Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30cb5501-d3e1-3929-8fee-b663217eb5c2.roa
File:                     30cb5501-d3e1-3929-8fee-b663217eb5c2.roa (raw, json)
Hash identifier:          y1uG+CQMALXr/E9HKE23AknmDhPeUO5Jma+nIbzWAc8=
Subject key identifier:   52:80:F0:35:C1:C0:CF:5B:C5:15:82:2A:4B:17:49:FC:65:0A:9D:B9
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9AF7178A3EB246A02C7880
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30cb5501-d3e1-3929-8fee-b663217eb5c2.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4bc0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:f7:17:8a:3e:b2:46:a0:2c:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=b6bad020-3306-4a9c-be3a-deb00ac6740a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a4:6d:40:ed:e4:aa:52:b6:9c:fe:31:14:29:
                    43:1f:22:19:8b:dc:e0:fe:ae:bd:60:e2:38:61:03:
                    b0:9a:5d:50:ab:de:a3:02:4b:7f:e1:15:ec:ae:aa:
                    f9:12:e1:62:cd:8a:46:e1:82:06:15:6e:c7:fe:a0:
                    80:a9:00:20:18:9e:2e:e8:29:13:7a:03:b5:68:82:
                    b0:e6:0b:1c:9d:98:6e:31:62:5a:e6:93:7d:88:cd:
                    a2:3f:26:f1:16:61:4c:98:af:2d:12:a4:50:57:ce:
                    77:bf:33:eb:d9:4f:70:00:bd:19:0c:6b:7f:25:c3:
                    27:70:21:ee:fc:6e:6b:4f:22:4d:86:25:4b:43:ac:
                    14:93:60:8e:bc:b8:d5:7a:a4:37:83:9f:f9:29:8a:
                    bd:45:12:96:06:2e:91:d2:46:37:20:5a:df:e8:49:
                    74:f8:e1:7b:d9:98:e3:7d:15:3e:23:51:84:01:b7:
                    da:01:6d:0b:57:5b:26:02:55:0e:a5:d0:99:35:bd:
                    59:f3:f0:fc:20:3e:73:cd:76:0a:97:c3:57:5d:c3:
                    11:4d:64:dd:10:9b:6f:e0:4d:5d:e1:54:f0:bf:be:
                    80:de:2a:c9:de:d0:f4:4b:71:f6:f9:b3:ef:65:9e:
                    1b:7e:3b:55:9f:92:7a:ae:69:72:48:fa:21:fc:70:
                    97:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:80:F0:35:C1:C0:CF:5B:C5:15:82:2A:4B:17:49:FC:65:0A:9D:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30cb5501-d3e1-3929-8fee-b663217eb5c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4bc0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ce:1d:7b:0e:c5:b3:4a:3b:d6:4b:a6:b1:4d:12:12:16:7a:
         88:c2:00:2f:6d:b3:0e:4c:d2:c0:0b:41:36:a2:e1:c0:29:fa:
         c2:d8:30:14:de:92:89:58:83:77:49:5f:f1:a8:87:9f:32:cb:
         12:7f:cb:60:c7:f8:7c:62:43:cd:02:15:b0:05:99:c2:e3:f0:
         bd:0d:c9:d7:48:d4:55:b2:45:60:28:36:c0:c3:78:8d:5b:67:
         6b:47:95:b2:c0:6c:8b:b9:57:20:f0:b2:48:a4:a0:10:29:92:
         99:08:5e:de:69:55:af:45:dc:6d:67:e2:21:88:a6:0f:a0:c1:
         b6:86:2f:aa:46:a2:82:b3:ff:27:ba:9c:bb:81:d2:53:47:78:
         19:a3:eb:9e:db:0b:b2:4a:b4:15:50:33:01:b6:12:48:de:6f:
         6e:86:d4:85:30:13:13:34:bf:d9:73:2b:5c:fb:fa:da:b0:aa:
         2f:67:18:50:c2:1a:ba:fe:85:8b:69:c9:67:bc:17:8d:7f:38:
         4e:fa:58:81:ee:31:72:7b:f9:02:5a:c5:11:aa:eb:98:d1:0d:
         16:47:f3:9e:c5:36:60:c1:37:27:be:0a:46:e7:17:2c:d9:95:
         8a:c3:bc:4c:4a:1c:02:18:2a:74:0a:85:10:d1:83:23:0a:3b:
         79:d3:89:45
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmvcXij6yRqAseIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
YjZiYWQwMjAtMzMwNi00YTljLWJlM2EtZGViMDBhYzY3NDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6RtQO3kqlK2nP4xFClDHyIZi9zg/q69YOI4
YQOwml1Qq96jAkt/4RXsrqr5EuFizYpG4YIGFW7H/qCAqQAgGJ4u6CkTegO1aIKw
5gscnZhuMWJa5pN9iM2iPybxFmFMmK8tEqRQV853vzPr2U9wAL0ZDGt/JcMncCHu
/G5rTyJNhiVLQ6wUk2COvLjVeqQ3g5/5KYq9RRKWBi6R0kY3IFrf6El0+OF72Zjj
fRU+I1GEAbfaAW0LV1smAlUOpdCZNb1Z8/D8ID5zzXYKl8NXXcMRTWTdEJtv4E1d
4VTwv76A3irJ3tD0S3H2+bPvZZ4bfjtVn5J6rmlySPoh/HCXiwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFKA8DXBwM9bxRWCKksXSfxlCp25MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzBjYjU1MDEtZDNlMS0z
OTI5LThmZWUtYjY2MzIxN2ViNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEvA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAzOHXsOxbNKO9ZLprFNEhIWeojCAC9tsw5M0sALQTai4cAp+sLY
MBTekolYg3dJX/Goh58yyxJ/y2DH+HxiQ80CFbAFmcLj8L0NyddI1FWyRWAoNsDD
eI1bZ2tHlbLAbIu5VyDwskikoBApkpkIXt5pVa9F3G1n4iGIpg+gwbaGL6pGooKz
/ye6nLuB0lNHeBmj657bC7JKtBVQMwG2Ekjeb26G1IUwExM0v9lzK1z7+tqwqi9n
GFDCGrr+hYtpyWe8F41/OE76WIHuMXJ7+QJaxRGq65jRDRZH857FNmDBNye+Ckbn
FyzZlYrDvExKHAIYKnQKhRDRgyMKO3nTiUU=
-----END CERTIFICATE-----