Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/7aa82a3c-b900-3515-999b-3f371863fb0c.roa
File:                     7aa82a3c-b900-3515-999b-3f371863fb0c.roa (raw, json)
Hash identifier:          vdBMc2k855BtDhXNUrjJBy+ZvdIEoF+BSEq05VDlf2M=
Subject key identifier:   F4:E7:3B:31:65:5A:B0:C0:32:18:F2:9B:F1:BD:E4:76:D4:C9:B7:99
Certificate issuer:       /CN=1786b8ab-4949-4959-b26b-aaad20b28698
Certificate serial:       010D0C9F43285848037A44D2C6ACBED1C820AA80
Authority key identifier: E5:C0:98:4B:BF:62:F3:EA:E8:A5:A5:5D:EE:E8:D8:5A:96:12:ED:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/7aa82a3c-b900-3515-999b-3f371863fb0c.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20356
IP address blocks:        2607:640::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:44:d2:c6:ac:be:d1:c8:20:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1786b8ab-4949-4959-b26b-aaad20b28698
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=a71b8f6c-b8c5-4a65-8dca-729209cc7969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e4:7a:7a:fc:30:6f:08:38:d3:f7:78:2d:b2:
                    99:fe:7f:09:14:91:5f:24:f8:d6:0e:34:e6:3b:10:
                    68:a1:1c:a3:43:52:5f:81:61:64:3e:d4:dc:cd:d7:
                    53:b6:5f:9a:2e:7e:44:44:f3:6c:b6:30:bb:a5:5d:
                    48:e5:00:74:7e:f3:1d:34:28:e3:7c:16:12:2a:dd:
                    c1:42:9f:27:7b:41:b1:6b:be:9b:1b:4b:0e:dc:06:
                    bf:23:54:29:d3:53:9b:b5:ee:17:05:ee:4e:8d:ba:
                    45:fe:38:fb:8a:0e:25:79:9f:a7:bb:a8:73:0d:a8:
                    19:11:3e:a8:b3:b9:98:17:fc:53:88:c9:e1:1e:76:
                    56:b9:3d:b1:2f:de:a3:46:39:bf:aa:a4:e3:cc:01:
                    a7:2e:2e:13:38:5a:87:39:32:32:02:07:0b:e4:46:
                    a2:d2:d4:14:a0:21:46:4f:79:23:7f:60:67:0c:5c:
                    3d:21:2f:be:ec:05:25:92:22:1e:f4:11:d0:b4:05:
                    9a:8d:c2:81:f8:e1:67:4c:da:20:6a:b3:26:0c:ca:
                    11:19:71:1e:06:ba:89:87:80:73:94:a7:13:d3:18:
                    60:a4:8f:19:9b:74:f6:78:1b:7c:15:e2:f5:98:c6:
                    2b:d5:65:8b:31:35:1f:65:6b:6a:a7:79:ee:a2:f1:
                    ba:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E7:3B:31:65:5A:B0:C0:32:18:F2:9B:F1:BD:E4:76:D4:C9:B7:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/7aa82a3c-b900-3515-999b-3f371863fb0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/1786b8ab-4949-4959-b26b-aaad20b28698.crl

            X509v3 Authority Key Identifier:
                keyid:E5:C0:98:4B:BF:62:F3:EA:E8:A5:A5:5D:EE:E8:D8:5A:96:12:ED:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:5f:e9:a3:af:6f:e8:ec:c3:17:a6:35:25:4d:65:cf:48:b5:
         af:6a:6a:7d:1c:12:25:e8:f3:81:dd:50:98:04:18:c9:7e:89:
         00:22:a2:02:8e:9c:d4:bc:3c:49:ef:f9:9c:28:0d:9a:2e:f6:
         6a:04:4f:cc:13:80:8c:27:a8:bd:ba:15:75:70:2e:90:9e:78:
         9d:b8:2b:09:ca:01:56:d5:a0:32:88:6f:3d:19:48:cf:4b:f5:
         9b:77:8e:c4:a5:85:1c:3c:a9:06:8e:90:30:53:22:a1:fe:fd:
         8b:ee:a2:cf:80:c4:78:d6:5d:25:22:80:f4:d0:c0:ac:3c:c1:
         e5:63:85:ed:57:f7:09:e1:93:44:1e:e6:ed:15:26:3c:7e:56:
         e7:af:09:36:51:59:18:2d:7d:14:8e:d9:26:e8:63:d5:6e:4c:
         e8:f1:50:84:8b:33:42:7f:a3:23:21:de:11:69:26:36:bf:87:
         11:30:38:f6:97:eb:fe:20:4c:50:4e:c7:db:21:5f:fd:8f:a4:
         57:22:19:3d:ba:9d:15:ba:ec:c6:8b:03:12:cf:dc:ab:00:8e:
         b1:2e:cb:ff:b2:e8:86:f4:41:b9:0d:3a:c1:a9:08:d9:ee:4e:
         45:c9:84:55:45:a5:7f:74:c1:b4:b4:ba:ae:7d:93:c1:3e:46:
         74:26:98:00
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgDekTSxqy+0cggqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc4NmI4YWItNDk0OS00OTU5LWIyNmItYWFhZDIwYjI4
Njk4MB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
YTcxYjhmNmMtYjhjNS00YTY1LThkY2EtNzI5MjA5Y2M3OTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuR6evwwbwg40/d4LbKZ/n8JFJFfJPjWDjTm
OxBooRyjQ1JfgWFkPtTczddTtl+aLn5ERPNstjC7pV1I5QB0fvMdNCjjfBYSKt3B
Qp8ne0Gxa76bG0sO3Aa/I1Qp01Obte4XBe5OjbpF/jj7ig4leZ+nu6hzDagZET6o
s7mYF/xTiMnhHnZWuT2xL96jRjm/qqTjzAGnLi4TOFqHOTIyAgcL5Eai0tQUoCFG
T3kjf2BnDFw9IS++7AUlkiIe9BHQtAWajcKB+OFnTNogarMmDMoRGXEeBrqJh4Bz
lKcT0xhgpI8Zm3T2eBt8FeL1mMYr1WWLMTUfZWtqp3nuovG6hwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPTnOzFlWrDAMhjym/G95HbUybeZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xNzg2
YjhhYi00OTQ5LTQ5NTktYjI2Yi1hYWFkMjBiMjg2OTgvN2FhODJhM2MtYjkwMC0z
NTE1LTk5OWItM2YzNzE4NjNmYjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTc4NmI4YWItNDk0OS00OTU5LWIy
NmItYWFhZDIwYjI4Njk4LzE3ODZiOGFiLTQ5NDktNDk1OS1iMjZiLWFhYWQyMGIy
ODY5OC5jcmwwHwYDVR0jBBgwFoAU5cCYS79i8+ropaVd7ujYWpYS7UcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xNzg2YjhhYi00OTQ5LTQ5NTktYjI2Yi1hYWFk
MjBiMjg2OTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcGQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAxX+mjr2/o7MMXpjUlTWXPSLWvamp9HBIl6POB3VCYBBjJfokAIqIC
jpzUvDxJ7/mcKA2aLvZqBE/ME4CMJ6i9uhV1cC6QnniduCsJygFW1aAyiG89GUjP
S/Wbd47EpYUcPKkGjpAwUyKh/v2L7qLPgMR41l0lIoD00MCsPMHlY4XtV/cJ4ZNE
HubtFSY8flbnrwk2UVkYLX0Ujtkm6GPVbkzo8VCEizNCf6MjId4RaSY2v4cRMDj2
l+v+IExQTsfbIV/9j6RXIhk9up0VuuzGiwMSz9yrAI6xLsv/suiG9EG5DTrBqQjZ
7k5FyYRVRaV/dMG0tLqufZPBPkZ0JpgA
-----END CERTIFICATE-----