Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4ae2630-187f-3d2e-9d5a-1884ddec543f.roa
File:                     a4ae2630-187f-3d2e-9d5a-1884ddec543f.roa (raw, json)
Hash identifier:          vElRv+9KxZJoggf+acxU07dIY8CM/IDAFlpUr7RA/Gc=
Subject key identifier:   3B:4B:D6:41:0F:CA:F2:66:50:B2:FF:F2:25:8D:BC:3F:60:F3:FB:CE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848F22C74D9F41365720E773940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4ae2630-187f-3d2e-9d5a-1884ddec543f.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        2600:1419:a200::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:74:d9:f4:13:65:72:0e:77:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=2ceae6f9-d379-4cbf-8225-1126cce2f53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:04:0d:2a:1e:14:f5:d9:83:96:31:1b:98:4f:
                    f5:90:41:ab:03:86:36:e5:0e:17:e8:f6:4f:b3:01:
                    75:e0:51:f3:4a:78:3b:e2:1d:cf:56:2e:eb:a7:18:
                    d8:d5:ae:c4:af:45:71:48:29:a3:82:74:62:d7:98:
                    6c:08:3f:c8:60:33:fa:42:cc:4b:ff:66:40:e8:fd:
                    75:25:13:f5:68:63:8d:72:ce:d6:f2:c3:1d:c2:a3:
                    76:64:30:7a:99:9a:24:a7:10:49:2b:be:b6:a7:28:
                    95:ed:81:47:b2:fc:9d:55:6d:9f:19:9c:8b:73:e0:
                    2e:ca:bd:d9:dc:84:16:87:e6:7b:e9:50:a1:91:86:
                    03:43:3a:ba:d8:f7:25:fd:0e:a4:86:b7:9f:cb:4e:
                    c6:78:71:1b:ce:ee:6c:82:5a:9c:1e:71:4a:bf:32:
                    85:79:51:49:f8:79:07:9a:60:1e:a2:99:a2:76:f3:
                    24:3b:ce:fb:3f:82:7e:53:f0:0a:62:e1:cc:a3:9b:
                    70:6d:40:22:43:42:b8:72:93:d4:66:8e:32:55:9f:
                    84:71:0a:f2:36:4f:f5:57:32:0e:d3:c0:e0:f7:89:
                    88:bb:a5:58:ee:60:9f:ad:80:2c:57:24:7a:f5:b6:
                    5a:82:e1:fa:2b:48:f2:52:50:4e:05:0e:01:2a:7c:
                    2d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4B:D6:41:0F:CA:F2:66:50:B2:FF:F2:25:8D:BC:3F:60:F3:FB:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4ae2630-187f-3d2e-9d5a-1884ddec543f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1419:a200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e4:30:b3:a3:75:f2:77:fe:7b:3c:5f:90:5c:be:60:50:49:
         84:27:32:ca:f8:d7:70:f2:a3:85:f1:76:18:52:49:d0:ca:ed:
         26:e5:e4:26:d2:20:b0:39:34:1d:af:03:2e:43:5b:45:fd:51:
         36:f2:16:49:56:ea:be:7c:72:df:ee:32:3b:cc:04:8d:4a:b2:
         f1:3f:9b:ca:28:dc:ba:59:b4:b0:1f:b7:84:32:85:bf:73:2d:
         54:a7:ed:ce:59:82:6c:d0:4d:4d:74:81:26:00:89:37:ca:3d:
         29:ad:a8:8b:06:de:f6:54:5c:90:65:a4:2d:3a:ab:d5:ee:57:
         af:a4:33:dd:ee:94:58:2d:26:d3:9a:7f:82:55:49:bd:29:e3:
         b4:52:9d:0a:97:ac:a9:ef:48:7d:04:e3:88:ea:e3:70:1e:76:
         77:48:a5:6b:e2:69:70:66:6a:bd:d8:3b:f4:b7:1c:cf:08:75:
         72:7e:3a:8b:b7:b4:8d:2f:f2:7f:c2:c1:a5:c2:71:c8:f1:6d:
         d7:40:ff:01:35:55:00:a9:0b:a0:eb:37:7d:5c:b5:6c:91:00:
         dd:5a:c1:4a:65:2c:a9:9e:d5:83:7e:11:dd:ed:dc:55:1a:26:
         d7:d2:21:04:4b:35:1b:b2:c9:ad:b9:9c:75:a4:93:70:f6:35:
         ea:33:f7:cc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjyLHTZ9BNlcg53OUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
MmNlYWU2ZjktZDM3OS00Y2JmLTgyMjUtMTEyNmNjZTJmNTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQQNKh4U9dmDljEbmE/1kEGrA4Y25Q4X6PZP
swF14FHzSng74h3PVi7rpxjY1a7Er0VxSCmjgnRi15hsCD/IYDP6QsxL/2ZA6P11
JRP1aGONcs7W8sMdwqN2ZDB6mZokpxBJK762pyiV7YFHsvydVW2fGZyLc+Auyr3Z
3IQWh+Z76VChkYYDQzq62Pcl/Q6khrefy07GeHEbzu5sglqcHnFKvzKFeVFJ+HkH
mmAeopmidvMkO877P4J+U/AKYuHMo5twbUAiQ0K4cpPUZo4yVZ+EcQryNk/1VzIO
08Dg94mIu6VY7mCfrYAsVyR69bZaguH6K0jyUlBOBQ4BKnwtlQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDtL1kEPyvJmULL/8iWNvD9g8/vOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTRhZTI2MzAtMTg3Zi0z
ZDJlLTlkNWEtMTg4NGRkZWM1NDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGaIA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACHkMLOjdfJ3/ns8X5BcvmBQSYQnMsr413Dyo4XxdhhSSdDK7Sbl
5CbSILA5NB2vAy5DW0X9UTbyFklW6r58ct/uMjvMBI1KsvE/m8oo3LpZtLAft4Qy
hb9zLVSn7c5ZgmzQTU10gSYAiTfKPSmtqIsG3vZUXJBlpC06q9XuV6+kM93ulFgt
JtOaf4JVSb0p47RSnQqXrKnvSH0E44jq43AedndIpWviaXBmar3YO/S3HM8IdXJ+
Oou3tI0v8n/CwaXCccjxbddA/wE1VQCpC6DrN31ctWyRAN1awUplLKme1YN+Ed3t
3FUaJtfSIQRLNRuyya25nHWkk3D2Neoz98w=
-----END CERTIFICATE-----