Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/229f4872-a0da-399b-9864-155c7c46ff10.roa
File:                     229f4872-a0da-399b-9864-155c7c46ff10.roa (raw, json)
Hash identifier:          Q75blxgvJt7CXG8IdxuEIgdKDgt6sgvBAN8zZn4Y4oU=
Subject key identifier:   E5:79:D1:33:8A:73:F8:FE:5E:D4:D3:21:91:C6:12:64:F0:4B:9C:C5
Certificate issuer:       /CN=d826c88d-e62d-45fe-a08c-0b0a021a5314
Certificate serial:       010D0C9F43285847EFEF844C82BAF0258913CE20
Authority key identifier: A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/229f4872-a0da-399b-9864-155c7c46ff10.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     11426
IP address blocks:        2620:7:2000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:84:4c:82:ba:f0:25:89:13:ce:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d826c88d-e62d-45fe-a08c-0b0a021a5314
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=fff0f2c8-ac5e-4a4a-9ead-08a217cc760f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:0e:1c:dc:46:90:0e:0b:47:b5:37:03:d7:
                    e5:38:78:c2:3c:64:a9:ac:ac:59:38:2e:59:b6:5e:
                    d5:66:1e:18:83:f2:c5:c7:85:e2:be:27:8a:b4:60:
                    ac:4b:79:73:08:39:c3:2a:2f:7a:92:1c:23:22:21:
                    aa:cf:89:1f:da:da:7a:b5:3f:7b:d2:1b:64:c9:4b:
                    58:93:2b:0e:bc:e1:27:b9:bc:d9:a7:22:57:65:02:
                    c2:9f:cd:f7:1b:37:53:a7:a2:13:25:f3:a2:b2:a0:
                    fa:11:51:13:6d:61:70:b6:78:0e:f2:cf:ac:4c:86:
                    d8:a7:b7:aa:f4:ae:99:89:b6:7a:66:22:08:35:ec:
                    90:87:22:a8:e9:4c:c4:90:31:97:e1:2e:c8:3c:bf:
                    2e:c5:f7:27:7e:68:82:91:9c:1e:d9:15:fa:bc:bb:
                    6d:d9:40:51:29:fe:32:2d:2b:30:25:32:a0:6c:0e:
                    ee:c1:31:d5:f7:02:d8:51:e0:a7:5c:80:00:a2:71:
                    84:0b:f9:5b:83:31:90:2f:a5:96:49:47:50:bd:50:
                    5e:8c:31:3b:36:3f:28:4b:b6:11:b8:cd:d5:e8:39:
                    88:4d:ff:de:0a:03:11:16:08:4b:62:a6:55:09:aa:
                    38:ef:35:80:d1:b8:40:9f:50:ba:74:68:38:5e:1b:
                    a5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:79:D1:33:8A:73:F8:FE:5E:D4:D3:21:91:C6:12:64:F0:4B:9C:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/229f4872-a0da-399b-9864-155c7c46ff10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.crl

            X509v3 Authority Key Identifier:
                keyid:A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:7:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:d2:61:98:66:1d:32:82:18:d8:72:36:ac:c7:34:34:a3:f9:
         46:fb:53:6b:5c:ed:92:9f:8b:39:09:43:7a:7d:f0:45:d6:d8:
         0f:8f:da:d2:8d:94:8d:d7:6e:7a:41:ca:f4:55:6e:13:87:ee:
         93:bc:7e:b0:ee:12:f7:29:4f:da:1b:04:5c:b5:1d:3a:fa:5f:
         09:7f:18:a5:0a:71:19:c7:a3:62:34:2e:da:19:62:80:aa:77:
         74:22:31:03:77:73:62:39:31:99:df:6a:98:40:c0:5f:59:75:
         9d:da:81:01:31:4f:5e:32:ba:91:eb:56:17:eb:c4:71:10:41:
         66:c9:1c:c7:ec:56:28:fc:c1:d9:2f:77:8e:0d:f9:2f:e3:f5:
         80:8c:45:8c:2e:91:69:63:f0:e1:b1:0b:32:c3:98:c6:fe:8f:
         49:f7:b5:ce:f0:64:e6:f8:95:1d:07:ef:5c:cf:44:7d:cb:3b:
         d5:6e:4b:3a:4c:a5:1c:d4:cf:1f:fa:78:59:d0:b5:36:ca:96:
         b7:9e:43:15:58:6d:1d:a9:3a:eb:76:43:96:0e:25:11:67:4a:
         bd:07:2c:e7:3a:e7:ef:d7:e2:2a:94:13:70:03:48:2a:59:c8:
         49:ee:fe:1b:82:3f:21:e9:56:62:b4:16:8f:6a:58:87:6a:6c:
         90:2f:e4:69
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfv74RMgrrwJYkTziAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDgyNmM4OGQtZTYyZC00NWZlLWEwOGMtMGIwYTAyMWE1
MzE0MB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk
ZmZmMGYyYzgtYWM1ZS00YTRhLTllYWQtMDhhMjE3Y2M3NjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFgOHNxGkA4LR7U3A9flOHjCPGSprKxZOC5Z
tl7VZh4Yg/LFx4XivieKtGCsS3lzCDnDKi96khwjIiGqz4kf2tp6tT970htkyUtY
kysOvOEnubzZpyJXZQLCn833GzdTp6ITJfOisqD6EVETbWFwtngO8s+sTIbYp7eq
9K6ZibZ6ZiIINeyQhyKo6UzEkDGX4S7IPL8uxfcnfmiCkZwe2RX6vLtt2UBRKf4y
LSswJTKgbA7uwTHV9wLYUeCnXIAAonGEC/lbgzGQL6WWSUdQvVBejDE7Nj8oS7YR
uM3V6DmITf/eCgMRFghLYqZVCao47zWA0bhAn1C6dGg4Xhul/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOV50TOKc/j+XtTTIZHGEmTwS5zFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kODI2
Yzg4ZC1lNjJkLTQ1ZmUtYTA4Yy0wYjBhMDIxYTUzMTQvMjI5ZjQ4NzItYTBkYS0z
OTliLTk4NjQtMTU1YzdjNDZmZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDgyNmM4OGQtZTYyZC00NWZlLWEw
OGMtMGIwYTAyMWE1MzE0L2Q4MjZjODhkLWU2MmQtNDVmZS1hMDhjLTBiMGEwMjFh
NTMxNC5jcmwwHwYDVR0jBBgwFoAUoc+i8N7KpEuZE/Pqkvx2np/ugGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kODI2Yzg4ZC1lNjJkLTQ1ZmUtYTA4Yy0wYjBh
MDIxYTUzMTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAByAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJDSYZhmHTKCGNhyNqzHNDSj+Ub7U2tc7ZKfizkJQ3p98EXW2A+P
2tKNlI3XbnpByvRVbhOH7pO8frDuEvcpT9obBFy1HTr6Xwl/GKUKcRnHo2I0LtoZ
YoCqd3QiMQN3c2I5MZnfaphAwF9ZdZ3agQExT14yupHrVhfrxHEQQWbJHMfsVij8
wdkvd44N+S/j9YCMRYwukWlj8OGxCzLDmMb+j0n3tc7wZOb4lR0H71zPRH3LO9Vu
SzpMpRzUzx/6eFnQtTbKlreeQxVYbR2pOut2Q5YOJRFnSr0HLOc65+/X4iqUE3AD
SCpZyEnu/huCPyHpVmK0Fo9qWIdqbJAv5Gk=
-----END CERTIFICATE-----