Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/642f2f8c-29eb-3c7f-820b-e7f130e87ec7.roa
File:                     642f2f8c-29eb-3c7f-820b-e7f130e87ec7.roa (raw, json)
Hash identifier:          ftlWygQgsVsDJrmZNh/swFNnnl/s7wdnzvUBwWxZ3RI=
Subject key identifier:   F9:98:9F:4E:35:67:7A:57:1B:11:20:10:FD:A0:54:06:74:D8:F1:78
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037AF54BD5A5263DF5FCEAC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/642f2f8c-29eb-3c7f-820b-e7f130e87ec7.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10796
IP address blocks:        2600:5c01::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:f5:4b:d5:a5:26:3d:f5:fc:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=82b0aff3-9e53-4452-9857-0d379f6ac7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:8e:9f:85:f6:d3:7b:5a:4b:61:ce:e6:b9:
                    8b:cd:5e:1f:99:49:aa:fd:d8:04:a5:23:c9:7a:43:
                    dd:80:31:5f:05:97:47:04:30:72:00:cc:ea:f6:06:
                    3a:65:f7:95:7c:88:46:64:72:6c:d3:71:0a:93:dd:
                    1c:25:fc:f0:0e:35:dd:77:db:89:f0:c2:24:f9:82:
                    a0:7a:20:41:1a:f4:96:06:85:42:f9:f8:5b:59:f1:
                    07:fc:f1:10:4d:e5:27:42:60:0a:44:37:be:db:63:
                    e2:74:89:d3:9a:11:a8:87:30:4a:f1:52:19:49:37:
                    2b:af:92:b4:6e:32:df:a5:ac:bf:ee:60:49:cc:2d:
                    de:55:50:5d:e5:bb:f9:3a:70:83:f4:b8:d4:71:20:
                    a7:ab:f6:c1:1b:ad:d1:fb:94:ea:48:8e:fb:9e:2e:
                    b9:30:1e:8f:84:cc:6c:1c:0e:74:5c:2a:b0:eb:78:
                    ec:07:1f:ed:07:76:cc:7f:2d:8c:89:47:d0:09:31:
                    b5:37:13:3f:7a:02:6f:27:b1:da:c6:20:f1:7c:fe:
                    a5:7d:c2:0b:9a:0f:9b:a9:79:63:20:2b:e3:db:34:
                    81:2f:9e:78:d5:f7:4f:17:cd:33:39:e1:47:29:89:
                    4b:32:aa:42:b9:f5:ed:33:48:c1:a6:f9:34:fa:17:
                    fe:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:98:9F:4E:35:67:7A:57:1B:11:20:10:FD:A0:54:06:74:D8:F1:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/642f2f8c-29eb-3c7f-820b-e7f130e87ec7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:5c01::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:aa:9c:c9:64:6c:79:f1:64:b8:86:64:22:e1:41:60:23:7a:
         2f:8b:6b:8f:4a:65:9a:dc:4b:55:d1:5f:73:6b:ab:52:aa:72:
         8f:fc:2c:45:d8:81:19:a4:a2:36:32:5e:5d:42:83:ed:fe:90:
         29:97:7e:6c:c4:b6:73:e7:c9:ff:44:1d:21:26:32:ea:77:4c:
         e4:cd:00:fa:67:48:d5:41:c6:57:2d:50:94:a8:14:9d:3a:01:
         66:69:96:71:5b:01:1f:98:22:cb:1f:cd:a8:f7:68:47:a1:13:
         30:a7:51:a5:b4:6c:ed:17:64:84:4e:ba:d3:5b:c6:65:eb:5d:
         58:e7:e3:64:df:1f:96:fd:8f:43:38:26:bf:6b:3b:5c:c6:a5:
         1e:cb:54:df:84:d9:d4:ae:60:af:a7:51:75:57:db:d6:d9:60:
         6c:89:51:51:e2:7d:62:21:85:8d:98:60:5c:5e:18:38:65:68:
         83:f2:51:cd:31:43:4a:5f:c2:9b:4a:a8:34:27:68:93:18:99:
         39:37:3c:e0:1f:bd:5a:29:b0:ec:78:b8:77:18:cf:e5:03:7f:
         a3:9b:5d:0d:01:c7:9d:09:fd:fb:f1:48:07:ac:2e:ff:1e:7d:
         fd:1a:c5:97:50:4f:5f:2b:51:45:6b:a5:ed:25:ca:f7:72:08:
         db:29:30:df
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgDevVL1aUmPfX86sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
ODJiMGFmZjMtOWU1My00NDUyLTk4NTctMGQzNzlmNmFjN2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfWOn4X203taS2HO5rmLzV4fmUmq/dgEpSPJ
ekPdgDFfBZdHBDByAMzq9gY6ZfeVfIhGZHJs03EKk90cJfzwDjXdd9uJ8MIk+YKg
eiBBGvSWBoVC+fhbWfEH/PEQTeUnQmAKRDe+22PidInTmhGohzBK8VIZSTcrr5K0
bjLfpay/7mBJzC3eVVBd5bv5OnCD9LjUcSCnq/bBG63R+5TqSI77ni65MB6PhMxs
HA50XCqw63jsBx/tB3bMfy2MiUfQCTG1NxM/egJvJ7HaxiDxfP6lfcILmg+bqXlj
ICvj2zSBL5541fdPF80zOeFHKYlLMqpCufXtM0jBpvk0+hf+eQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPmYn041Z3pXGxEgEP2gVAZ02PF4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNjQyZjJmOGMtMjllYi0z
YzdmLTgyMGItZTdmMTMwZTg3ZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgBcATBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBpqpzJZGx58WS4hmQi4UFgI3ovi2uPSmWa3EtV0V9za6tSqnKP/CxF
2IEZpKI2Ml5dQoPt/pApl35sxLZz58n/RB0hJjLqd0zkzQD6Z0jVQcZXLVCUqBSd
OgFmaZZxWwEfmCLLH82o92hHoRMwp1GltGztF2SETrrTW8Zl611Y5+Nk3x+W/Y9D
OCa/aztcxqUey1TfhNnUrmCvp1F1V9vW2WBsiVFR4n1iIYWNmGBcXhg4ZWiD8lHN
MUNKX8KbSqg0J2iTGJk5NzzgH71aKbDseLh3GM/lA3+jm10NAcedCf378UgHrC7/
Hn39GsWXUE9fK1FFa6XtJcr3cgjbKTDf
-----END CERTIFICATE-----