Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8edad766-61d4-3a9c-84fa-0c95f320ffbf.roa
File:                     8edad766-61d4-3a9c-84fa-0c95f320ffbf.roa (raw, json)
Hash identifier:          yO4+TXxkXot+sqTPh5APbKXmvpVjsggUoxx/4RDim0o=
Subject key identifier:   07:37:5D:99:56:A3:AC:D7:FC:ED:9C:14:46:9A:2D:02:6C:09:3B:6D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584839EAC8D27CDCCB8A13ADE9E0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8edad766-61d4-3a9c-84fa-0c95f320ffbf.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     20940
IP address blocks:        2001:418:1401:2f::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:c8:d2:7c:dc:cb:8a:13:ad:e9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=8b446aeb-8e68-4dd7-8b0d-99760def98a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3d:c2:ce:6d:56:6c:d8:85:8b:42:74:1e:6a:
                    63:3f:80:8f:c1:f1:89:cc:6d:6b:20:75:2a:db:75:
                    28:16:c2:dc:df:b4:3c:26:c2:92:64:07:6d:ca:3a:
                    b0:09:66:5c:5e:82:4b:f3:33:c9:cd:1e:a8:88:62:
                    fc:03:32:6f:c3:a2:80:f9:db:da:31:40:6c:e1:a1:
                    c0:a5:5b:87:f3:a4:b2:92:0e:71:00:cb:10:b3:e9:
                    95:0b:e8:a9:7d:6b:f8:92:03:19:43:27:f6:c5:0b:
                    ca:39:9c:81:81:57:49:03:2d:a5:4d:26:31:f5:c7:
                    4a:be:0d:f6:88:b9:6d:46:0e:e1:65:ae:d0:36:33:
                    5b:d3:78:19:4e:b3:74:9f:55:e0:f9:10:19:eb:77:
                    fa:ad:2a:49:ac:d3:2c:d6:9e:ab:43:93:84:cc:93:
                    9f:15:d5:40:6d:72:f7:b4:66:ee:a3:1a:9a:42:bf:
                    1b:85:6f:57:0f:55:23:af:19:92:97:33:c1:27:77:
                    bd:05:c2:2a:31:23:bb:cd:8e:0d:8e:02:e3:eb:23:
                    90:96:aa:ef:ec:66:1e:4d:ad:31:74:56:18:97:75:
                    fa:bf:14:35:1a:df:b6:9f:6c:15:74:89:b2:69:b4:
                    f0:6a:f4:3f:e6:90:f9:c7:b5:66:21:c3:ec:b5:e9:
                    b1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:37:5D:99:56:A3:AC:D7:FC:ED:9C:14:46:9A:2D:02:6C:09:3B:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8edad766-61d4-3a9c-84fa-0c95f320ffbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1401:2f::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:30:c7:17:84:3f:b8:3d:13:12:c8:dd:15:a5:f8:67:e2:e1:
         fc:1f:93:16:0d:1a:d4:5b:36:7c:ec:ec:10:b3:e4:23:1e:92:
         2a:14:82:96:80:e5:ef:b1:b4:f2:e4:87:db:2a:63:91:92:22:
         61:b3:f2:cb:8b:18:e2:9d:64:85:b5:6b:7d:16:32:a6:7f:05:
         60:f2:c3:0c:20:48:3d:34:8b:70:e5:4e:d2:6f:87:a4:9a:4e:
         96:ca:97:5b:83:6a:c9:d0:c9:2e:7d:7e:14:4b:a7:6b:fb:f9:
         04:a0:03:f9:07:e0:6c:fd:76:a8:bc:72:3a:5e:3d:fd:b9:a1:
         44:52:ec:d1:78:38:d9:2b:0c:3c:1d:1e:65:3e:94:94:19:78:
         e4:8b:9c:d1:74:d6:a6:81:28:62:e6:b4:ea:5a:d2:aa:f5:be:
         c8:d4:bf:20:94:86:68:55:4b:3b:cd:50:0e:78:29:3b:e1:df:
         58:90:2d:46:fa:49:44:de:08:83:53:ac:02:36:df:27:7e:b0:
         c2:a7:17:fd:ce:d9:3f:be:18:24:57:bf:01:19:a9:60:a1:74:
         9d:90:7b:a2:26:78:4e:e1:e1:ec:d6:14:4c:1b:65:a6:42:37:
         e3:11:74:fb:8d:29:98:6e:15:d5:1c:27:b9:52:35:7b:29:a0:
         1c:f1:0f:d2
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEg56sjSfNzLihOt6eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MTIxNjE0MDA1MVoXDTI1MDMxNjEzMDA1MVowLzEtMCsGA1UEAxMk
OGI0NDZhZWItOGU2OC00ZGQ3LThiMGQtOTk3NjBkZWY5OGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD3Czm1WbNiFi0J0HmpjP4CPwfGJzG1rIHUq
23UoFsLc37Q8JsKSZAdtyjqwCWZcXoJL8zPJzR6oiGL8AzJvw6KA+dvaMUBs4aHA
pVuH86Sykg5xAMsQs+mVC+ipfWv4kgMZQyf2xQvKOZyBgVdJAy2lTSYx9cdKvg32
iLltRg7hZa7QNjNb03gZTrN0n1Xg+RAZ63f6rSpJrNMs1p6rQ5OEzJOfFdVAbXL3
tGbuoxqaQr8bhW9XD1UjrxmSlzPBJ3e9BcIqMSO7zY4NjgLj6yOQlqrv7GYeTa0x
dFYYl3X6vxQ1Gt+2n2wVdImyabTwavQ/5pD5x7VmIcPstemx3wIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFAc3XZlWo6zX/O2cFEaaLQJsCTttMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGVkYWQ3NjYtNjFkNC0z
YTljLTg0ZmEtMGM5NWYzMjBmZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB
AC8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAMzDHF4Q/uD0TEsjdFaX4Z+Lh/B+TFg0a1Fs2fOzsELPkIx6S
KhSCloDl77G08uSH2ypjkZIiYbPyy4sY4p1khbVrfRYypn8FYPLDDCBIPTSLcOVO
0m+HpJpOlsqXW4NqydDJLn1+FEuna/v5BKAD+QfgbP12qLxyOl49/bmhRFLs0Xg4
2SsMPB0eZT6UlBl45Iuc0XTWpoEoYua06lrSqvW+yNS/IJSGaFVLO81QDngpO+Hf
WJAtRvpJRN4Ig1OsAjbfJ36wwqcX/c7ZP74YJFe/ARmpYKF0nZB7oiZ4TuHh7NYU
TBtlpkI34xF0+40pmG4V1RwnuVI1eymgHPEP0g==
-----END CERTIFICATE-----