Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbb0d6c1-5143-34fd-9db5-175763d7ae3c.roa
File:                     dbb0d6c1-5143-34fd-9db5-175763d7ae3c.roa (raw, json)
Hash identifier:          KJjPk0yAtYlHzDUH0WqukDzXpSYr66K4TeF12gFVrL4=
Subject key identifier:   BD:EA:99:53:0D:0D:7D:84:77:68:A9:36:34:F4:A2:57:23:9C:60:33
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484170BC96531D7AE40565B440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbb0d6c1-5143-34fd-9db5-175763d7ae3c.roa
Signing time:             Thu 19 Dec 2024 06:41:35 +0000
ROA not before:           Thu 19 Dec 2024 06:41:35 +0000
ROA not after:            Wed 19 Mar 2025 05:41:35 +0000
asID:                     36623
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:41:70:bc:96:53:1d:7a:e4:05:65:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 06:41:35 2024 GMT
            Not After : Mar 19 05:41:35 2025 GMT
        Subject: CN=05e37df8-bed9-42ba-b959-9f8b011af183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:fd:09:25:44:e5:37:27:95:59:b7:a2:95:
                    03:b6:ec:cd:b1:d3:76:5c:2c:72:cf:b1:de:df:31:
                    d9:3a:62:74:c7:54:11:19:2f:13:f8:5c:92:d8:e9:
                    eb:85:40:d7:6b:d9:51:60:f7:03:72:89:29:da:a9:
                    9f:41:3d:ef:eb:d5:46:f7:fa:87:80:ea:84:f2:eb:
                    8a:ee:23:d1:26:c4:fd:c8:12:91:7e:5b:8a:20:f0:
                    37:40:9f:a9:dd:52:27:c5:86:ce:c4:9d:ad:18:df:
                    21:bc:65:fc:47:0c:f9:71:04:46:1e:7a:8c:e3:98:
                    24:28:50:c6:2d:0d:27:c3:5e:3e:79:58:bd:c1:1a:
                    24:4d:ee:5e:04:36:1d:bb:78:b4:a8:7e:6b:f6:11:
                    2b:95:d9:21:3f:d1:b4:59:e4:68:68:17:ee:32:92:
                    f6:89:9f:67:e3:ed:a9:db:d2:61:28:8b:dd:29:86:
                    28:83:8c:ea:34:71:4b:eb:eb:0b:1c:62:c4:97:a3:
                    81:39:6f:2e:22:a5:98:73:12:94:11:d1:a9:35:69:
                    3f:15:d4:f1:ba:d3:98:7b:0c:2b:fe:a8:4a:ab:77:
                    67:a6:c1:c5:b5:38:91:a6:e3:a9:70:79:85:ba:64:
                    42:5e:5b:f0:20:4b:fc:4c:e8:81:59:a9:eb:62:2b:
                    f4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EA:99:53:0D:0D:7D:84:77:68:A9:36:34:F4:A2:57:23:9C:60:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbb0d6c1-5143-34fd-9db5-175763d7ae3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:fc:6f:b5:01:b0:0a:b2:55:20:1e:4d:e5:77:37:94:f0:9a:
         e0:41:b1:35:ab:f6:8c:d8:2f:fb:5c:b6:29:d0:76:db:fd:3d:
         f1:a0:8a:d0:d2:09:61:29:9b:fc:19:e1:9b:b4:c3:2a:7e:f0:
         27:b7:50:6b:ca:f9:29:e0:15:23:2f:b6:30:91:52:17:20:5c:
         a1:bd:e2:07:fd:9e:06:8c:03:9a:65:e9:f5:e3:cb:fa:95:6d:
         09:26:17:fb:c3:a7:f8:ba:ba:af:ca:ea:9a:77:99:50:21:c0:
         17:12:9d:d1:cf:49:da:7a:3c:00:bf:31:a7:70:36:99:70:5f:
         3d:9b:c8:f0:1f:37:dd:b1:9b:25:81:31:dc:d4:ce:99:65:23:
         91:dd:59:c9:7d:cb:c8:4f:37:45:a3:ac:1b:58:ce:11:f8:e0:
         6d:9d:05:8c:f7:3f:2f:92:22:90:01:74:0d:40:fa:75:9a:a3:
         c9:52:55:ff:73:b9:55:9f:54:13:2e:d9:a9:55:41:24:3f:5a:
         70:c6:07:82:e2:a8:04:a2:bf:89:4a:ef:46:6e:82:b5:c3:27:
         ed:eb:3a:bf:cc:9b:db:94:2f:aa:50:f5:21:63:bb:25:6f:48:
         da:c8:b8:a4:e8:18:f7:41:c2:5b:6a:70:9d:bb:40:8e:53:2b:
         75:d4:ad:3b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhBcLyWUx165AVltEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTA2NDEzNVoXDTI1MDMxOTA1NDEzNVowLzEtMCsGA1UEAxMk
MDVlMzdkZjgtYmVkOS00MmJhLWI5NTktOWY4YjAxMWFmMTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/z9CSVE5TcnlVm3opUDtuzNsdN2XCxyz7He
3zHZOmJ0x1QRGS8T+FyS2OnrhUDXa9lRYPcDcokp2qmfQT3v69VG9/qHgOqE8uuK
7iPRJsT9yBKRfluKIPA3QJ+p3VInxYbOxJ2tGN8hvGX8Rwz5cQRGHnqM45gkKFDG
LQ0nw14+eVi9wRokTe5eBDYdu3i0qH5r9hErldkhP9G0WeRoaBfuMpL2iZ9n4+2p
29JhKIvdKYYog4zqNHFL6+sLHGLEl6OBOW8uIqWYcxKUEdGpNWk/FdTxutOYewwr
/qhKq3dnpsHFtTiRpuOpcHmFumRCXlvwIEv8TOiBWanrYiv0IQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL3qmVMNDX2Ed2ipNjT0olcjnGAzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGJiMGQ2YzEtNTE0My0z
NGZkLTlkYjUtMTc1NzYzZDdhZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC38b7UBsAqyVSAeTeV3N5TwmuBBsTWr9ozYL/tctinQdtv9PfGg
itDSCWEpm/wZ4Zu0wyp+8Ce3UGvK+SngFSMvtjCRUhcgXKG94gf9ngaMA5pl6fXj
y/qVbQkmF/vDp/i6uq/K6pp3mVAhwBcSndHPSdp6PAC/MadwNplwXz2byPAfN92x
myWBMdzUzpllI5HdWcl9y8hPN0WjrBtYzhH44G2dBYz3Py+SIpABdA1A+nWao8lS
Vf9zuVWfVBMu2alVQSQ/WnDGB4LiqASiv4lK70ZugrXDJ+3rOr/Mm9uUL6pQ9SFj
uyVvSNrIuKToGPdBwltqcJ27QI5TK3XUrTs=
-----END CERTIFICATE-----