Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/b29d47c1-1362-3bba-aee8-054302b4d174.roa
File:                     b29d47c1-1362-3bba-aee8-054302b4d174.roa (raw, json)
Hash identifier:          rxWxXHKqvobhgQPhLZbMTn/jYsubQgzs1kRh60bvghc=
Subject key identifier:   4A:18:5C:F4:B5:0C:8F:A7:22:A3:0F:3F:97:16:EA:2B:66:75:EE:A2
Certificate issuer:       /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
Certificate serial:       010D0C9F432858493DE7A551D9A13D1782634EC0
Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/b29d47c1-1362-3bba-aee8-054302b4d174.roa
Signing time:             Wed 19 Mar 2025 17:04:52 +0000
ROA not before:           Wed 19 Mar 2025 17:04:52 +0000
ROA not after:            Tue 17 Jun 2025 17:04:52 +0000
asID:                     395250
IP address blocks:        2620:197:d4::/46 maxlen: 48
                          2620:197:d8::/45 maxlen: 48
                          2620:197:e0::/45 maxlen: 48
                          2620:197:e8::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3d:e7:a5:51:d9:a1:3d:17:82:63:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
        Validity
            Not Before: Mar 19 17:04:52 2025 GMT
            Not After : Jun 17 17:04:52 2025 GMT
        Subject: CN=fa30caaa-7ef8-4bc2-9480-57f6b1c8d95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:67:c8:09:02:b6:a0:6a:2e:e5:22:49:ea:83:
                    52:f1:3d:6a:b4:8c:db:cf:66:11:4d:6c:94:e9:f8:
                    02:5b:91:1e:f3:5c:f2:53:a8:24:b5:21:16:10:11:
                    96:dd:d4:1f:20:03:f9:18:6a:b3:46:5d:23:4c:b1:
                    b9:2b:b7:ca:da:3c:48:b0:27:86:c9:f4:24:29:c5:
                    bd:e2:70:4b:04:b3:60:75:56:ef:cd:68:d0:f6:a8:
                    19:ef:19:78:6a:a2:02:51:a1:8b:a9:77:3e:26:08:
                    0f:7a:00:42:e7:36:d1:dc:19:fd:45:0c:a3:95:5b:
                    f6:b7:8f:78:58:78:1c:a3:61:f1:52:ba:bd:71:6d:
                    51:f1:96:c3:97:fa:7c:88:17:51:13:38:fa:d4:bd:
                    fc:49:81:da:02:0b:a0:f1:4a:72:a0:72:dc:08:75:
                    51:49:df:15:c6:44:00:52:c3:5a:cf:90:94:34:9c:
                    6c:ae:0d:b1:2f:52:30:f9:ce:c6:9c:ff:10:4b:0f:
                    85:c5:9f:29:f4:7b:3e:97:e2:4e:8c:5f:6a:72:7e:
                    de:e8:52:e6:83:85:d4:b3:27:62:cd:e9:38:f3:30:
                    b8:cf:ad:c8:0f:7c:8f:a8:c9:a2:5a:42:f0:65:3e:
                    5a:9b:12:e0:78:78:16:2b:b7:6c:1f:c8:86:83:e0:
                    27:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:18:5C:F4:B5:0C:8F:A7:22:A3:0F:3F:97:16:EA:2B:66:75:EE:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/b29d47c1-1362-3bba-aee8-054302b4d174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl

            X509v3 Authority Key Identifier:
                keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:197:d4::-2620:197:eb:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:65:68:a3:1e:b9:7b:74:79:59:15:18:4d:b6:2a:9c:77:f6:
         93:37:6c:05:65:8c:3b:46:08:f4:8e:04:69:76:12:ec:79:a5:
         5a:95:69:64:34:54:bf:0d:29:e7:aa:85:13:35:a5:0c:3a:e0:
         77:0e:70:a7:2a:a8:8b:f1:d3:11:f2:2f:8b:fa:e3:2d:ef:cf:
         1c:2c:cd:ae:e0:04:9b:18:30:ed:33:43:79:83:61:dc:b7:4c:
         8b:58:3e:eb:7e:d2:b8:aa:b5:db:e6:d9:37:77:ca:e5:59:0b:
         f4:42:71:30:23:92:44:8f:42:50:86:83:51:30:b2:47:15:ff:
         83:cd:41:19:9b:e2:af:86:d0:ba:f5:5b:68:71:2b:59:9c:d2:
         50:b7:20:41:98:3f:78:4d:05:3e:fe:bd:5f:60:80:61:28:51:
         4d:01:42:bd:4e:09:0d:96:37:76:85:e3:79:df:01:55:96:f2:
         19:70:46:07:f4:e2:37:7b:16:28:a2:0d:f7:a4:4f:85:70:81:
         6c:19:66:ab:8d:20:1c:c1:81:61:a2:a5:02:d7:de:64:79:66:
         a6:67:1f:ab:6e:7a:dd:92:69:22:a1:07:1c:26:4b:a7:3d:4c:
         b9:5b:1c:0a:23:2e:7b:52:40:95:7a:93:af:41:49:54:ab:ad:
         04:64:0a:07
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEk956VR2aE9F4JjTsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGUwOGRlYjctZGI0ZC00Mjk4LWJmZTctOGRmMDBkYjQ4
ZGMzMB4XDTI1MDMxOTE3MDQ1MloXDTI1MDYxNzE3MDQ1MlowLzEtMCsGA1UEAxMk
ZmEzMGNhYWEtN2VmOC00YmMyLTk0ODAtNTdmNmIxYzhkOTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2fICQK2oGou5SJJ6oNS8T1qtIzbz2YRTWyU
6fgCW5Ee81zyU6gktSEWEBGW3dQfIAP5GGqzRl0jTLG5K7fK2jxIsCeGyfQkKcW9
4nBLBLNgdVbvzWjQ9qgZ7xl4aqICUaGLqXc+JggPegBC5zbR3Bn9RQyjlVv2t494
WHgco2HxUrq9cW1R8ZbDl/p8iBdREzj61L38SYHaAgug8UpyoHLcCHVRSd8VxkQA
UsNaz5CUNJxsrg2xL1Iw+c7GnP8QSw+FxZ8p9Hs+l+JOjF9qcn7e6FLmg4XUsydi
zek48zC4z63ID3yPqMmiWkLwZT5amxLgeHgWK7dsH8iGg+An8QIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFEoYXPS1DI+nIqMPP5cW6itmde6iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4
ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYwMGRiNDhkYzMvYjI5ZDQ3YzEtMTM2Mi0z
YmJhLWFlZTgtMDU0MzAyYjRkMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGUwOGRlYjctZGI0ZC00Mjk4LWJm
ZTctOGRmMDBkYjQ4ZGMzLzBlMDhkZWI3LWRiNGQtNDI5OC1iZmU3LThkZjAwZGI0
OGRjMy5jcmwwHwYDVR0jBBgwFoAUdSngLCKfGo0AceySsjUCLmJZMEowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYw
MGRiNDhkYzMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwImIAGX
ANQDBwImIAGXAOgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAGmVoox65e3R5WRUYTbYqnHf2kzdsBWWMO0YI
9I4EaXYS7HmlWpVpZDRUvw0p56qFEzWlDDrgdw5wpyqoi/HTEfIvi/rjLe/PHCzN
ruAEmxgw7TNDeYNh3LdMi1g+637SuKq12+bZN3fK5VkL9EJxMCOSRI9CUIaDUTCy
RxX/g81BGZvir4bQuvVbaHErWZzSULcgQZg/eE0FPv69X2CAYShRTQFCvU4JDZY3
doXjed8BVZbyGXBGB/TiN3sWKKIN96RPhXCBbBlmq40gHMGBYaKlAtfeZHlmpmcf
q2563ZJpIqEHHCZLpz1MuVscCiMue1JAlXqTr0FJVKutBGQKBw==
-----END CERTIFICATE-----