Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/dc4a5d58-3571-3549-b66e-bc9038a5a256.roa
File:                     dc4a5d58-3571-3549-b66e-bc9038a5a256.roa (raw, json)
Hash identifier:          Z8mkLCkg3CWW7pdNsxAdS81oOQFmrHd1Bu9iYKuLOKA=
Subject key identifier:   B8:EC:5D:23:C9:33:D9:3B:F3:B1:3B:04:51:B2:40:6E:3A:C7:F2:16
Certificate issuer:       /CN=88e1646b-e1b3-42e7-8591-3a57fd436369
Certificate serial:       010D0C9F43285848A996298B3B76DFE32E81C400
Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/dc4a5d58-3571-3549-b66e-bc9038a5a256.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     6122
IP address blocks:        2610:130::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:29:8b:3b:76:df:e3:2e:81:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=a69a2332-e24b-440d-b515-d9917c844a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0a:54:be:7d:77:13:78:7d:c1:e2:c4:da:9e:
                    ea:22:99:54:49:00:3d:52:18:31:74:fe:d1:4a:e1:
                    76:a4:09:21:ce:88:50:f1:d9:ac:d6:25:3e:6a:db:
                    fd:cb:e5:5f:86:95:ef:dd:45:34:18:97:d0:41:7d:
                    e1:80:a1:30:3a:a7:09:41:f3:fa:98:a0:bc:9d:c1:
                    38:26:b9:bd:05:fa:e2:cc:a6:15:c5:21:70:bb:47:
                    51:db:08:44:81:93:e8:88:8e:64:d0:61:fd:f1:04:
                    17:0a:25:28:d8:39:b1:ab:c4:06:90:43:c2:9e:98:
                    5f:b4:f2:97:e1:41:48:f4:9f:b2:3a:28:1f:f7:77:
                    72:f7:78:21:65:72:42:d0:2d:16:d8:c4:c9:68:df:
                    1f:37:c9:9b:90:f7:5b:73:5f:5f:89:46:78:6a:6e:
                    94:55:75:70:8c:6e:1e:36:68:bc:c6:60:b7:0e:2e:
                    13:1a:fe:95:f4:9b:7c:29:52:58:dd:df:ec:48:63:
                    ac:14:90:24:12:d6:0d:8f:a8:43:69:88:d1:b0:ff:
                    60:b4:85:1d:05:fa:18:d7:fd:55:57:44:94:b6:5f:
                    3e:66:37:47:8a:09:d4:0c:20:dd:fe:e9:6e:2e:f4:
                    1e:28:98:54:9e:35:8f:42:32:cc:2a:0e:08:07:e1:
                    71:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EC:5D:23:C9:33:D9:3B:F3:B1:3B:04:51:B2:40:6E:3A:C7:F2:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/dc4a5d58-3571-3549-b66e-bc9038a5a256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl

            X509v3 Authority Key Identifier:
                keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:130::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:62:56:49:a2:c3:89:10:87:e9:4b:d2:fb:68:57:dd:02:42:
         b8:e8:11:e0:01:73:aa:56:99:c5:99:a7:1d:90:2f:5a:fa:eb:
         e0:f9:f1:a6:2b:23:7e:67:a3:f2:6a:4b:52:0e:4e:17:bb:fb:
         78:8b:93:dc:fb:85:37:c9:b1:cb:c2:0e:a6:e8:cb:22:a8:6a:
         ce:c1:fa:a2:27:1b:31:a6:12:ed:43:5f:8b:6f:ce:9e:c9:93:
         f8:37:1b:47:71:90:bb:63:f9:7d:75:de:82:ed:94:51:1f:4f:
         d7:67:36:98:51:cb:82:c3:90:6f:6f:8d:f8:e7:72:9f:46:2e:
         0d:9d:d0:57:3a:a1:6a:a9:1e:73:67:b3:a1:ad:37:57:ee:4b:
         e3:03:c0:2f:11:34:ba:84:fe:4c:47:1a:0d:78:5b:8b:ce:6b:
         2e:d3:e3:b2:65:19:6b:4f:76:8c:59:b4:53:b0:37:29:11:65:
         01:fa:4d:e7:a3:5b:2b:74:0e:4b:af:d3:da:12:5c:92:6c:6f:
         08:10:b6:57:d0:d1:95:26:c1:12:59:a2:c3:d1:6e:47:62:d4:
         88:ad:09:92:c6:c1:73:5c:88:75:6c:01:03:e0:2e:e3:a0:ac:
         f9:ba:fb:56:4b:96:a8:00:00:35:a6:fb:c7:16:a9:04:c8:94:
         d2:58:5e:4f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiplimLO3bf4y6BxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODhlMTY0NmItZTFiMy00MmU3LTg1OTEtM2E1N2ZkNDM2
MzY5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
YTY5YTIzMzItZTI0Yi00NDBkLWI1MTUtZDk5MTdjODQ0YTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQpUvn13E3h9weLE2p7qIplUSQA9UhgxdP7R
SuF2pAkhzohQ8dms1iU+atv9y+VfhpXv3UU0GJfQQX3hgKEwOqcJQfP6mKC8ncE4
Jrm9BfrizKYVxSFwu0dR2whEgZPoiI5k0GH98QQXCiUo2Dmxq8QGkEPCnphftPKX
4UFI9J+yOigf93dy93ghZXJC0C0W2MTJaN8fN8mbkPdbc19fiUZ4am6UVXVwjG4e
Nmi8xmC3Di4TGv6V9Jt8KVJY3d/sSGOsFJAkEtYNj6hDaYjRsP9gtIUdBfoY1/1V
V0SUtl8+ZjdHignUDCDd/uluLvQeKJhUnjWPQjLMKg4IB+FxcwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLjsXSPJM9k787E7BFGyQG46x/IWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUx
NjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3ZmQ0MzYzNjkvZGM0YTVkNTgtMzU3MS0z
NTQ5LWI2NmUtYmM5MDM4YTVhMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODhlMTY0NmItZTFiMy00MmU3LTg1
OTEtM2E1N2ZkNDM2MzY5Lzg4ZTE2NDZiLWUxYjMtNDJlNy04NTkxLTNhNTdmZDQz
NjM2OS5jcmwwHwYDVR0jBBgwFoAUukMjcrv3l+XytBPr7L8gMlwthZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUxNjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3
ZmQ0MzYzNjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJhABMDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBuYlZJosOJEIfpS9L7aFfdAkK46BHgAXOqVpnFmacdkC9a+uvg+fGm
KyN+Z6PyaktSDk4Xu/t4i5Pc+4U3ybHLwg6m6MsiqGrOwfqiJxsxphLtQ1+Lb86e
yZP4NxtHcZC7Y/l9dd6C7ZRRH0/XZzaYUcuCw5Bvb43453KfRi4NndBXOqFqqR5z
Z7OhrTdX7kvjA8AvETS6hP5MRxoNeFuLzmsu0+OyZRlrT3aMWbRTsDcpEWUB+k3n
o1srdA5Lr9PaElySbG8IELZX0NGVJsESWaLD0W5HYtSIrQmSxsFzXIh1bAED4C7j
oKz5uvtWS5aoAAA1pvvHFqkEyJTSWF5P
-----END CERTIFICATE-----