5YjhiNGIw
NDdkMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MGYyNDk1ZDgtNDBhMy00NTVhLWI3M2QtMmRiMThmODlhM2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27KJE4PQ62zbxeiLLZC7Qs3qv4BnKtqasvw8
HyWdJN5okhS+4QjeAI+bufmUy7w0Bj1y5YzTlyzQukg4oITiaZF7YMqoqfdTQoDG
sJ1OYEjoRHmqEitNbx3XBk6Td75M/0+llDDS7akJocqIxxuH4HzvOavWvGBLjfaj
oEsteBZoGNFYOiAFmB0ZhAKkj8xXxmo2E5tmbLoZfzo2F2flRtgH78oVbtFOqo/e
ikoN5eXIee4ucc2+u35/9SwWCVG9COb0L1VfBrGD1u498lJFxzhVUjT4VnfrEh+l
izsuBG9kSHofW19ZfNG1XjyNR5hIbnx55or7A9+7i0FMIQQmvQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMHMTu0ijFujM8SoVgrPVXBFYDebMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1
NjFmZS00YjA0LTQxN2EtYjQyMy0zNDliOGI0YjA0N2QvMjhlZjQ1MWMtNTI5YS0z
YjA3LWI1YjctMzYxNTg5NmVjMTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDA3NTYxZmUtNGIwNC00MTdhLWI0
MjMtMzQ5YjhiNGIwNDdkLzAwNzU2MWZlLTRiMDQtNDE3YS1iNDIzLTM0OWI4YjRi
MDQ3ZC5jcmwwHwYDVR0jBBgwFoAUam3UldcOa/DEVubcc/Wc40Ocg3UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1NjFmZS00YjA0LTQxN2EtYjQyMy0zNDli
OGI0YjA0N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL57AE0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJq41mA23eknHzI10bDUSCy56Pya6C+nSUb3UscS2uaoKoeBIoRb
OtLJYukVgZkFMJhJvQptS/zhdyG2jAqBEWLaK9TZPW2EWSdHccBF1lUUwQCm9k2l
B5sdT0oPNumm0ZKPWW5brhzpqdsE+A7l5cLTF9bWohsFDzUWLgOwbmoMaP1gbxDy
2SFZW+gMUNTxPvge22g33or0p0YnDwboKm0dRHtQcOakj9A72pFwMrFzvXHwG+zC
JB/4QIRnYz6RxNjTDNBVkD6qMwGevoR8H/WCY8Rc7WQCTkf4mTBiaOw+oyC3Mxxb
DSTKYwEt5HH0XUFV8sBn7h07MUV37dqYFAA=
-----END CERTIFICATE-----