Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/900c34ab-638c-3774-a83f-faf44c9cf9a7.roa
File:                     900c34ab-638c-3774-a83f-faf44c9cf9a7.roa (raw, json)
Hash identifier:          L/7wcXa5EMzgzNiUJvO/2TPuAlYdkodP7FdxoCSmhls=
Subject key identifier:   20:2B:C5:F5:0A:20:C7:5C:82:4C:B8:95:70:11:3F:F1:45:E8:B5:C5
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F432858486960686949E045C90A770700
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/900c34ab-638c-3774-a83f-faf44c9cf9a7.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     393885
IP address blocks:        2604:4a00:2000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:68:69:49:e0:45:c9:0a:77:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=cb23f108-90e4-4a5c-8a43-1e2780bb63ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:63:7f:cc:ac:c6:fb:64:2c:44:db:90:0e:
                    f7:a2:a3:47:ff:72:f8:03:5b:5d:fe:29:4d:6b:69:
                    3e:7c:8a:ac:70:98:10:1a:a5:3e:09:5a:07:28:25:
                    45:1c:2e:32:9b:a4:24:8f:14:5e:d8:50:11:b3:50:
                    5f:4e:cf:8f:dd:77:19:ec:48:76:62:2a:56:36:bc:
                    76:ff:84:00:67:30:b7:e7:5a:e0:72:ad:bb:9b:42:
                    fe:3f:7c:85:27:c2:51:e0:48:70:c2:73:53:fb:6a:
                    9e:a7:a3:2c:88:f5:6a:ee:93:30:43:6a:54:ba:d7:
                    a8:94:ea:15:74:11:d4:8c:7c:91:45:0e:6c:c3:fe:
                    3f:44:f6:d9:9d:4e:e9:f3:c5:1b:e0:61:c6:14:0e:
                    fa:0f:b6:ab:36:07:47:d6:71:8b:d8:ee:ec:69:0b:
                    a7:79:7a:8f:24:ca:b4:45:f2:19:4a:48:55:e3:20:
                    54:3f:8c:a7:9c:3c:6c:aa:dd:02:cd:2c:77:ce:b1:
                    da:7c:84:53:a0:83:f9:0e:ea:f3:a4:64:d6:d3:50:
                    f0:bf:32:81:83:da:9f:9e:bb:14:3c:c6:43:ae:93:
                    8c:a5:b3:97:6c:ef:ed:13:dc:30:32:1c:31:10:6e:
                    0e:09:ba:31:fa:1b:3a:98:5c:dd:fd:7a:c5:ac:d9:
                    60:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2B:C5:F5:0A:20:C7:5C:82:4C:B8:95:70:11:3F:F1:45:E8:B5:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/900c34ab-638c-3774-a83f-faf44c9cf9a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ae:40:56:fa:26:22:3c:b7:22:b9:d3:ae:15:d2:73:5a:69:
         0f:e9:c5:5a:b5:85:06:b6:bb:5a:b0:52:f1:c9:b4:25:25:76:
         73:7d:79:a8:96:c1:05:28:df:fe:bd:91:ac:b0:b7:da:c7:59:
         36:88:a9:3d:f9:c6:a1:ac:10:bb:cd:5d:27:21:0a:63:c4:d6:
         69:45:ae:f3:ee:fe:0a:f0:07:f3:23:fd:3a:b7:b4:c3:a9:12:
         d3:27:c7:fc:26:e7:ea:1b:6b:fd:7a:c0:80:2b:94:11:ad:5d:
         26:5e:9c:92:16:ca:d0:0c:ff:ad:9e:4b:16:e0:3d:73:56:8e:
         97:e2:43:bb:fc:1a:ca:bf:ca:78:7f:92:5a:80:93:bb:e8:75:
         2c:bb:1f:8a:fd:0e:22:5c:61:eb:45:34:b5:e4:5e:1b:f2:3a:
         c9:f8:60:5c:33:9e:f5:98:40:40:cb:f4:69:aa:ca:4a:5d:ef:
         62:17:c5:1f:f6:6e:8a:50:4b:fe:97:6e:90:9f:79:09:e8:92:
         0a:40:2e:74:d4:78:5f:ae:62:46:eb:67:08:19:d6:37:a5:b6:
         6f:ab:b0:86:91:6e:95:22:29:3c:c3:c9:3b:f3:85:ae:d9:e7:
         7d:1c:30:bc:78:a6:db:e9:0d:4d:10:8e:27:e2:1c:e3:4e:e7:
         e9:87:1f:b6
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhpYGhpSeBFyQp3BwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk
NjZkMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk
Y2IyM2YxMDgtOTBlNC00YTVjLThhNDMtMWUyNzgwYmI2M2FkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD9jf8ysxvtkLETbkA73oqNH/3L4A1td/ilN
a2k+fIqscJgQGqU+CVoHKCVFHC4ym6QkjxRe2FARs1BfTs+P3XcZ7Eh2YipWNrx2
/4QAZzC351rgcq27m0L+P3yFJ8JR4EhwwnNT+2qep6MsiPVq7pMwQ2pUuteolOoV
dBHUjHyRRQ5sw/4/RPbZnU7p88Ub4GHGFA76D7arNgdH1nGL2O7saQuneXqPJMq0
RfIZSkhV4yBUP4ynnDxsqt0CzSx3zrHafIRToIP5DurzpGTW01DwvzKBg9qfnrsU
PMZDrpOMpbOXbO/tE9wwMhwxEG4OCbox+hs6mFzd/XrFrNlgzQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCArxfUKIMdcgky4lXARP/FF6LXFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk
ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvOTAwYzM0YWItNjM4Yy0z
Nzc0LWE4M2YtZmFmNDRjOWNmOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl
ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1
ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh
M2UzNWQ2NmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRKACAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWq5AVvomIjy3IrnTrhXSc1ppD+nFWrWFBra7WrBS8cm0JSV2c315
qJbBBSjf/r2RrLC32sdZNoipPfnGoawQu81dJyEKY8TWaUWu8+7+CvAH8yP9Ore0
w6kS0yfH/Cbn6htr/XrAgCuUEa1dJl6ckhbK0Az/rZ5LFuA9c1aOl+JDu/wayr/K
eH+SWoCTu+h1LLsfiv0OIlxh60U0teReG/I6yfhgXDOe9ZhAQMv0aarKSl3vYhfF
H/ZuilBL/pdukJ95CeiSCkAudNR4X65iRutnCBnWN6W2b6uwhpFulSIpPMPJO/OF
rtnnfRwwvHim2+kNTRCOJ+Ic407n6Ycftg==
-----END CERTIFICATE-----