Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0055344-4770-30cb-b19b-2013092eadc5.roa
File:                     d0055344-4770-30cb-b19b-2013092eadc5.roa (raw, json)
Hash identifier:          ZelqjP9NhaYN3Xx3CNy6HLxKhjJw8LhbCd7KAVienMA=
Subject key identifier:   15:C8:D0:B6:99:1E:69:3A:E2:B9:A0:5C:D0:6A:76:87:7C:13:40:EE
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285848F65BEAFB78A9A510EF1CD600
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0055344-4770-30cb-b19b-2013092eadc5.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     30633
IP address blocks:        2607:f5b5::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:ea:fb:78:a9:a5:10:ef:1c:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=6e060a27-660a-4f93-a1d5-78d64a12a430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1d:f6:e3:52:7b:3c:e6:9a:1d:78:83:a4:0d:
                    3c:a6:bd:fd:7a:86:f7:1c:5e:58:6e:7d:1e:24:31:
                    ec:e3:fc:dc:3c:6d:76:fa:cf:a6:23:56:c0:66:13:
                    11:cc:da:a5:64:6e:7c:d7:d4:d8:b6:cc:ab:7a:a0:
                    c5:1b:f8:fb:58:78:b1:11:26:92:aa:f2:2a:70:4e:
                    bd:80:60:8b:15:54:e8:71:85:ed:49:41:6d:f1:75:
                    12:11:7a:d3:12:1b:ea:b4:8a:22:04:70:4b:6a:c3:
                    d1:22:3b:59:a4:59:5c:c4:0e:57:e4:96:af:91:b0:
                    73:32:67:f0:e6:b5:6a:b8:05:b2:4e:a9:e1:fe:e0:
                    00:f3:68:48:a9:07:1e:3f:2b:49:15:8d:bc:05:1c:
                    26:74:41:0c:f7:7e:f3:a3:b6:fc:90:72:56:7c:ef:
                    5b:76:21:b5:7b:43:7b:ac:12:1e:51:d1:c2:5b:ca:
                    b0:cc:2d:2d:a2:ac:8e:5f:8a:44:b8:fa:88:b5:78:
                    46:c2:86:a1:4f:97:f9:4e:62:da:c6:0b:8c:99:e9:
                    36:a5:12:84:5b:ec:8a:6a:54:8a:e1:ba:68:05:77:
                    54:1e:1d:80:bd:66:ff:3b:64:4f:d9:b6:87:04:b9:
                    9e:47:28:9f:ae:c1:d5:a7:09:46:a5:33:7b:64:c7:
                    8b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C8:D0:B6:99:1E:69:3A:E2:B9:A0:5C:D0:6A:76:87:7C:13:40:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0055344-4770-30cb-b19b-2013092eadc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:65:e7:ca:f6:fb:cd:31:25:93:a8:54:21:1f:36:b9:32:e6:
         f1:9d:1f:0d:19:f2:1c:98:54:27:96:8e:0b:7f:78:b3:a1:47:
         79:bb:f0:23:87:db:f6:cc:a9:4e:74:ab:e3:8e:5b:de:91:a4:
         04:54:80:01:18:75:7c:93:9e:3e:e8:d4:0a:c9:2d:0e:a6:b8:
         b6:08:7d:ce:fe:7b:b8:c2:73:64:f3:ba:ee:e7:85:6c:55:27:
         c1:bc:2d:01:a8:67:48:0a:e3:c9:b2:18:be:3c:da:9d:c1:1c:
         02:14:1c:25:93:95:a7:c7:fe:02:24:4d:b8:30:c8:1c:f4:e2:
         0f:06:32:17:69:ed:c7:c9:6e:7b:ce:ed:ce:02:2b:78:b8:74:
         21:66:d4:0f:dc:13:a8:c9:b0:44:b8:1b:71:68:d2:48:3e:be:
         b7:69:3b:c0:2e:e2:60:c6:43:a6:6b:02:c0:74:19:9d:e3:f5:
         5a:ee:d1:3a:79:97:f1:e3:1e:31:e5:d7:43:73:aa:b3:c8:2d:
         10:02:98:c0:7f:f3:19:2c:cd:15:8e:84:3c:11:eb:23:62:d9:
         b8:23:70:92:25:e2:5c:10:98:69:4e:4e:45:c8:fe:d2:a9:b8:
         83:a2:ae:c2:22:b3:97:b1:79:39:e4:6f:3e:3e:2a:ba:b2:7e:
         93:5a:c1:4b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj2W+r7eKmlEO8c1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
NmUwNjBhMjctNjYwYS00ZjkzLWExZDUtNzhkNjRhMTJhNDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB3241J7POaaHXiDpA08pr39eob3HF5Ybn0e
JDHs4/zcPG12+s+mI1bAZhMRzNqlZG5819TYtsyreqDFG/j7WHixESaSqvIqcE69
gGCLFVTocYXtSUFt8XUSEXrTEhvqtIoiBHBLasPRIjtZpFlcxA5X5JavkbBzMmfw
5rVquAWyTqnh/uAA82hIqQcePytJFY28BRwmdEEM937zo7b8kHJWfO9bdiG1e0N7
rBIeUdHCW8qwzC0toqyOX4pEuPqItXhGwoahT5f5TmLaxguMmek2pRKEW+yKalSK
4bpoBXdUHh2AvWb/O2RP2baHBLmeRyifrsHVpwlGpTN7ZMeLjwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBXI0LaZHmk64rmgXNBqdod8E0DuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDAwNTUzNDQtNDc3MC0z
MGNiLWIxOWItMjAxMzA5MmVhZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALhl58r2+80xJZOoVCEfNrky5vGdHw0Z8hyYVCeWjgt/eLOhR3m7
8COH2/bMqU50q+OOW96RpARUgAEYdXyTnj7o1ArJLQ6muLYIfc7+e7jCc2Tzuu7n
hWxVJ8G8LQGoZ0gK48myGL482p3BHAIUHCWTlafH/gIkTbgwyBz04g8GMhdp7cfJ
bnvO7c4CK3i4dCFm1A/cE6jJsES4G3Fo0kg+vrdpO8Au4mDGQ6ZrAsB0GZ3j9Vru
0Tp5l/HjHjHl10NzqrPILRACmMB/8xkszRWOhDwR6yNi2bgjcJIl4lwQmGlOTkXI
/tKpuIOirsIis5exeTnkbz4+KrqyfpNawUs=
-----END CERTIFICATE-----