Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/32c21ecc-594c-3bb9-969d-76f3ad3b7aa2.roa
File:                     32c21ecc-594c-3bb9-969d-76f3ad3b7aa2.roa (raw, json)
Hash identifier:          c8v35Sm5jqk4M9vW1LQ6ncbBEFgXxRGm+6So0L5+M1c=
Subject key identifier:   C3:D1:48:8B:52:A4:95:00:5C:E5:B4:D6:BD:9F:C6:48:4A:D9:C7:8D
Certificate issuer:       /CN=5204fe74-822a-4ff7-8d74-0c02c7243bd9
Certificate serial:       010D0C9F43285848494574333FEA9EF1AADA9280
Authority key identifier: 49:20:D0:2D:19:C8:02:93:27:68:D6:01:30:78:99:AE:F5:45:71:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/32c21ecc-594c-3bb9-969d-76f3ad3b7aa2.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     1027
IP address blocks:        2606:e440::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:74:33:3f:ea:9e:f1:aa:da:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5204fe74-822a-4ff7-8d74-0c02c7243bd9
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=63de707a-5e7f-45f6-a312-1de2bfbd7d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:4d:66:b0:68:e5:23:01:20:a9:01:65:b9:
                    a6:fc:8a:1c:2c:86:1d:90:c2:8d:2d:97:f4:d7:88:
                    cb:cc:4d:d3:31:80:b9:3e:5e:dd:53:f9:62:66:50:
                    a9:01:0c:c9:3e:48:58:43:07:b2:eb:90:9d:bf:6d:
                    01:8d:b4:69:a8:e4:ef:0c:3c:cf:4b:db:92:47:af:
                    cb:c4:24:f4:49:b4:a0:0a:ca:2b:95:37:52:56:3c:
                    27:d4:5c:6c:1b:59:f2:2f:35:a2:78:44:87:3a:40:
                    9b:b7:e6:c1:41:1c:cc:f0:1b:40:a8:e4:a3:af:de:
                    7a:88:49:6f:84:c6:8e:6f:1a:d0:ff:5b:4c:29:ec:
                    a2:0b:5f:94:af:6b:6f:c4:f3:15:e6:32:ce:21:35:
                    47:52:c6:df:aa:03:19:81:b1:f6:d9:89:78:84:28:
                    43:f2:da:a5:78:42:82:af:9d:ee:5c:17:e3:58:2f:
                    6a:ef:7e:96:d0:bc:b1:7c:bb:62:24:eb:7b:dc:d0:
                    bd:96:b7:02:99:50:76:31:55:47:22:6c:d6:f5:49:
                    65:59:75:6e:88:18:e1:36:00:43:06:c8:55:82:57:
                    8b:aa:77:1e:ee:7d:5f:aa:b4:d4:68:33:46:5a:2a:
                    30:79:ba:3c:c8:c3:5f:9f:70:01:0d:48:b3:b3:92:
                    d3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D1:48:8B:52:A4:95:00:5C:E5:B4:D6:BD:9F:C6:48:4A:D9:C7:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/32c21ecc-594c-3bb9-969d-76f3ad3b7aa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/5204fe74-822a-4ff7-8d74-0c02c7243bd9.crl

            X509v3 Authority Key Identifier:
                keyid:49:20:D0:2D:19:C8:02:93:27:68:D6:01:30:78:99:AE:F5:45:71:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:e440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:bb:9f:2e:25:08:49:42:1d:08:95:cb:6d:b5:2b:2d:64:f1:
         7e:f1:98:6c:9e:3c:47:62:8e:f2:6f:ab:31:02:cb:f4:7e:2d:
         6b:de:01:ee:a9:eb:b8:04:08:1a:53:f0:84:98:6e:8b:1e:9c:
         d5:fd:8f:2f:3e:16:da:37:0e:5d:e1:92:cb:79:1d:28:b0:0a:
         e9:84:32:65:a1:2e:9a:7a:0a:4c:47:4c:59:5f:2c:f7:11:58:
         62:e8:75:d3:77:c6:9e:b2:27:a0:01:b7:f0:2b:85:12:35:48:
         8c:b3:4a:de:01:b0:91:8e:b3:47:12:d3:af:9a:6b:70:ff:30:
         97:a8:b8:89:63:df:ff:3a:a9:90:42:b5:29:fe:f7:d5:25:0e:
         9f:98:4b:db:fe:ae:2c:f3:f9:31:b5:02:c0:55:c8:ef:41:f1:
         6b:ed:f9:4c:eb:24:73:0b:34:46:71:ae:db:1a:7d:61:e6:ef:
         8f:77:c1:e4:09:df:ca:38:86:01:41:4e:ad:75:12:43:56:1c:
         ea:02:59:e7:fd:e7:7e:2c:f6:43:34:cf:cb:b6:cd:61:ab:41:
         75:8b:ca:74:ae:09:5a:bf:f3:2b:77:3f:7a:2e:3f:f7:87:5c:
         c7:f2:b3:59:86:4d:2d:96:0a:39:47:15:01:55:a7:f5:53:70:
         62:90:fc:be
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhJRXQzP+qe8arakoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIwNGZlNzQtODIyYS00ZmY3LThkNzQtMGMwMmM3MjQz
YmQ5MB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk
NjNkZTcwN2EtNWU3Zi00NWY2LWEzMTItMWRlMmJmYmQ3ZDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRFNZrBo5SMBIKkBZbmm/IocLIYdkMKNLZf0
14jLzE3TMYC5Pl7dU/liZlCpAQzJPkhYQwey65Cdv20BjbRpqOTvDDzPS9uSR6/L
xCT0SbSgCsorlTdSVjwn1FxsG1nyLzWieESHOkCbt+bBQRzM8BtAqOSjr956iElv
hMaObxrQ/1tMKeyiC1+Ur2tvxPMV5jLOITVHUsbfqgMZgbH22Yl4hChD8tqleEKC
r53uXBfjWC9q736W0LyxfLtiJOt73NC9lrcCmVB2MVVHImzW9UllWXVuiBjhNgBD
BshVgleLqnce7n1fqrTUaDNGWiowebo8yMNfn3ABDUizs5LTPwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMPRSItSpJUAXOW01r2fxkhK2ceNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MjA0
ZmU3NC04MjJhLTRmZjctOGQ3NC0wYzAyYzcyNDNiZDkvMzJjMjFlY2MtNTk0Yy0z
YmI5LTk2OWQtNzZmM2FkM2I3YWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTIwNGZlNzQtODIyYS00ZmY3LThk
NzQtMGMwMmM3MjQzYmQ5LzUyMDRmZTc0LTgyMmEtNGZmNy04ZDc0LTBjMDJjNzI0
M2JkOS5jcmwwHwYDVR0jBBgwFoAUSSDQLRnIApMnaNYBMHiZrvVFcagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81MjA0ZmU3NC04MjJhLTRmZjctOGQ3NC0wYzAy
YzcyNDNiZDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbkQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCMu58uJQhJQh0IlctttSstZPF+8ZhsnjxHYo7yb6sxAsv0fi1r3gHu
qeu4BAgaU/CEmG6LHpzV/Y8vPhbaNw5d4ZLLeR0osArphDJloS6aegpMR0xZXyz3
EVhi6HXTd8aesiegAbfwK4USNUiMs0reAbCRjrNHEtOvmmtw/zCXqLiJY9//OqmQ
QrUp/vfVJQ6fmEvb/q4s8/kxtQLAVcjvQfFr7flM6yRzCzRGca7bGn1h5u+Pd8Hk
Cd/KOIYBQU6tdRJDVhzqAlnn/ed+LPZDNM/Lts1hq0F1i8p0rglav/Mrdz96Lj/3
h1zH8rNZhk0tlgo5RxUBVaf1U3BikPy+
-----END CERTIFICATE-----