Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7fcbba1-dc19-4591-997e-a4c5c0774c67/6524e4cb-e7d2-358d-8939-7256c865ab46.roa
File:                     6524e4cb-e7d2-358d-8939-7256c865ab46.roa (raw, json)
Hash identifier:          n9wQGiNyPhV88/oFQFxKzvc8cwikFMFn43TV1rs1+mw=
Subject key identifier:   90:36:6E:D1:D0:AC:FF:40:87:F6:4A:9D:1F:7A:DB:6E:8A:B7:9C:BD
Certificate issuer:       /CN=f7fcbba1-dc19-4591-997e-a4c5c0774c67
Certificate serial:       010D0C9F4328584830254186DE8DDE3B4EF6C200
Authority key identifier: 2A:FC:4F:77:6B:D9:E7:05:D8:7F:CF:CF:76:97:51:7D:F8:A0:9F:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7fcbba1-dc19-4591-997e-a4c5c0774c67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7fcbba1-dc19-4591-997e-a4c5c0774c67/6524e4cb-e7d2-358d-8939-7256c865ab46.roa
Signing time:             Fri 13 Dec 2024 02:00:39 +0000
ROA not before:           Fri 13 Dec 2024 02:00:39 +0000
ROA not after:            Thu 13 Mar 2025 01:00:39 +0000
asID:                     8075
IP address blocks:        2620:2b:a00f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:25:41:86:de:8d:de:3b:4e:f6:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7fcbba1-dc19-4591-997e-a4c5c0774c67
        Validity
            Not Before: Dec 13 02:00:39 2024 GMT
            Not After : Mar 13 01:00:39 2025 GMT
        Subject: CN=40a36f08-619b-4a05-b810-c8d4fb982852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ce:76:36:58:8c:69:bc:cb:74:98:69:a5:e3:
                    56:fa:1a:96:1d:26:83:5c:93:a5:b7:48:02:30:c4:
                    0b:1f:9c:95:9c:61:2f:9f:0b:bd:97:25:6a:d4:96:
                    6c:e9:f0:14:66:5a:fe:e2:76:eb:c7:d5:eb:5d:5d:
                    6c:fe:42:53:41:01:27:2d:0a:0e:36:dd:0b:77:04:
                    3d:c4:2b:68:24:20:2a:7e:1b:87:b8:dc:de:f0:77:
                    10:49:19:19:fc:e2:ae:bb:71:c6:81:09:c9:46:ca:
                    11:d0:30:f2:81:ba:2d:37:01:85:3a:36:2c:89:88:
                    7d:21:a5:cf:fc:64:6a:d0:f4:66:dd:af:42:de:7d:
                    b5:b0:9b:c2:ff:95:e9:91:f4:4a:7c:11:be:96:cc:
                    d4:aa:14:44:1c:f2:ad:86:2b:23:68:07:4d:b0:19:
                    94:0f:4f:fb:79:46:57:b4:7e:69:4b:68:03:88:32:
                    e2:66:22:79:b9:46:51:11:af:13:57:ff:48:cc:72:
                    f0:e9:df:fe:b5:ed:aa:4b:d0:dd:96:22:6b:a8:73:
                    bc:8d:cf:d5:0a:70:1f:58:57:f3:7a:cb:52:6d:ab:
                    e6:fd:e0:cd:f2:e2:d0:c6:42:81:cd:9b:90:20:ce:
                    95:48:71:97:34:fc:24:79:d4:0c:3c:e6:fb:21:31:
                    2f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:36:6E:D1:D0:AC:FF:40:87:F6:4A:9D:1F:7A:DB:6E:8A:B7:9C:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7fcbba1-dc19-4591-997e-a4c5c0774c67/6524e4cb-e7d2-358d-8939-7256c865ab46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7fcbba1-dc19-4591-997e-a4c5c0774c67/f7fcbba1-dc19-4591-997e-a4c5c0774c67.crl

            X509v3 Authority Key Identifier:
                keyid:2A:FC:4F:77:6B:D9:E7:05:D8:7F:CF:CF:76:97:51:7D:F8:A0:9F:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7fcbba1-dc19-4591-997e-a4c5c0774c67.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:2b:a00f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e4:53:82:d3:1f:0e:ae:63:3c:77:51:7c:76:90:1a:36:d1:
         d3:0f:dc:26:85:be:41:5d:da:01:bd:d2:64:07:1a:3f:33:c8:
         e9:3a:0c:ac:04:67:3b:0e:f0:b9:15:5b:ac:0f:47:ec:ea:9a:
         d3:55:58:e4:fc:3d:f8:10:19:00:45:05:0a:58:a0:f0:4c:9d:
         b7:b1:f9:ad:d6:40:f9:71:a6:12:f2:b1:e1:9b:17:4f:52:a6:
         8d:88:0a:80:1a:7a:04:81:d3:24:37:77:0d:6b:fb:5b:b8:64:
         1d:ee:5c:60:a8:ea:ad:55:76:73:71:9f:57:07:a3:71:7c:69:
         1d:ad:6e:0c:c7:10:3a:7a:30:dc:fb:08:ac:d3:1d:81:35:a8:
         7d:c6:9f:73:b9:fa:88:b5:99:c5:94:57:ee:b9:e0:de:cb:92:
         c0:ea:16:72:c3:94:72:6d:8a:af:e4:fc:9d:56:72:51:db:56:
         4b:46:7c:15:9a:c9:31:10:da:4a:45:03:cd:80:24:80:34:c6:
         8b:a3:a9:43:bd:33:27:d8:39:b0:59:a5:3e:d2:77:e5:25:03:
         b5:78:f6:28:91:b7:86:f5:0b:4d:29:70:2d:eb:57:9a:63:80:
         f8:82:da:21:e8:43:85:4c:c4:d8:ad:6b:d0:fc:15:55:ce:1c:
         36:24:75:8f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgwJUGG3o3eO072wgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjdmY2JiYTEtZGMxOS00NTkxLTk5N2UtYTRjNWMwNzc0
YzY3MB4XDTI0MTIxMzAyMDAzOVoXDTI1MDMxMzAxMDAzOVowLzEtMCsGA1UEAxMk
NDBhMzZmMDgtNjE5Yi00YTA1LWI4MTAtYzhkNGZiOTgyODUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk852NliMabzLdJhppeNW+hqWHSaDXJOlt0gC
MMQLH5yVnGEvnwu9lyVq1JZs6fAUZlr+4nbrx9XrXV1s/kJTQQEnLQoONt0LdwQ9
xCtoJCAqfhuHuNze8HcQSRkZ/OKuu3HGgQnJRsoR0DDygbotNwGFOjYsiYh9IaXP
/GRq0PRm3a9C3n21sJvC/5XpkfRKfBG+lszUqhREHPKthisjaAdNsBmUD0/7eUZX
tH5pS2gDiDLiZiJ5uUZREa8TV/9IzHLw6d/+te2qS9DdliJrqHO8jc/VCnAfWFfz
estSbavm/eDN8uLQxkKBzZuQIM6VSHGXNPwkedQMPOb7ITEv5QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJA2btHQrP9Ah/ZKnR96226Kt5y9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mN2Zj
YmJhMS1kYzE5LTQ1OTEtOTk3ZS1hNGM1YzA3NzRjNjcvNjUyNGU0Y2ItZTdkMi0z
NThkLTg5MzktNzI1NmM4NjVhYjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjdmY2JiYTEtZGMxOS00NTkxLTk5
N2UtYTRjNWMwNzc0YzY3L2Y3ZmNiYmExLWRjMTktNDU5MS05OTdlLWE0YzVjMDc3
NGM2Ny5jcmwwHwYDVR0jBBgwFoAUKvxPd2vZ5wXYf8/PdpdRffignwUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mN2ZjYmJhMS1kYzE5LTQ1OTEtOTk3ZS1hNGM1
YzA3NzRjNjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAK6AP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAnkU4LTHw6uYzx3UXx2kBo20dMP3CaFvkFd2gG90mQHGj8zyOk6
DKwEZzsO8LkVW6wPR+zqmtNVWOT8PfgQGQBFBQpYoPBMnbex+a3WQPlxphLyseGb
F09Spo2ICoAaegSB0yQ3dw1r+1u4ZB3uXGCo6q1VdnNxn1cHo3F8aR2tbgzHEDp6
MNz7CKzTHYE1qH3Gn3O5+oi1mcWUV+654N7LksDqFnLDlHJtiq/k/J1WclHbVktG
fBWayTEQ2kpFA82AJIA0xoujqUO9MyfYObBZpT7Sd+UlA7V49iiRt4b1C00pcC3r
V5pjgPiC2iHoQ4VMxNita9D8FVXOHDYkdY8=
-----END CERTIFICATE-----