Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/331c6c6e-98dd-3608-aec1-5daf85578cc8.roa
File:                     331c6c6e-98dd-3608-aec1-5daf85578cc8.roa (raw, json)
Hash identifier:          EtFw2nX+QQMcr6f5ytDfeGVy3n51rFtrVmxNR4zJJsQ=
Subject key identifier:   DC:D8:03:09:C5:F1:C5:D7:3D:69:51:AC:B1:DB:17:65:47:7B:F9:95
Certificate issuer:       /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Certificate serial:       010D0C9F43285847E7A757F9B4E7BCB769B42C00
Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/331c6c6e-98dd-3608-aec1-5daf85578cc8.roa
Signing time:             Sun 17 Nov 2024 02:48:51 +0000
ROA not before:           Sun 17 Nov 2024 02:48:51 +0000
ROA not after:            Sat 15 Feb 2025 02:48:51 +0000
asID:                     14618
IP address blocks:        2607:6bc0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:a7:57:f9:b4:e7:bc:b7:69:b4:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
        Validity
            Not Before: Nov 17 02:48:51 2024 GMT
            Not After : Feb 15 02:48:51 2025 GMT
        Subject: CN=3dac9e0b-d1a4-4238-a96f-6b804f1e070c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b8:49:d4:a1:13:69:4c:71:87:a0:4c:0f:81:
                    84:25:f9:60:c3:3b:a3:e1:60:eb:34:9a:a1:74:23:
                    e7:67:0f:ec:de:d1:c6:da:93:10:89:54:00:d3:d8:
                    7a:72:ae:e5:c2:2d:83:07:d1:da:31:59:20:e7:99:
                    67:3c:94:ee:b6:84:08:5e:49:6c:e8:b0:bd:7d:5d:
                    46:8a:22:d0:a4:68:6d:6a:cd:a7:ee:ae:bb:d3:7d:
                    0b:cd:06:99:71:95:bb:29:c5:43:9e:ec:13:45:7c:
                    83:4d:df:c8:0d:54:4f:75:fc:c8:1f:4b:5e:b6:bc:
                    3b:16:ea:f8:b9:1a:3d:f1:0a:db:5d:36:08:46:c9:
                    b9:5f:75:82:6d:65:01:06:6a:e6:4d:0a:cf:e2:51:
                    af:01:82:e9:41:17:4d:a7:88:6c:21:45:44:f5:26:
                    f5:69:58:e6:6d:18:fc:da:13:f5:40:20:34:fa:57:
                    63:21:fb:0c:91:ae:69:d1:4f:c3:f6:42:6c:34:a3:
                    84:1f:1c:04:b8:3d:20:15:bd:9e:00:2e:f3:9c:1a:
                    5e:39:85:23:db:f2:ae:31:64:dc:93:93:8d:1c:7a:
                    6d:4c:5a:4b:59:a6:d8:17:d0:47:1f:33:bd:27:9d:
                    95:d8:fc:ec:15:16:2f:b7:6d:11:22:2c:3a:fa:d9:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D8:03:09:C5:F1:C5:D7:3D:69:51:AC:B1:DB:17:65:47:7B:F9:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/331c6c6e-98dd-3608-aec1-5daf85578cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl

            X509v3 Authority Key Identifier:
                keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:b8:32:3b:c9:77:54:16:a3:4b:e2:48:42:03:10:15:6c:41:
         33:74:0d:77:55:46:bc:01:cf:b0:dd:b2:80:ec:28:f4:25:1e:
         69:ea:7e:26:14:59:f0:be:3e:1d:42:17:3f:ba:da:6a:92:65:
         08:0f:17:fa:27:fd:82:7f:2a:86:20:c2:26:6e:ab:09:b1:2a:
         58:fe:e9:87:48:86:30:1f:b6:c9:ef:10:5b:61:7d:70:7d:56:
         12:68:ab:9a:b4:94:1a:61:b8:49:df:fb:79:df:eb:17:b5:c6:
         da:70:dc:a7:89:2c:3f:03:36:35:ec:ea:67:77:a8:75:ff:ec:
         b8:55:74:11:37:db:12:79:98:3e:28:2b:f0:03:1e:d2:61:d7:
         58:d9:67:db:2e:e2:c3:ad:e0:a2:f5:2a:78:7c:6d:5c:a8:9d:
         93:41:10:4f:7a:d6:88:2c:60:8e:92:80:58:29:47:4f:ea:ae:
         04:b0:58:07:75:41:66:a0:fb:1c:9a:38:64:c1:38:45:a8:4e:
         5d:d1:97:af:cb:8c:58:bd:7f:71:7e:b9:3f:13:8c:4b:88:36:
         2d:49:88:36:58:8d:2e:df:41:e4:4b:3c:5a:10:64:06:e6:70:
         85:0b:f6:23:f3:f0:c4:48:a3:68:d8:1c:51:2e:25:54:86:35:
         96:08:06:2b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfnp1f5tOe8t2m0LAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjFmYTA2MjAtYzgwZi00YTk0LTllOTUtZWFkNDRmYjc5
OTc4MB4XDTI0MTExNzAyNDg1MVoXDTI1MDIxNTAyNDg1MVowLzEtMCsGA1UEAxMk
M2RhYzllMGItZDFhNC00MjM4LWE5NmYtNmI4MDRmMWUwNzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbhJ1KETaUxxh6BMD4GEJflgwzuj4WDrNJqh
dCPnZw/s3tHG2pMQiVQA09h6cq7lwi2DB9HaMVkg55lnPJTutoQIXkls6LC9fV1G
iiLQpGhtas2n7q67030LzQaZcZW7KcVDnuwTRXyDTd/IDVRPdfzIH0tetrw7Fur4
uRo98QrbXTYIRsm5X3WCbWUBBmrmTQrP4lGvAYLpQRdNp4hsIUVE9Sb1aVjmbRj8
2hP1QCA0+ldjIfsMka5p0U/D9kJsNKOEHxwEuD0gFb2eAC7znBpeOYUj2/KuMWTc
k5ONHHptTFpLWabYF9BHHzO9J52V2PzsFRYvt20RIiw6+tmWWwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNzYAwnF8cXXPWlRrLHbF2VHe/mVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZh
MDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0NGZiNzk5NzgvMzMxYzZjNmUtOThkZC0z
NjA4LWFlYzEtNWRhZjg1NTc4Y2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjFmYTA2MjAtYzgwZi00YTk0LTll
OTUtZWFkNDRmYjc5OTc4L2YxZmEwNjIwLWM4MGYtNGE5NC05ZTk1LWVhZDQ0ZmI3
OTk3OC5jcmwwHwYDVR0jBBgwFoAUphG/cQGHxBw5AaKqJrnTgQz+K3QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZhMDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0
NGZiNzk5NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdrwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBHuDI7yXdUFqNL4khCAxAVbEEzdA13VUa8Ac+w3bKA7Cj0JR5p6n4m
FFnwvj4dQhc/utpqkmUIDxf6J/2CfyqGIMImbqsJsSpY/umHSIYwH7bJ7xBbYX1w
fVYSaKuatJQaYbhJ3/t53+sXtcbacNyniSw/AzY17Opnd6h1/+y4VXQRN9sSeZg+
KCvwAx7SYddY2WfbLuLDreCi9Sp4fG1cqJ2TQRBPetaILGCOkoBYKUdP6q4EsFgH
dUFmoPscmjhkwThFqE5d0Zevy4xYvX9xfrk/E4xLiDYtSYg2WI0u30HkSzxaEGQG
5nCFC/Yj8/DESKNo2BxRLiVUhjWWCAYr
-----END CERTIFICATE-----