Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cda76f99-8e41-34c9-91b0-2ad6b208ce8c.roa
File:                     cda76f99-8e41-34c9-91b0-2ad6b208ce8c.roa (raw, json)
Hash identifier:          K/eTdU3Gmz6DpFWRAY3tMRDjAbPXA5DNig1j/2j6duo=
Subject key identifier:   C5:7D:99:07:8F:8C:FA:54:C8:2A:A1:FA:74:F2:AF:10:94:FE:88:12
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A136293D89A688EDBB1CE640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cda76f99-8e41-34c9-91b0-2ad6b208ce8c.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        2600:141c:3800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:29:3d:89:a6:88:ed:bb:1c:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=b000fe75-a7c2-4ae6-8c90-eae2a95748cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bd:64:b6:4a:2b:3f:58:03:68:a9:e3:67:cc:
                    e9:81:2d:d0:8b:62:ff:6f:35:17:75:82:17:77:6d:
                    6f:9a:e2:f4:29:b4:68:9d:80:d4:97:c1:0a:9d:d7:
                    b1:bc:70:27:9c:03:8b:de:ae:9c:c1:34:22:ca:74:
                    c1:2a:a6:fa:6f:c4:16:c2:ac:66:43:ad:a9:9e:2f:
                    57:1b:f3:8a:5a:b7:40:91:4d:00:40:36:f9:2d:5e:
                    c5:32:b5:64:49:53:e7:05:79:5a:a2:b2:c6:f9:cb:
                    70:39:0b:db:9e:50:6e:30:60:e9:4e:ea:92:f9:a9:
                    12:a8:10:38:1e:6a:54:53:d5:51:84:b3:29:7a:f5:
                    9c:e0:0d:d4:17:b1:44:47:d4:26:65:4c:b7:4c:fc:
                    0c:65:64:74:32:e0:15:43:b7:cf:ec:fc:b3:05:2a:
                    3d:be:97:1b:27:1f:24:b2:88:14:e9:b6:a0:68:73:
                    09:28:c3:b0:dd:4a:4f:1e:a4:d4:25:29:76:87:b9:
                    bc:27:d3:31:5e:2f:aa:2f:d2:83:3e:11:bb:ef:0f:
                    b5:a3:ae:b7:54:6a:93:83:cc:fa:bf:62:e6:62:b6:
                    78:91:82:ae:2c:cf:2a:2e:b0:37:cf:54:dc:fa:30:
                    61:db:05:e0:2c:54:4f:b1:a7:7b:e4:8e:da:d7:da:
                    2e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7D:99:07:8F:8C:FA:54:C8:2A:A1:FA:74:F2:AF:10:94:FE:88:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cda76f99-8e41-34c9-91b0-2ad6b208ce8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141c:3800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:63:b1:22:84:7a:ad:78:ef:a1:8b:6d:73:f8:c0:83:8a:1a:
         63:2d:f4:85:c0:5a:8c:ad:52:56:cc:41:e9:2a:95:02:56:8f:
         c6:38:20:c7:0c:5a:6d:5c:8e:1d:c3:85:ec:d2:13:4c:dc:cb:
         82:a0:ef:25:d3:d1:90:8e:d2:33:9f:cb:24:12:55:e9:bc:0b:
         19:2a:94:ba:4d:59:f3:66:bf:84:35:44:1c:cf:a8:bb:3f:1e:
         9b:2d:27:e2:f4:a1:0e:74:79:73:52:b5:c4:d1:6b:66:00:e0:
         e8:30:bf:fd:c2:9a:15:bf:8b:83:b9:52:98:44:81:30:48:72:
         8d:6e:11:dc:8d:6f:42:e8:e9:09:ca:26:0f:6d:ac:14:5a:d7:
         1b:57:97:1e:9f:77:37:d7:83:ae:69:21:20:3e:6c:b5:32:bb:
         59:ac:3d:87:c3:3d:13:6b:51:42:11:bb:98:f1:88:01:36:2c:
         10:06:bd:3c:52:28:52:cd:e4:4b:fc:c0:44:16:d4:fc:62:1e:
         16:7d:fe:f8:d0:78:5b:ac:bc:5e:41:a1:3e:ad:86:9e:cf:d3:
         f5:f1:65:15:63:b2:a2:c6:b2:5f:a1:3d:11:bf:ca:56:de:fe:
         07:54:48:c0:26:15:69:35:e9:23:07:55:e8:68:b7:19:d9:f6:
         72:8e:9a:a1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNik9iaaI7bsc5kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
YjAwMGZlNzUtYTdjMi00YWU2LThjOTAtZWFlMmE5NTc0OGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr1ktkorP1gDaKnjZ8zpgS3Qi2L/bzUXdYIX
d21vmuL0KbRonYDUl8EKndexvHAnnAOL3q6cwTQiynTBKqb6b8QWwqxmQ62pni9X
G/OKWrdAkU0AQDb5LV7FMrVkSVPnBXlaorLG+ctwOQvbnlBuMGDpTuqS+akSqBA4
HmpUU9VRhLMpevWc4A3UF7FER9QmZUy3TPwMZWR0MuAVQ7fP7PyzBSo9vpcbJx8k
sogU6bagaHMJKMOw3UpPHqTUJSl2h7m8J9MxXi+qL9KDPhG77w+1o663VGqTg8z6
v2LmYrZ4kYKuLM8qLrA3z1Tc+jBh2wXgLFRPsad75I7a19ouzQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMV9mQePjPpUyCqh+nTyrxCU/ogSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2RhNzZmOTktOGU0MS0z
NGM5LTkxYjAtMmFkNmIyMDhjZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUHDgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAFjsSKEeq1476GLbXP4wIOKGmMt9IXAWoytUlbMQekqlQJWj8Y4
IMcMWm1cjh3DhezSE0zcy4Kg7yXT0ZCO0jOfyyQSVem8CxkqlLpNWfNmv4Q1RBzP
qLs/HpstJ+L0oQ50eXNStcTRa2YA4Ogwv/3CmhW/i4O5UphEgTBIco1uEdyNb0Lo
6QnKJg9trBRa1xtXlx6fdzfXg65pISA+bLUyu1msPYfDPRNrUUIRu5jxiAE2LBAG
vTxSKFLN5Ev8wEQW1PxiHhZ9/vjQeFusvF5BoT6thp7P0/XxZRVjsqLGsl+hPRG/
ylbe/gdUSMAmFWk16SMHVehotxnZ9nKOmqE=
-----END CERTIFICATE-----