Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6ecce478-32fb-3ba9-8bcd-632ae058bae5.roa
File:                     6ecce478-32fb-3ba9-8bcd-632ae058bae5.roa (raw, json)
Hash identifier:          kZcwT6+uA8osDvjPIiUmxEQNcHfzd8Y1bltkeX9/9YM=
Subject key identifier:   86:C1:52:6C:F9:91:03:C4:6A:39:FF:39:0C:B3:0A:1C:3F:85:A3:2A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848B35B5F2F77C64381B3047040
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6ecce478-32fb-3ba9-8bcd-632ae058bae5.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     852
IP address blocks:        2001:568:837::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:5f:2f:77:c6:43:81:b3:04:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=b8c17eda-5873-44c7-b999-44a3907aad6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:02:6a:a6:22:0f:d3:58:d6:1d:78:b1:e2:
                    42:ca:ba:6d:cf:1b:d9:0b:ef:cc:b2:1b:9d:47:eb:
                    a9:02:98:a0:84:56:cb:1b:04:08:2b:55:dd:df:0b:
                    20:10:9a:cf:6b:c4:31:99:a3:4c:c0:b9:30:dc:76:
                    13:9e:0b:90:1e:da:ca:a7:67:f9:6f:db:af:99:f6:
                    62:65:16:ae:8e:70:77:bf:74:58:0a:5d:a8:65:1f:
                    13:9a:3c:05:84:57:a5:fd:62:94:be:cb:c8:4c:31:
                    3e:5c:2f:87:b8:a8:ea:ab:8a:ea:ab:ba:51:29:03:
                    07:79:07:c1:17:e6:24:6c:62:f7:6b:ae:73:fa:c5:
                    2d:8e:a4:58:9f:4b:42:95:e0:8c:ef:a0:3b:39:9c:
                    6f:c6:47:dd:02:50:aa:47:4e:67:a9:ad:40:e2:00:
                    bb:e6:98:79:5e:5e:f5:fb:df:8f:6e:40:fa:ec:25:
                    ff:e5:36:e9:04:7d:e8:2b:95:23:17:80:52:a5:75:
                    0b:55:65:ed:33:5c:7a:83:12:8e:4d:17:c4:20:b2:
                    c4:9e:c2:8c:7d:c9:29:dd:f6:f3:35:69:aa:65:92:
                    90:81:80:37:e2:da:74:ce:95:4d:1c:f5:9b:33:51:
                    fe:1f:32:a4:46:be:16:98:5f:eb:38:d8:3c:d7:7d:
                    c7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C1:52:6C:F9:91:03:C4:6A:39:FF:39:0C:B3:0A:1C:3F:85:A3:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6ecce478-32fb-3ba9-8bcd-632ae058bae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:568:837::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:32:c6:0b:b2:d0:c1:cc:81:8b:a7:78:09:4c:9e:64:36:19:
         fb:19:ca:14:8a:25:3b:de:31:18:7f:59:8e:48:aa:6d:3c:97:
         f1:f1:da:77:ba:3b:e8:0a:f3:48:19:91:d1:73:d4:a8:95:a4:
         7a:63:72:92:22:4b:07:17:0f:7e:62:3d:3c:d5:d5:24:31:8f:
         0e:9d:26:9f:1a:19:9b:6a:e8:8a:cf:c7:41:16:60:f3:a9:e3:
         60:6d:af:d6:53:ae:4a:ee:c4:48:b6:fb:65:41:81:12:a7:d4:
         c1:12:ad:d5:72:92:05:0f:28:e2:cd:5f:84:b7:40:49:25:7e:
         10:24:e1:9d:c3:66:bc:b2:cc:f2:a9:05:17:d6:8a:23:0c:e0:
         1c:8c:cd:21:c7:b7:be:76:a2:ca:1f:57:e3:e6:bc:5f:34:1a:
         7d:6f:71:2f:d2:8b:75:38:a6:9d:04:45:ba:83:aa:00:3b:38:
         c6:57:24:ed:10:c1:9f:5a:74:20:15:a0:0f:fe:8c:79:2b:20:
         b8:34:63:3a:b9:a7:7c:cb:02:14:2a:09:f6:5f:39:de:57:2a:
         b4:a8:4b:f0:e4:01:d6:5b:89:28:68:3d:f9:a1:ea:85:36:04:
         b8:3e:25:5a:83:f9:d6:22:d6:59:29:77:be:d6:02:83:c8:f2:
         fd:64:a0:31
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEizW18vd8ZDgbMEcEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk
YjhjMTdlZGEtNTg3My00NGM3LWI5OTktNDRhMzkwN2FhZDZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSYCaqYiD9NY1h14seJCyrptzxvZC+/Mshud
R+upApighFbLGwQIK1Xd3wsgEJrPa8QxmaNMwLkw3HYTnguQHtrKp2f5b9uvmfZi
ZRaujnB3v3RYCl2oZR8TmjwFhFel/WKUvsvITDE+XC+HuKjqq4rqq7pRKQMHeQfB
F+YkbGL3a65z+sUtjqRYn0tCleCM76A7OZxvxkfdAlCqR05nqa1A4gC75ph5Xl71
+9+PbkD67CX/5TbpBH3oK5UjF4BSpXULVWXtM1x6gxKOTRfEILLEnsKMfckp3fbz
NWmqZZKQgYA34tp0zpVNHPWbM1H+HzKkRr4WmF/rONg8133H9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIbBUmz5kQPEajn/OQyzChw/haMqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNmVjY2U0NzgtMzJmYi0z
YmE5LThiY2QtNjMyYWUwNThiYWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaAg3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAM8yxguy0MHMgYuneAlMnmQ2GfsZyhSKJTveMRh/WY5Iqm08l/Hx
2ne6O+gK80gZkdFz1KiVpHpjcpIiSwcXD35iPTzV1SQxjw6dJp8aGZtq6IrPx0EW
YPOp42Btr9ZTrkruxEi2+2VBgRKn1MESrdVykgUPKOLNX4S3QEklfhAk4Z3DZryy
zPKpBRfWiiMM4ByMzSHHt752osofV+PmvF80Gn1vcS/Si3U4pp0ERbqDqgA7OMZX
JO0QwZ9adCAVoA/+jHkrILg0Yzq5p3zLAhQqCfZfOd5XKrSoS/DkAdZbiShoPfmh
6oU2BLg+JVqD+dYi1lkpd77WAoPI8v1koDE=
-----END CERTIFICATE-----