Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa
File:                     e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa (raw, json)
Hash identifier:          YU20GXxmLW19Yycz/K+U7LChQUqrSXB9+G0YU65uimA=
Subject key identifier:   9F:85:57:AA:6E:49:7C:0C:C5:03:8F:09:63:BC:4A:F3:6C:2C:EA:A3
Certificate issuer:       /CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be
Certificate serial:       010D0C9F4328584843B007C91594B0EA2EAD7A80
Authority key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa
Signing time:             Fri 20 Dec 2024 02:00:40 +0000
ROA not before:           Fri 20 Dec 2024 02:00:40 +0000
ROA not after:            Thu 20 Mar 2025 01:00:40 +0000
asID:                     2572
IP address blocks:        2610:e0::/32 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:43:b0:07:c9:15:94:b0:ea:2e:ad:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be
        Validity
            Not Before: Dec 20 02:00:40 2024 GMT
            Not After : Mar 20 01:00:40 2025 GMT
        Subject: CN=88d7d508-31a5-49f7-b9f4-8f6845d674f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:81:30:47:b8:24:07:2a:35:b1:99:50:65:7b:
                    42:af:b9:a0:cc:55:9d:4b:2f:e6:3e:68:11:ea:35:
                    53:43:2a:1c:6c:85:6e:79:ab:e3:51:0b:d2:4a:ee:
                    ed:d5:a7:83:a7:1e:86:8c:69:17:18:db:76:9d:a5:
                    96:5f:56:ec:3a:45:15:dc:4b:eb:26:f2:44:3d:eb:
                    e3:8a:a6:b3:bb:98:9d:6e:9d:26:3c:7c:fa:65:6a:
                    50:30:97:7e:b8:39:93:0e:20:74:f3:76:c4:ec:8c:
                    24:b2:9e:00:65:ce:4f:3a:60:76:0b:69:4c:ad:2e:
                    80:44:15:4b:37:2c:29:85:6d:5f:27:a3:ef:5e:6a:
                    b5:8b:01:c2:70:86:5f:08:9b:4c:3b:38:3e:e2:ba:
                    23:7c:e4:5c:14:76:fe:d6:f8:15:ff:47:33:2f:e8:
                    31:8f:1d:64:64:12:bf:a0:8c:f5:be:48:1b:ce:6c:
                    5b:6d:6c:73:73:ad:07:ca:96:fb:2f:7e:13:60:0a:
                    e3:99:5f:97:73:d1:d9:58:28:12:3a:c0:0b:88:cc:
                    16:84:1c:92:2c:3e:f7:cb:88:c0:41:b9:cf:da:6f:
                    c3:57:1c:a4:04:f6:8d:bc:d2:41:7b:3a:ac:37:17:
                    a3:96:8a:3a:54:05:2e:94:b3:ac:16:43:81:b6:2d:
                    1b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:85:57:AA:6E:49:7C:0C:C5:03:8F:09:63:BC:4A:F3:6C:2C:EA:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl

            X509v3 Authority Key Identifier:
                keyid:D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:e0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:8f:ce:ad:10:7c:ef:e7:c9:c7:4e:fa:92:4e:1d:d9:d1:ba:
         cc:5d:c2:31:4e:c8:df:a2:77:d8:28:18:27:bc:ea:4b:01:62:
         e7:c5:ec:46:f4:cf:8a:27:d4:24:61:88:91:65:af:64:e2:4b:
         b1:db:ac:f4:89:bf:24:8b:36:7e:81:3c:75:2c:01:3e:1e:9a:
         1e:49:00:9f:23:58:3b:fb:da:e1:0d:43:84:41:d8:e8:1b:12:
         67:46:9a:1c:b9:2f:92:70:96:d7:ce:4f:9b:ad:5e:79:d8:42:
         69:47:7e:28:32:a5:e5:d2:0b:97:96:5f:a0:be:d7:22:c2:fc:
         f0:98:f2:38:c0:56:3f:b4:a4:2a:01:69:84:ad:7b:d1:01:44:
         4a:2a:e8:46:ed:2c:98:f4:ff:86:e5:e4:26:a2:55:e9:fc:6d:
         01:d1:0a:41:b7:8d:05:99:02:51:0c:17:8d:6f:c0:84:68:c7:
         bc:de:70:e2:73:17:b4:e2:3b:a2:3e:08:48:12:ac:13:4f:52:
         7c:ed:d0:2e:54:c2:5a:00:47:45:75:2a:7d:75:cb:50:03:9c:
         fd:21:57:1b:c3:e0:58:f8:7a:51:f0:79:c8:bf:1b:44:a7:87:
         de:e8:d6:c8:3f:72:f6:7c:5a:2b:92:c3:63:9c:be:b4:d9:a8:
         94:8b:eb:e7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhDsAfJFZSw6i6teoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ2OGNiOGItMGQ5MS00YTBlLTlmMDQtYTNjNzhlNTVj
N2JlMB4XDTI0MTIyMDAyMDA0MFoXDTI1MDMyMDAxMDA0MFowLzEtMCsGA1UEAxMk
ODhkN2Q1MDgtMzFhNS00OWY3LWI5ZjQtOGY2ODQ1ZDY3NGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4EwR7gkByo1sZlQZXtCr7mgzFWdSy/mPmgR
6jVTQyocbIVueavjUQvSSu7t1aeDpx6GjGkXGNt2naWWX1bsOkUV3EvrJvJEPevj
iqazu5idbp0mPHz6ZWpQMJd+uDmTDiB083bE7Iwksp4AZc5POmB2C2lMrS6ARBVL
NywphW1fJ6PvXmq1iwHCcIZfCJtMOzg+4rojfORcFHb+1vgV/0czL+gxjx1kZBK/
oIz1vkgbzmxbbWxzc60Hypb7L34TYArjmV+Xc9HZWCgSOsALiMwWhBySLD73y4jA
QbnP2m/DVxykBPaNvNJBezqsNxejloo6VAUulLOsFkOBti0b6wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJ+FV6puSXwMxQOPCWO8SvNsLOqjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4
Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3OGU1NWM3YmUvZTAzOGI2OWQtYzNjYS0z
OGViLTk2MGMtOWRiZjIwNmMxMWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2OGNiOGItMGQ5MS00YTBlLTlm
MDQtYTNjNzhlNTVjN2JlL2RkNjhjYjhiLTBkOTEtNGEwZS05ZjA0LWEzYzc4ZTU1
YzdiZS5jcmwwHwYDVR0jBBgwFoAU1AgUSlq2Gu8AYolIQsFm8ATTzrwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3
OGU1NWM3YmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJhAA4DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCVj86tEHzv58nHTvqSTh3Z0brMXcIxTsjfonfYKBgnvOpLAWLnxexG
9M+KJ9QkYYiRZa9k4kux26z0ib8kizZ+gTx1LAE+HpoeSQCfI1g7+9rhDUOEQdjo
GxJnRpocuS+ScJbXzk+brV552EJpR34oMqXl0guXll+gvtciwvzwmPI4wFY/tKQq
AWmErXvRAURKKuhG7SyY9P+G5eQmolXp/G0B0QpBt40FmQJRDBeNb8CEaMe83nDi
cxe04juiPghIEqwTT1J87dAuVMJaAEdFdSp9dctQA5z9IVcbw+BY+HpR8HnIvxtE
p4fe6NbIP3L2fForksNjnL602aiUi+vn
-----END CERTIFICATE-----