Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ebcd6a6c-403f-3b78-bd97-c1ad15d93c50.roa
File:                     ebcd6a6c-403f-3b78-bd97-c1ad15d93c50.roa (raw, json)
Hash identifier:          W/YHm0l3B0r4X/G3XGvzNCEK/2Nd7qTsQ/tDoJYLMbM=
Subject key identifier:   35:60:6E:6B:0E:C4:1A:21:91:C7:6E:3D:3B:FC:64:70:62:D9:8D:87
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285848451586386B547C758FF0CFA0
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ebcd6a6c-403f-3b78-bd97-c1ad15d93c50.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     14061
IP address blocks:        2604:a880::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:86:38:6b:54:7c:75:8f:f0:cf:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=5562b290-974e-4829-91ef-675043e15b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:29:41:58:26:a2:cf:f0:ea:84:fb:bf:ea:68:
                    41:57:42:7d:f7:d9:55:b4:4b:4f:25:75:3b:e3:5f:
                    b0:16:d1:fb:12:3b:3e:02:cf:d3:7f:8e:15:de:4c:
                    19:db:9c:9b:dc:5f:18:28:8d:98:f7:89:0e:5c:9e:
                    73:94:ec:d9:ac:95:40:20:33:b4:1e:3a:10:db:9d:
                    eb:c1:a1:8b:62:0b:4d:38:ce:f2:9f:ad:ee:9a:7d:
                    4a:6c:90:db:b6:c6:4e:90:61:77:94:ac:60:7d:41:
                    4f:ca:ee:05:a8:ad:1f:b1:80:4c:3d:ea:fd:ef:5a:
                    b9:f5:82:4e:41:99:93:0b:21:c9:ac:63:7e:7e:1a:
                    a5:13:64:aa:ae:36:b0:53:53:1b:60:73:2b:58:b2:
                    4e:14:05:63:70:ac:07:09:77:34:d5:87:bf:a9:0f:
                    1c:13:93:ff:bd:16:f9:00:b3:00:90:ac:19:2f:45:
                    8d:f3:48:a7:35:9a:a7:c8:40:ca:4c:73:b8:47:31:
                    28:27:05:39:26:2d:e2:07:14:43:7c:c3:b5:ce:0c:
                    12:11:00:9c:3c:92:97:24:60:ae:b9:60:66:9a:63:
                    3d:5e:9f:dd:c9:5d:9e:bb:d8:54:94:c3:b2:ad:02:
                    25:6d:ab:a2:5c:64:69:76:37:e2:a4:89:68:f2:14:
                    ca:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:60:6E:6B:0E:C4:1A:21:91:C7:6E:3D:3B:FC:64:70:62:D9:8D:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ebcd6a6c-403f-3b78-bd97-c1ad15d93c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:74:ed:e2:83:49:86:13:53:ed:47:d8:5d:ac:39:8c:d5:c7:
         75:93:a8:9d:91:b8:e8:b6:bb:56:a4:99:b1:ea:dd:5f:ae:05:
         77:3f:89:e6:fd:8d:b5:31:b4:63:14:c6:0d:1a:92:80:cb:42:
         4c:45:0c:7d:f3:02:bc:dd:21:e4:47:d4:6a:4f:e4:1c:01:46:
         76:37:7c:5b:07:b7:bd:82:3e:49:87:41:80:57:94:6c:ba:b1:
         74:06:87:d1:b8:8d:c2:ca:52:65:c9:57:10:f4:80:e7:d4:fe:
         03:5e:29:e5:d2:d5:0c:a9:91:2e:77:54:91:37:a4:8f:75:52:
         af:34:e6:25:25:47:c5:db:ff:f6:d7:34:7f:da:60:a6:03:96:
         51:82:92:fb:8c:50:68:d3:7b:1a:de:7f:d6:18:cd:3b:7d:c0:
         1e:20:c8:ea:03:17:be:52:f4:70:ba:d6:b3:26:22:7c:61:25:
         5e:b5:83:c5:d4:f2:eb:56:53:38:69:dd:7d:65:19:9c:b7:12:
         90:03:02:7d:df:0d:e4:ed:72:3b:88:36:0e:6e:dc:94:31:84:
         df:ee:ed:f4:03:a5:52:2c:7a:25:26:cd:85:3b:1c:58:31:bc:
         37:70:0d:bd:c7:14:2e:48:5a:dc:d1:46:93:e1:6d:a8:93:e3:
         06:71:90:0a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhFFYY4a1R8dY/wz6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
NTU2MmIyOTAtOTc0ZS00ODI5LTkxZWYtNjc1MDQzZTE1Yjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ClBWCaiz/DqhPu/6mhBV0J999lVtEtPJXU7
41+wFtH7Ejs+As/Tf44V3kwZ25yb3F8YKI2Y94kOXJ5zlOzZrJVAIDO0HjoQ253r
waGLYgtNOM7yn63umn1KbJDbtsZOkGF3lKxgfUFPyu4FqK0fsYBMPer971q59YJO
QZmTCyHJrGN+fhqlE2SqrjawU1MbYHMrWLJOFAVjcKwHCXc01Ye/qQ8cE5P/vRb5
ALMAkKwZL0WN80inNZqnyEDKTHO4RzEoJwU5Ji3iBxRDfMO1zgwSEQCcPJKXJGCu
uWBmmmM9Xp/dyV2eu9hUlMOyrQIlbauiXGRpdjfipIlo8hTKQQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDVgbmsOxBohkcduPTv8ZHBi2Y2HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZWJjZDZhNmMtNDAzZi0z
Yjc4LWJkOTctYzFhZDE1ZDkzYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSogDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCYdO3ig0mGE1PtR9hdrDmM1cd1k6idkbjotrtWpJmx6t1frgV3P4nm
/Y21MbRjFMYNGpKAy0JMRQx98wK83SHkR9RqT+QcAUZ2N3xbB7e9gj5Jh0GAV5Rs
urF0BofRuI3CylJlyVcQ9IDn1P4DXinl0tUMqZEud1SRN6SPdVKvNOYlJUfF2//2
1zR/2mCmA5ZRgpL7jFBo03sa3n/WGM07fcAeIMjqAxe+UvRwutazJiJ8YSVetYPF
1PLrVlM4ad19ZRmctxKQAwJ93w3k7XI7iDYObtyUMYTf7u30A6VSLHolJs2FOxxY
Mbw3cA29xxQuSFrc0UaT4W2ok+MGcZAK
-----END CERTIFICATE-----