Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/00afe954-cb24-34e5-9db9-d86711c1a5cf.roa
File:                     00afe954-cb24-34e5-9db9-d86711c1a5cf.roa (raw, json)
Hash identifier:          EgiC6f0djWK8s8xBauIlaxiez9xqI1+FbFv6OoMPaFQ=
Subject key identifier:   CF:16:EB:02:67:AD:00:3C:11:CC:8A:83:91:CA:9D:06:08:C8:3C:F5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037AF6687155C51B79706000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/00afe954-cb24-34e5-9db9-d86711c1a5cf.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10838
IP address blocks:        2600:5c00::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:f6:68:71:55:c5:1b:79:70:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=23ef39a0-02cf-40c3-9dad-c9e9bdc4aedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:39:c9:c9:9e:12:7a:06:cb:72:93:b1:8b:b8:
                    e3:84:5e:30:c6:21:6a:a6:97:3f:15:6b:16:bb:27:
                    68:e5:d7:c2:17:bd:b2:0e:bb:4e:41:6d:f6:87:e5:
                    1f:14:97:ac:a4:26:f4:d1:e8:2a:29:b9:10:1b:69:
                    08:16:df:d2:3a:db:65:91:bf:cf:6a:4f:7c:ca:e7:
                    f3:8b:fd:a2:da:78:ff:39:96:70:a9:46:32:96:d6:
                    cb:8f:ba:a4:22:fc:43:62:95:b9:53:fd:4f:b5:e2:
                    08:b5:e1:9b:62:f2:52:e9:b7:95:24:08:92:de:c8:
                    35:4c:93:8a:9c:22:ed:06:32:14:6b:43:46:d2:3f:
                    94:8d:bc:48:dc:d2:ae:28:a8:48:a9:7b:8b:c6:66:
                    c6:23:3d:09:a1:fc:38:f5:cb:df:fe:8d:40:a8:1f:
                    2e:16:83:35:77:b2:b6:1f:36:b2:db:ed:aa:c3:75:
                    6a:a2:13:52:e4:06:60:2f:aa:f9:80:ce:59:0a:15:
                    43:d8:10:8b:d5:83:54:ab:81:52:0d:42:32:3e:7a:
                    d2:56:10:f0:1e:dc:0b:13:28:9a:90:c2:b6:61:b8:
                    e2:6e:b3:59:29:4f:31:ff:07:ef:f0:d9:da:de:ec:
                    65:51:c7:9e:d3:1e:d3:0f:85:29:a3:96:88:91:93:
                    f3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:16:EB:02:67:AD:00:3C:11:CC:8A:83:91:CA:9D:06:08:C8:3C:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/00afe954-cb24-34e5-9db9-d86711c1a5cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:5c00::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:bb:ef:cd:e6:c2:52:ac:5f:f3:39:9c:68:01:7d:50:b0:04:
         dc:20:ab:7e:07:25:f7:e0:cc:6d:c1:2f:63:c7:d5:70:c8:9a:
         48:b8:19:e3:2e:c7:b3:57:09:34:3b:5d:94:4c:68:65:bd:76:
         36:ec:8f:f3:84:40:6d:2a:f0:ce:da:c9:c0:89:22:d3:0d:3d:
         d8:6c:80:63:cf:5d:d4:73:7d:32:02:16:c7:83:cb:c3:b7:c1:
         e7:21:61:e5:e4:76:cf:55:4e:88:b2:fc:43:89:60:0e:21:12:
         a5:05:11:cf:b4:58:13:e6:6a:40:69:c9:10:97:4e:0c:94:52:
         4a:77:99:e1:fe:ca:2f:8c:a6:da:11:5f:e1:3d:6e:97:bf:ba:
         91:8c:18:46:a3:a4:cb:b1:30:b6:df:0b:59:fa:4a:63:cd:0e:
         75:f0:cf:87:5e:cd:c1:9f:28:32:16:e1:b5:03:5c:bf:65:49:
         a7:d4:d6:a2:e5:83:45:d9:7b:ca:15:31:8b:e8:0a:99:4c:6c:
         3f:b0:e6:aa:63:fe:39:f7:be:8d:3e:1d:0e:2c:8a:c9:50:31:
         e2:92:0d:e2:91:cc:af:15:8b:b3:23:de:e0:b1:69:ba:f3:7a:
         51:73:00:17:6d:fc:fe:34:2a:0a:c0:7e:53:4e:59:82:de:18:
         f8:b9:36:c9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgDevZocVXFG3lwYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
MjNlZjM5YTAtMDJjZi00MGMzLTlkYWQtYzllOWJkYzRhZWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTnJyZ4SegbLcpOxi7jjhF4wxiFqppc/FWsW
uydo5dfCF72yDrtOQW32h+UfFJespCb00egqKbkQG2kIFt/SOttlkb/Pak98yufz
i/2i2nj/OZZwqUYyltbLj7qkIvxDYpW5U/1PteIIteGbYvJS6beVJAiS3sg1TJOK
nCLtBjIUa0NG0j+UjbxI3NKuKKhIqXuLxmbGIz0Jofw49cvf/o1AqB8uFoM1d7K2
Hzay2+2qw3VqohNS5AZgL6r5gM5ZChVD2BCL1YNUq4FSDUIyPnrSVhDwHtwLEyia
kMK2YbjibrNZKU8x/wfv8Nna3uxlUcee0x7TD4Upo5aIkZPzrQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFM8W6wJnrQA8EcyKg5HKnQYIyDz1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMDBhZmU5NTQtY2IyNC0z
NGU1LTlkYjktZDg2NzExYzFhNWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgBcAAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKbvvzebCUqxf8zmcaAF9ULAE3CCrfgcl9+DMbcEvY8fVcMiaSLgZ
4y7Hs1cJNDtdlExoZb12NuyP84RAbSrwztrJwIki0w092GyAY89d1HN9MgIWx4PL
w7fB5yFh5eR2z1VOiLL8Q4lgDiESpQURz7RYE+ZqQGnJEJdODJRSSneZ4f7KL4ym
2hFf4T1ul7+6kYwYRqOky7Ewtt8LWfpKY80OdfDPh17NwZ8oMhbhtQNcv2VJp9TW
ouWDRdl7yhUxi+gKmUxsP7DmqmP+Ofe+jT4dDiyKyVAx4pIN4pHMrxWLsyPe4LFp
uvN6UXMAF238/jQqCsB+U05Zgt4Y+Lk2yQ==
-----END CERTIFICATE-----