Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9a081fc8-f6cb-3e0d-8da7-bd25726994d9.roa
File:                     9a081fc8-f6cb-3e0d-8da7-bd25726994d9.roa (raw, json)
Hash identifier:          DL4O2nAtAM4mNvpXMG0+k+QFlEtk7RFevXdFLVT0CRw=
Subject key identifier:   80:B2:23:7F:39:AE:76:E0:3A:50:4D:03:82:89:C8:3C:26:26:86:F2
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9B0A12F4758488FD857600
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9a081fc8-f6cb-3e0d-8da7-bd25726994d9.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5790::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9b:0a:12:f4:75:84:88:fd:85:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=810fd190-c084-42d4-a57f-7ce65becc415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:aa:55:64:03:e4:87:47:a6:e3:0b:3e:e5:29:
                    ca:ba:ef:73:a0:cc:50:0a:69:ec:5d:d7:89:cb:58:
                    cb:f1:1c:58:98:27:8a:b2:cd:33:ec:4e:d7:20:60:
                    73:1d:27:88:ae:0a:c6:6f:7e:e8:50:87:9e:02:de:
                    32:c4:5f:b3:39:91:ed:a2:8b:2e:94:a1:d3:f6:c0:
                    ff:e5:5e:8f:2f:13:01:74:d7:62:b6:94:cc:3c:87:
                    de:72:4d:a4:db:cf:69:14:6c:1d:88:2a:0a:ac:90:
                    71:67:65:bf:92:25:88:0c:88:61:e0:9b:dd:ca:e8:
                    77:36:ec:37:b3:e6:9b:1b:49:fc:b4:3a:06:a9:41:
                    13:ac:c9:b4:25:c2:33:80:5d:68:80:fb:fd:2a:43:
                    8f:85:0e:fd:76:cf:4f:68:ad:eb:e9:07:36:79:fc:
                    19:0c:55:01:8a:19:1f:f2:e9:12:66:1d:e2:9f:71:
                    e8:69:88:08:3f:f3:34:17:10:31:97:e7:28:10:13:
                    af:13:ca:37:ee:9d:6f:40:13:b4:08:52:3c:19:d5:
                    42:cb:1d:94:8e:1c:be:2a:3c:d7:1d:93:13:e9:ff:
                    81:46:b2:24:7b:f9:40:5c:37:bf:29:36:30:61:a9:
                    82:83:99:c5:21:74:5e:36:95:62:c5:3e:b5:01:f9:
                    5d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B2:23:7F:39:AE:76:E0:3A:50:4D:03:82:89:C8:3C:26:26:86:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9a081fc8-f6cb-3e0d-8da7-bd25726994d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5790::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:fc:11:93:a7:f6:b3:4a:1a:2d:eb:68:79:55:04:73:f2:e4:
         fd:8d:63:62:50:a1:5d:d7:f2:ba:68:90:0d:fb:47:70:4b:7e:
         54:52:de:be:de:ba:5e:94:7c:14:2b:0a:b4:85:52:c6:47:7a:
         70:15:39:98:a3:7e:7a:81:f2:ca:72:a7:ef:59:19:d6:af:f8:
         59:7b:2a:32:90:ea:1f:a0:c3:61:68:d4:d1:cc:ba:2c:98:1d:
         b0:06:99:37:8f:e8:1d:1f:58:bb:d0:96:09:b1:7a:ea:63:9b:
         cd:d5:25:d8:df:a1:08:9b:63:df:2e:03:71:0b:58:d6:1f:9b:
         f9:d9:bb:80:b7:20:34:20:dc:55:36:7f:94:99:6e:a7:22:22:
         61:cd:b4:5d:d5:e8:47:fc:e9:c1:c7:61:c4:a1:c3:02:1c:c2:
         29:fc:d9:19:e5:b6:5d:c9:cd:89:2d:65:62:c5:f8:ef:c6:b0:
         b7:ef:b4:8c:17:50:e9:d3:62:21:63:07:e5:f2:15:14:30:78:
         4d:85:76:3b:14:e0:6b:0b:0f:9c:e5:f2:44:24:06:67:a6:52:
         a8:59:02:9d:9b:3e:fc:3a:41:f3:60:12:78:a8:44:5e:0a:51:
         e6:e9:65:9b:8c:12:6e:2a:46:c4:77:be:78:1a:58:5e:54:31:
         ba:87:5b:21
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmwoS9HWEiP2FdgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
ODEwZmQxOTAtYzA4NC00MmQ0LWE1N2YtN2NlNjViZWNjNDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKpVZAPkh0em4ws+5SnKuu9zoMxQCmnsXdeJ
y1jL8RxYmCeKss0z7E7XIGBzHSeIrgrGb37oUIeeAt4yxF+zOZHtoosulKHT9sD/
5V6PLxMBdNditpTMPIfeck2k289pFGwdiCoKrJBxZ2W/kiWIDIhh4Jvdyuh3Nuw3
s+abG0n8tDoGqUETrMm0JcIzgF1ogPv9KkOPhQ79ds9PaK3r6Qc2efwZDFUBihkf
8ukSZh3in3HoaYgIP/M0FxAxl+coEBOvE8o37p1vQBO0CFI8GdVCyx2Ujhy+KjzX
HZMT6f+BRrIke/lAXDe/KTYwYamCg5nFIXReNpVixT61AfldbQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFICyI385rnbgOlBNA4KJyDwmJobyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOWEwODFmYzgtZjZjYi0z
ZTBkLThkYTctYmQyNTcyNjk5NGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFeQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACj8EZOn9rNKGi3raHlVBHPy5P2NY2JQoV3X8rpokA37R3BLflRS
3r7eul6UfBQrCrSFUsZHenAVOZijfnqB8spyp+9ZGdav+Fl7KjKQ6h+gw2Fo1NHM
uiyYHbAGmTeP6B0fWLvQlgmxeupjm83VJdjfoQibY98uA3ELWNYfm/nZu4C3IDQg
3FU2f5SZbqciImHNtF3V6Ef86cHHYcShwwIcwin82Rnltl3JzYktZWLF+O/GsLfv
tIwXUOnTYiFjB+XyFRQweE2FdjsU4GsLD5zl8kQkBmemUqhZAp2bPvw6QfNgEnio
RF4KUebpZZuMEm4qRsR3vngaWF5UMbqHWyE=
-----END CERTIFICATE-----