Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa
File:                     f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa (raw, json)
Hash identifier:          gLnxx9CdEarjphhcpypt7FMfCSu6x8KG3PO900wZBqc=
Subject key identifier:   D1:A7:99:BC:9F:31:F8:0E:6D:9C:30:8D:5C:A1:31:7F:74:CC:C8:FF
Certificate issuer:       /CN=1a8794d9-eb16-4b3c-b869-96971b72a93b
Certificate serial:       010D0C9F432858484D758A82E088CD1F64076080
Authority key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     32140
IP address blocks:        2602:806:f000::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:8a:82:e0:88:cd:1f:64:07:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=3c8c9250-b22b-4dcc-bf57-a880d0d6bc50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3e:5c:fe:8f:2a:51:83:59:ea:6f:cb:35:3c:
                    d1:96:37:e0:e5:ec:e3:d5:d4:6b:52:0a:fa:d7:4a:
                    41:ea:7d:2c:5c:ef:e9:8d:e6:03:72:89:58:8d:e3:
                    ee:82:dd:92:a0:16:db:b4:08:c8:37:2b:e6:03:f2:
                    89:d5:6f:3a:62:f7:74:c6:b6:90:01:ad:53:17:87:
                    3b:8a:04:1b:e2:46:35:4e:95:96:0b:61:50:11:6e:
                    d0:81:96:87:90:16:b0:90:06:3c:88:d0:48:67:fa:
                    ca:77:35:f1:91:61:9e:83:c9:b9:70:ad:50:1c:59:
                    fb:e6:83:6c:f4:45:26:da:c8:89:59:bd:a4:0a:1d:
                    1b:77:54:4c:90:c7:dc:51:c5:11:5e:97:80:b1:d3:
                    9c:b1:9b:aa:9e:95:db:56:5a:8a:90:a5:b3:73:12:
                    d1:61:b9:1b:43:85:5a:46:1d:71:19:45:51:30:f5:
                    bb:fa:ec:35:c2:fc:8b:57:26:2b:45:fc:9e:ef:43:
                    86:2e:25:17:bd:ad:eb:4b:57:d3:48:c0:d1:93:d5:
                    27:ec:33:e0:ab:1d:4a:f7:b0:b0:d1:fa:f5:f6:2a:
                    4d:ec:a8:3b:db:2c:b1:46:8e:b6:0b:5f:f8:87:43:
                    a9:52:e4:72:70:a5:4a:a9:a5:d6:af:fd:84:a1:0d:
                    56:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A7:99:BC:9F:31:F8:0E:6D:9C:30:8D:5C:A1:31:7F:74:CC:C8:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl

            X509v3 Authority Key Identifier:
                keyid:58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:806:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:5b:67:58:23:cc:82:2c:87:8e:c7:d2:6f:43:ea:5e:16:a7:
         2d:da:c1:23:d5:46:43:13:74:ad:f2:a1:f1:25:81:49:cc:67:
         bf:06:85:75:c8:2f:09:3b:3b:57:58:95:30:4e:53:c3:f4:8a:
         3f:02:75:eb:c5:df:89:f1:0b:42:0d:b3:f8:e3:37:ed:eb:31:
         07:48:41:21:42:6d:66:87:3f:ed:55:e7:d4:11:86:9b:60:f0:
         94:4e:f5:f0:7d:71:ec:ba:ed:29:4f:0c:4d:a1:c2:f9:6f:5a:
         b4:92:c4:6e:3f:0a:d1:85:97:9a:74:5d:81:e7:dd:55:3b:45:
         55:5e:5e:b1:28:98:01:01:0e:2b:9e:17:e2:ca:d7:1b:18:a6:
         2e:a1:58:85:c4:f5:38:82:ee:88:86:43:eb:42:5c:a8:58:da:
         d4:39:e7:b3:81:79:e2:32:b9:a0:4d:f5:25:24:7d:35:b1:64:
         95:d6:0d:6b:24:18:a0:d3:62:d7:82:0d:38:12:00:9b:4b:c0:
         9e:19:a4:a0:be:02:7a:22:bb:58:50:50:1d:18:1e:03:c0:e4:
         2a:dc:e1:53:81:46:e4:5c:cc:4c:b6:66:f7:d9:15:2e:ab:d2:
         e8:90:5e:0f:52:f1:f5:5b:a8:b1:06:ce:9f:95:84:cb:9f:b9:
         8c:60:ad:83
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhNdYqC4IjNH2QHYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJh
OTNiMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk
M2M4YzkyNTAtYjIyYi00ZGNjLWJmNTctYTg4MGQwZDZiYzUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD5c/o8qUYNZ6m/LNTzRljfg5ezj1dRrUgr6
10pB6n0sXO/pjeYDcolYjePugt2SoBbbtAjINyvmA/KJ1W86Yvd0xraQAa1TF4c7
igQb4kY1TpWWC2FQEW7QgZaHkBawkAY8iNBIZ/rKdzXxkWGeg8m5cK1QHFn75oNs
9EUm2siJWb2kCh0bd1RMkMfcUcURXpeAsdOcsZuqnpXbVlqKkKWzcxLRYbkbQ4Va
Rh1xGUVRMPW7+uw1wvyLVyYrRfye70OGLiUXva3rS1fTSMDRk9Un7DPgqx1K97Cw
0fr19ipN7Kg72yyxRo62C1/4h0OpUuRycKVKqaXWr/2EoQ1WeQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNGnmbyfMfgObZwwjVyhMX90zMj/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3
OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvZjI1OGZlZjgtMGQxYy0z
N2YxLWE5NDMtZGIyZTZiMjM2ZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE4Nzk0ZDktZWIxNi00YjNjLWI4
NjktOTY5NzFiNzJhOTNiLzFhODc5NGQ5LWViMTYtNGIzYy1iODY5LTk2OTcxYjcy
YTkzYi5jcmwwHwYDVR0jBBgwFoAUWGSrqLbG9Ghvh86IX/GHzHvf2y0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3
MWI3MmE5M2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIBvAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH5bZ1gjzIIsh47H0m9D6l4Wpy3awSPVRkMTdK3yofElgUnMZ78G
hXXILwk7O1dYlTBOU8P0ij8CdevF34nxC0INs/jjN+3rMQdIQSFCbWaHP+1V59QR
hptg8JRO9fB9cey67SlPDE2hwvlvWrSSxG4/CtGFl5p0XYHn3VU7RVVeXrEomAEB
DiueF+LK1xsYpi6hWIXE9TiC7oiGQ+tCXKhY2tQ557OBeeIyuaBN9SUkfTWxZJXW
DWskGKDTYteCDTgSAJtLwJ4ZpKC+Anoiu1hQUB0YHgPA5Crc4VOBRuRczEy2ZvfZ
FS6r0uiQXg9S8fVbqLEGzp+VhMufuYxgrYM=
-----END CERTIFICATE-----