Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519/298d9e74-c1df-37ff-9d61-74c5b58c8faf.roa
File:                     298d9e74-c1df-37ff-9d61-74c5b58c8faf.roa (raw, json)
Hash identifier:          1y2Q3gUXBI6jG/eoWamoADETu3CorDB14mBb54nEi5A=
Subject key identifier:   11:63:9A:15:77:30:DF:E0:07:9B:24:AC:EC:E4:B6:7C:E3:5B:2F:70
Certificate issuer:       /CN=b26d6b84-8a61-4533-a922-5e09436bf519
Certificate serial:       010D0C9F432858488AE0965A342173BE3E0182C0
Authority key identifier: 64:C6:3F:3C:C1:2A:F9:FB:C9:4B:1A:5A:6B:90:92:5E:51:51:6D:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519/298d9e74-c1df-37ff-9d61-74c5b58c8faf.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     32281
IP address blocks:        2604:2340::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:96:5a:34:21:73:be:3e:01:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26d6b84-8a61-4533-a922-5e09436bf519
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=6fcd6744-df92-4a69-bab6-03d8a3f1cce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:56:da:e2:bb:5f:e7:40:cb:e0:92:ae:c0:66:
                    9a:2c:0a:67:da:f2:18:d5:60:98:3a:30:f3:55:6e:
                    43:77:31:12:7e:0a:8c:aa:77:ac:55:42:0d:a4:e4:
                    02:ff:b8:40:25:8f:02:7a:ac:8b:73:c4:21:6c:29:
                    cc:06:ca:e3:fb:3f:05:8d:98:03:aa:b2:cd:91:01:
                    e4:f0:ec:d9:3c:2d:aa:04:e8:e6:45:cf:4e:1a:3c:
                    33:90:28:54:ef:19:19:b5:ae:37:d9:5a:60:f9:3b:
                    24:6e:53:c6:db:36:5f:ac:78:26:64:6e:7d:4e:5d:
                    b3:f4:1b:55:72:ba:d4:30:95:19:c6:4a:97:2a:a1:
                    12:a6:4e:70:45:ed:d4:91:00:da:73:55:13:ff:8f:
                    5d:3b:f6:2b:3f:4f:25:5d:1e:7f:ca:d9:6f:34:20:
                    bc:6a:08:ae:49:b6:04:2f:d7:a3:47:7d:bb:0a:6d:
                    54:e7:1f:4b:92:b7:e1:54:30:d8:6f:0d:4e:65:d8:
                    83:85:f9:d6:7f:41:b5:ba:bc:12:01:b3:dc:bc:6e:
                    a3:9e:56:13:f7:f6:5a:39:45:a1:35:d1:d3:3c:98:
                    6f:04:d8:82:b8:ff:45:8b:17:69:86:d3:02:20:f8:
                    d6:ff:d8:19:7b:23:8e:a7:70:d4:81:7b:75:66:b7:
                    11:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:63:9A:15:77:30:DF:E0:07:9B:24:AC:EC:E4:B6:7C:E3:5B:2F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519/298d9e74-c1df-37ff-9d61-74c5b58c8faf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519/b26d6b84-8a61-4533-a922-5e09436bf519.crl

            X509v3 Authority Key Identifier:
                keyid:64:C6:3F:3C:C1:2A:F9:FB:C9:4B:1A:5A:6B:90:92:5E:51:51:6D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:14:7b:28:f2:32:cd:05:b4:d6:cb:03:ce:d4:f3:e1:9a:b8:
         aa:e2:7e:3f:70:34:dc:97:5b:bb:a6:3f:62:e3:22:09:68:50:
         36:63:8f:55:26:89:8b:68:ff:a7:cb:84:01:e3:f6:e2:90:74:
         de:55:46:f0:e7:04:41:10:ee:fb:2a:60:fa:43:38:86:91:f9:
         01:48:f7:be:94:d1:6f:f2:45:22:8a:f5:a8:9e:b1:05:9d:de:
         bb:85:d5:02:73:ac:bc:a3:42:7b:cc:b9:95:b9:28:9c:1e:19:
         27:22:cd:52:73:57:f2:0d:f3:77:cf:2b:16:fd:bd:59:f8:5c:
         cf:3d:cf:a7:7c:d1:c2:0a:6b:fb:b8:29:5c:4c:3a:10:7a:9a:
         2d:96:1c:da:22:77:1a:18:1a:47:5b:2a:4d:84:76:93:36:3f:
         4c:73:41:2b:36:8c:a0:e5:4a:8c:4b:53:ba:9e:0f:e1:63:de:
         d1:c8:8b:4d:ce:5e:10:2e:e7:c0:76:10:9e:87:f3:35:69:54:
         be:ca:84:bf:73:db:d4:44:e5:b5:b2:5b:b6:a1:4b:83:f4:f7:
         c5:ac:c8:3a:ae:58:28:76:0a:45:0e:36:84:2b:02:66:23:34:
         d0:e4:83:bd:2c:92:b1:cc:d0:8d:ad:92:0d:d2:58:c6:2e:2d:
         ca:04:d7:a7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiK4JZaNCFzvj4BgsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI2ZDZiODQtOGE2MS00NTMzLWE5MjItNWUwOTQzNmJm
NTE5MB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
NmZjZDY3NDQtZGY5Mi00YTY5LWJhYjYtMDNkOGEzZjFjY2UzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91ba4rtf50DL4JKuwGaaLApn2vIY1WCYOjDz
VW5DdzESfgqMqnesVUINpOQC/7hAJY8CeqyLc8QhbCnMBsrj+z8FjZgDqrLNkQHk
8OzZPC2qBOjmRc9OGjwzkChU7xkZta432Vpg+TskblPG2zZfrHgmZG59Tl2z9BtV
crrUMJUZxkqXKqESpk5wRe3UkQDac1UT/49dO/YrP08lXR5/ytlvNCC8agiuSbYE
L9ejR327Cm1U5x9LkrfhVDDYbw1OZdiDhfnWf0G1urwSAbPcvG6jnlYT9/ZaOUWh
NdHTPJhvBNiCuP9FixdphtMCIPjW/9gZeyOOp3DUgXt1ZrcRoQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBFjmhV3MN/gB5skrOzktnzjWy9wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMjZk
NmI4NC04YTYxLTQ1MzMtYTkyMi01ZTA5NDM2YmY1MTkvMjk4ZDllNzQtYzFkZi0z
N2ZmLTlkNjEtNzRjNWI1OGM4ZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjI2ZDZiODQtOGE2MS00NTMzLWE5
MjItNWUwOTQzNmJmNTE5L2IyNmQ2Yjg0LThhNjEtNDUzMy1hOTIyLTVlMDk0MzZi
ZjUxOS5jcmwwHwYDVR0jBBgwFoAUZMY/PMEq+fvJSxpaa5CSXlFRbU4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMjZkNmI4NC04YTYxLTQ1MzMtYTkyMi01ZTA5
NDM2YmY1MTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQjQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBXFHso8jLNBbTWywPO1PPhmriq4n4/cDTcl1u7pj9i4yIJaFA2Y49V
JomLaP+ny4QB4/bikHTeVUbw5wRBEO77KmD6QziGkfkBSPe+lNFv8kUiivWonrEF
nd67hdUCc6y8o0J7zLmVuSicHhknIs1Sc1fyDfN3zysW/b1Z+FzPPc+nfNHCCmv7
uClcTDoQepotlhzaIncaGBpHWypNhHaTNj9Mc0ErNoyg5UqMS1O6ng/hY97RyItN
zl4QLufAdhCeh/M1aVS+yoS/c9vUROW1slu2oUuD9PfFrMg6rlgodgpFDjaEKwJm
IzTQ5IO9LJKxzNCNrZIN0ljGLi3KBNen
-----END CERTIFICATE-----