Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/290c88d5-ffb7-3c6e-a7cc-361231ad99bb.roa
File:                     290c88d5-ffb7-3c6e-a7cc-361231ad99bb.roa (raw, json)
Hash identifier:          jNQsFSoQT8vJddn8f0yOHmy4n4eTRcyqV00MYrKNA5c=
Subject key identifier:   ED:02:30:56:C8:4C:0B:7E:0C:11:67:6E:D3:B9:63:2A:D3:CD:04:C6
Certificate issuer:       /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial:       010D0C9F4328584839EACB2C411DA8484351CB00
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/290c88d5-ffb7-3c6e-a7cc-361231ad99bb.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     22925
IP address blocks:        2610:f0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:cb:2c:41:1d:a8:48:43:51:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=1f5a5f51-237a-44d3-a0ca-20332fe84fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:d7:7f:20:68:fd:f0:67:96:0d:a0:78:f2:
                    5c:35:c9:c8:43:54:bd:28:52:93:ff:84:89:17:29:
                    7f:c0:db:65:76:3c:db:c1:3e:40:bc:d9:c4:06:43:
                    55:20:71:4f:c9:91:5f:29:5f:18:8c:af:9c:e2:9a:
                    8a:ea:44:11:ec:7d:f3:2e:88:ef:c8:81:4c:c5:4a:
                    75:17:32:23:73:3c:b7:ca:8d:a4:d5:a9:3a:bd:fb:
                    74:e7:7e:63:4d:85:a7:23:14:cd:63:52:88:2f:59:
                    03:40:87:29:02:2c:27:e8:0f:1b:62:ed:c3:8a:18:
                    4a:ac:47:25:56:d9:3e:ec:ac:ae:eb:60:05:84:22:
                    75:d0:0e:3c:77:ee:1c:86:a4:27:9c:a0:06:34:6a:
                    a2:0e:9b:f8:ca:a9:eb:b6:3e:8d:28:82:2b:6b:60:
                    7e:99:91:d1:a0:eb:97:3a:ba:1d:57:ca:01:08:46:
                    d2:1e:b5:2a:bb:3e:f7:78:9e:4b:d5:94:8c:31:d9:
                    16:ef:54:65:ff:bf:15:94:a5:80:01:26:52:f4:fb:
                    8e:6e:e2:37:ed:98:0a:8c:bb:df:16:8d:60:76:16:
                    36:9f:49:d5:75:a2:5c:64:40:81:32:d4:3e:83:b4:
                    d5:06:e1:6b:94:41:53:36:29:0f:fe:54:14:9b:09:
                    f9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:02:30:56:C8:4C:0B:7E:0C:11:67:6E:D3:B9:63:2A:D3:CD:04:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/290c88d5-ffb7-3c6e-a7cc-361231ad99bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl

            X509v3 Authority Key Identifier:
                keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:f0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e2:71:7e:21:f0:9e:f8:ed:31:f3:6e:a9:5b:51:38:4a:86:
         ab:18:b3:33:85:11:16:5f:c2:b5:f0:c1:b4:84:9d:46:ca:c7:
         ab:86:78:77:90:d3:9a:bb:48:2f:67:66:49:08:4c:39:f5:1c:
         2a:da:6a:0a:69:34:32:9f:7f:67:17:65:88:52:b8:bc:36:da:
         aa:0f:41:cb:ac:d1:34:12:15:fd:87:36:f9:3e:fa:dd:52:de:
         ce:74:7b:86:63:27:d5:24:d6:ea:d9:2e:09:a1:4b:a1:2d:0b:
         8e:0b:14:74:ac:91:a0:35:af:60:ca:4a:55:03:a9:6e:d0:43:
         f0:a2:47:71:77:db:d6:49:ad:92:9a:b8:3f:fb:63:0b:00:df:
         f5:bc:3d:4e:c7:24:52:b2:3f:4a:c3:23:e8:c3:d8:47:7b:fd:
         54:ce:99:9c:0b:91:d2:18:9b:1e:0e:51:7d:a5:94:1e:26:b5:
         5f:94:15:35:98:0b:95:f9:df:4c:14:9a:0e:6d:fc:82:8a:89:
         1b:0f:12:ea:27:32:04:45:ca:77:4f:35:4e:d5:e7:c3:1a:81:
         b4:40:7d:13:34:8c:24:96:59:06:ee:9b:26:44:5f:f3:a5:f8:
         5f:e1:96:61:5c:af:55:eb:e3:2f:45:20:b3:d7:c9:2f:ec:f7:
         48:a5:d7:91
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEg56sssQR2oSENRywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc4YTIzNGYtOTU1My00NDZhLTk2NWQtMGJmZmZhNDAy
ZjFiMB4XDTI0MTIxNjE0MDA1MVoXDTI1MDMxNjEzMDA1MVowLzEtMCsGA1UEAxMk
MWY1YTVmNTEtMjM3YS00NGQzLWEwY2EtMjAzMzJmZTg0ZmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AfXfyBo/fBnlg2gePJcNcnIQ1S9KFKT/4SJ
Fyl/wNtldjzbwT5AvNnEBkNVIHFPyZFfKV8YjK+c4pqK6kQR7H3zLojvyIFMxUp1
FzIjczy3yo2k1ak6vft0535jTYWnIxTNY1KIL1kDQIcpAiwn6A8bYu3DihhKrEcl
Vtk+7Kyu62AFhCJ10A48d+4chqQnnKAGNGqiDpv4yqnrtj6NKIIra2B+mZHRoOuX
OrodV8oBCEbSHrUquz73eJ5L1ZSMMdkW71Rl/78VlKWAASZS9PuObuI37ZgKjLvf
Fo1gdhY2n0nVdaJcZECBMtQ+g7TVBuFrlEFTNikP/lQUmwn5HwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFO0CMFbITAt+DBFnbtO5YyrTzQTGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhh
MjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZmZmE0MDJmMWIvMjkwYzg4ZDUtZmZiNy0z
YzZlLWE3Y2MtMzYxMjMxYWQ5OWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjc4YTIzNGYtOTU1My00NDZhLTk2
NWQtMGJmZmZhNDAyZjFiL2Y3OGEyMzRmLTk1NTMtNDQ2YS05NjVkLTBiZmZmYTQw
MmYxYi5jcmwwHwYDVR0jBBgwFoAUySL1rL077bzOZt54JOhaPckKjtYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhhMjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZm
ZmE0MDJmMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJhAA8DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBc4nF+IfCe+O0x826pW1E4SoarGLMzhREWX8K18MG0hJ1Gyserhnh3
kNOau0gvZ2ZJCEw59Rwq2moKaTQyn39nF2WIUri8NtqqD0HLrNE0EhX9hzb5Pvrd
Ut7OdHuGYyfVJNbq2S4JoUuhLQuOCxR0rJGgNa9gykpVA6lu0EPwokdxd9vWSa2S
mrg/+2MLAN/1vD1OxyRSsj9KwyPow9hHe/1UzpmcC5HSGJseDlF9pZQeJrVflBU1
mAuV+d9MFJoObfyCiokbDxLqJzIERcp3TzVO1efDGoG0QH0TNIwkllkG7psmRF/z
pfhf4ZZhXK9V6+MvRSCz18kv7PdIpdeR
-----END CERTIFICATE-----