Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e4b962c3-0e30-3855-9489-3fa7bbd4f6db.roa
File:                     e4b962c3-0e30-3855-9489-3fa7bbd4f6db.roa (raw, json)
Hash identifier:          gHMDH1K5XRzh05v5AeBuJwsA1P5rWfLPqdzhoeSLOeU=
Subject key identifier:   E5:B9:7D:F3:2C:F3:9D:FA:24:FD:1C:36:74:CD:2C:6B:D8:9A:2C:69
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F432858485F9AE2155FB23F32D8DD4D00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e4b962c3-0e30-3855-9489-3fa7bbd4f6db.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     396955
IP address blocks:        2001:468:1f0c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:e2:15:5f:b2:3f:32:d8:dd:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=442a3b2f-5f76-4cba-8ec7-bbe4e59bacea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:66:95:78:25:26:c6:d2:61:4f:4c:59:5f:5f:
                    34:a5:5a:2b:ab:28:9b:4a:96:b7:03:e7:90:98:e8:
                    28:74:b3:6b:d9:29:e1:95:9e:f7:46:47:f6:59:ae:
                    5a:c4:32:1d:7e:14:a6:da:e6:39:13:97:89:2e:3e:
                    0a:cc:f4:8e:fb:bb:ae:44:52:a5:d0:bd:7e:29:a2:
                    de:ce:82:c8:ff:9d:72:6b:75:f0:ba:66:fa:35:e3:
                    d7:3b:77:6f:b6:37:2a:c7:87:4d:37:85:29:76:1b:
                    bc:50:9a:99:65:fc:b6:87:bd:d2:2b:31:dd:b8:26:
                    e9:e1:e1:62:67:e1:71:cc:59:8c:07:7e:15:c4:45:
                    35:60:18:17:e3:ad:c2:e2:5d:13:9f:cc:ce:d3:33:
                    e0:3c:a0:dc:8a:4b:f1:3c:bb:cb:33:03:cc:c2:27:
                    9d:b2:d9:13:33:bd:97:5f:93:28:81:dd:cb:7c:6b:
                    29:45:ef:e4:0a:25:0c:3d:01:7b:be:00:e1:30:8b:
                    4b:cf:50:58:e4:e5:54:f9:d2:0c:8b:3f:f1:90:da:
                    a4:cb:34:2d:d0:93:32:83:3e:dd:aa:65:cb:6b:c9:
                    da:f8:79:8e:f7:e6:cf:0b:f3:64:e6:29:f6:c5:97:
                    fa:cd:6a:02:96:5f:5a:25:f0:94:01:01:e3:c7:bf:
                    22:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B9:7D:F3:2C:F3:9D:FA:24:FD:1C:36:74:CD:2C:6B:D8:9A:2C:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e4b962c3-0e30-3855-9489-3fa7bbd4f6db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:1f0c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b5:c5:31:a6:ca:5b:3f:3b:a3:a4:9b:1e:3d:73:39:3f:e1:
         8b:df:89:74:35:33:03:d1:cc:fd:3f:5d:ac:3c:bd:03:e1:e4:
         62:23:a1:37:03:25:d0:c0:7f:2e:90:60:f3:c2:56:7a:f2:93:
         73:10:de:ef:b0:0e:ac:fb:ae:72:44:36:0e:78:9d:8f:2b:d5:
         ea:fa:9e:da:92:e8:d5:bb:57:00:17:d7:8a:5b:30:05:3c:4b:
         15:52:4e:25:77:55:92:15:c6:da:23:a7:1c:fe:98:e7:17:e1:
         27:5a:e7:0d:ec:39:ba:30:98:df:60:0c:b8:57:78:58:ae:28:
         f7:6b:96:30:79:d0:18:c6:3c:45:3f:c8:ef:ed:60:08:d0:b9:
         2c:1b:84:f4:17:34:70:86:ff:b7:82:56:c4:4a:12:92:f5:13:
         58:4b:9b:67:75:10:49:c0:83:3e:4a:20:da:58:2c:52:3f:0b:
         2b:a5:23:aa:90:02:60:c0:e5:b3:44:d5:ab:38:d2:20:62:40:
         65:24:77:e5:9e:f6:08:e8:6f:4e:62:c5:ec:ff:27:d4:61:20:
         61:4d:74:fc:98:17:75:2c:66:97:27:ea:16:91:68:88:6d:0b:
         04:78:18:5a:6d:c1:98:92:ef:bd:e1:9b:0a:b1:55:ae:1e:f4:
         fa:35:33:44
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmuIVX7I/MtjdTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
NDQyYTNiMmYtNWY3Ni00Y2JhLThlYzctYmJlNGU1OWJhY2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2aVeCUmxtJhT0xZX180pVorqyibSpa3A+eQ
mOgodLNr2SnhlZ73Rkf2Wa5axDIdfhSm2uY5E5eJLj4KzPSO+7uuRFKl0L1+KaLe
zoLI/51ya3Xwumb6NePXO3dvtjcqx4dNN4Updhu8UJqZZfy2h73SKzHduCbp4eFi
Z+FxzFmMB34VxEU1YBgX463C4l0Tn8zO0zPgPKDcikvxPLvLMwPMwiedstkTM72X
X5Mogd3LfGspRe/kCiUMPQF7vgDhMItLz1BY5OVU+dIMiz/xkNqkyzQt0JMygz7d
qmXLa8na+HmO9+bPC/Nk5in2xZf6zWoCll9aJfCUAQHjx78inQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOW5ffMs8536JP0cNnTNLGvYmixpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZTRiOTYyYzMtMGUzMC0z
ODU1LTk0ODktM2ZhN2JiZDRmNmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaB8M
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACy1xTGmyls/O6Okmx49czk/4YvfiXQ1MwPRzP0/Xaw8vQPh5GIj
oTcDJdDAfy6QYPPCVnryk3MQ3u+wDqz7rnJENg54nY8r1er6ntqS6NW7VwAX14pb
MAU8SxVSTiV3VZIVxtojpxz+mOcX4Sda5w3sObowmN9gDLhXeFiuKPdrljB50BjG
PEU/yO/tYAjQuSwbhPQXNHCG/7eCVsRKEpL1E1hLm2d1EEnAgz5KINpYLFI/Cyul
I6qQAmDA5bNE1as40iBiQGUkd+We9gjob05ixez/J9RhIGFNdPyYF3UsZpcn6haR
aIhtCwR4GFptwZiS773hmwqxVa4e9Po1M0Q=
-----END CERTIFICATE-----