Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b355fb61-9aca-3f88-b670-acb57641bf3b.roa
File:                     b355fb61-9aca-3f88-b670-acb57641bf3b.roa (raw, json)
Hash identifier:          XV807HAe1TToFEKdl2ObKIODO2KGXlk1R3zz5vg4T0w=
Subject key identifier:   08:6B:37:74:F1:D8:81:32:6F:41:E9:F7:FE:5B:7C:0F:95:64:76:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1BAD6215D3940B02D3C480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b355fb61-9aca-3f88-b670-acb57641bf3b.roa
Signing time:             Wed 11 Dec 2024 15:18:13 +0000
ROA not before:           Wed 11 Dec 2024 15:18:13 +0000
ROA not after:            Tue 11 Mar 2025 14:18:13 +0000
asID:                     396569
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:ad:62:15:d3:94:0b:02:d3:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:13 2024 GMT
            Not After : Mar 11 14:18:13 2025 GMT
        Subject: CN=f700b619-caa8-4b72-a181-e568fbfb14cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:69:8d:82:3e:97:ef:cf:37:02:a7:e6:71:71:
                    b3:06:73:1c:84:4c:5d:46:e3:bb:a7:bb:98:57:51:
                    e9:f8:f6:17:9a:fc:10:97:11:39:22:24:a6:15:34:
                    d6:bc:75:79:40:0f:ab:67:b1:ab:33:93:29:37:d7:
                    fb:33:cf:a3:01:02:56:25:c0:7b:7a:76:43:07:17:
                    fe:99:42:8a:1c:e3:67:7c:90:3a:ed:d8:3a:0b:24:
                    b2:1e:5e:bd:45:42:44:12:fa:27:20:17:12:eb:29:
                    b4:a5:36:2a:41:b9:35:df:37:36:43:94:20:e0:0a:
                    84:a9:97:8c:4f:b6:72:98:c7:b6:02:b8:72:44:2f:
                    bb:15:30:3e:b4:59:d0:4b:a6:8b:81:02:0e:c3:f3:
                    32:e7:47:2b:72:9e:14:f0:18:d4:02:27:b7:72:ad:
                    6e:a2:e8:f5:8a:03:12:9e:33:84:fd:91:0a:41:01:
                    6c:50:b5:cf:34:52:2c:d8:df:5d:35:ec:11:9e:f2:
                    8c:21:a8:30:aa:74:85:b9:4f:93:01:36:1e:0c:73:
                    01:bb:8b:01:82:e4:0b:63:89:79:19:40:39:6d:6b:
                    f2:86:92:88:7d:99:44:d4:87:25:a7:72:0a:b5:14:
                    41:b5:61:bc:d5:f3:81:ed:bf:bd:22:dc:fd:2e:13:
                    b8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6B:37:74:F1:D8:81:32:6F:41:E9:F7:FE:5B:7C:0F:95:64:76:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b355fb61-9aca-3f88-b670-acb57641bf3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:84:9b:ed:a6:dd:bf:53:ca:0d:9f:1c:45:33:44:a3:a0:8f:
         b9:0c:9d:81:3f:c5:4c:6a:27:17:84:0d:02:a5:9a:af:38:df:
         13:42:10:bc:de:c8:2a:97:82:5d:cd:de:43:08:dc:28:cd:9b:
         c9:63:d4:b8:27:c6:c1:4f:c7:e9:0f:b4:67:76:4b:ea:0a:42:
         7c:b8:ec:a6:b9:f0:37:3a:93:03:5b:43:97:26:88:fa:e3:74:
         c5:0e:22:08:05:d0:f7:2b:14:9a:be:42:90:39:dc:54:a9:51:
         b0:f1:dd:d8:bd:01:ed:ef:1d:38:28:6b:ea:b5:a2:77:0a:a8:
         7b:8e:96:7f:03:f9:a7:a8:e2:9e:11:f3:a4:83:07:80:41:a9:
         5e:ac:4f:8c:ac:e2:ee:18:7b:e9:3e:d1:20:93:7a:7f:09:f9:
         c9:c1:d1:19:e8:6c:62:b5:9a:da:f4:68:4e:2e:58:ad:ac:71:
         87:0f:cb:01:f5:fd:cc:c5:b7:0a:23:b2:20:1f:30:39:c3:2e:
         15:d7:b5:22:d0:56:24:04:54:7a:72:71:8b:86:31:56:79:f3:
         35:6b:18:e1:a1:33:9a:82:5f:83:0c:8e:dc:3e:49:9e:5e:0f:
         e0:ac:68:92:a2:ae:a8:4f:30:b1:86:48:6c:51:0a:6e:e3:07:
         fb:62:fc:fc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgsG61iFdOUCwLTxIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxMTE1MTgxM1oXDTI1MDMxMTE0MTgxM1owLzEtMCsGA1UEAxMk
ZjcwMGI2MTktY2FhOC00YjcyLWExODEtZTU2OGZiZmIxNGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmmNgj6X7883AqfmcXGzBnMchExdRuO7p7uY
V1Hp+PYXmvwQlxE5IiSmFTTWvHV5QA+rZ7GrM5MpN9f7M8+jAQJWJcB7enZDBxf+
mUKKHONnfJA67dg6CySyHl69RUJEEvonIBcS6ym0pTYqQbk13zc2Q5Qg4AqEqZeM
T7ZymMe2ArhyRC+7FTA+tFnQS6aLgQIOw/My50crcp4U8BjUAie3cq1uouj1igMS
njOE/ZEKQQFsULXPNFIs2N9dNewRnvKMIagwqnSFuU+TATYeDHMBu4sBguQLY4l5
GUA5bWvyhpKIfZlE1Iclp3IKtRRBtWG81fOB7b+9Itz9LhO4vwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAhrN3Tx2IEyb0Hp9/5bfA+VZHbAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjM1NWZiNjEtOWFjYS0z
Zjg4LWI2NzAtYWNiNTc2NDFiZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA+Em+2m3b9Tyg2fHEUzRKOgj7kMnYE/xUxqJxeEDQKlmq843xNC
ELzeyCqXgl3N3kMI3CjNm8lj1LgnxsFPx+kPtGd2S+oKQny47Ka58Dc6kwNbQ5cm
iPrjdMUOIggF0PcrFJq+QpA53FSpUbDx3di9Ae3vHTgoa+q1oncKqHuOln8D+aeo
4p4R86SDB4BBqV6sT4ys4u4Ye+k+0SCTen8J+cnB0RnobGK1mtr0aE4uWK2scYcP
ywH1/czFtwojsiAfMDnDLhXXtSLQViQEVHpycYuGMVZ58zVrGOGhM5qCX4MMjtw+
SZ5eD+CsaJKirqhPMLGGSGxRCm7jB/ti/Pw=
-----END CERTIFICATE-----