Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b6b0f599-8b0a-3844-b406-2942745234fb.roa
File:                     b6b0f599-8b0a-3844-b406-2942745234fb.roa (raw, json)
Hash identifier:          qXmmV0wJbY+tJQmKKOmghqYVSC/Qt7Z+W3kITS4iCKw=
Subject key identifier:   4F:91:56:0E:6E:E4:A4:2C:CF:4D:EA:BA:B3:27:CD:C7:F1:32:E5:C6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584832EFF62B0B1382A733088400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b6b0f599-8b0a-3844-b406-2942745234fb.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     397241
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:ef:f6:2b:0b:13:82:a7:33:08:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=20c25272-2f69-4178-b12b-fddaf55ebe15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:25:14:fa:5c:6c:68:10:f3:d3:cf:be:a4:93:
                    fb:93:69:56:b6:72:5d:ea:c4:b3:64:92:43:a3:70:
                    50:9c:15:da:af:c7:15:4f:10:5a:ed:42:cb:8d:44:
                    e3:68:50:17:b7:a8:6b:0f:00:b7:ec:4d:d7:4a:18:
                    c4:d2:80:e4:bb:9e:01:51:17:7a:f2:61:9f:eb:fd:
                    6f:8a:9f:d8:7e:3f:a1:f9:ed:b2:0b:d4:e3:b5:ec:
                    f9:85:99:88:e5:b9:3d:d4:d3:12:49:3b:4a:a9:dc:
                    a9:f4:03:b4:3c:08:ab:c1:39:26:09:f1:51:7c:1d:
                    10:c2:7c:fb:eb:53:d7:71:c8:3e:dd:24:d8:9e:aa:
                    47:ac:d5:3e:22:a7:a9:3c:27:e2:0b:c4:9a:16:c6:
                    e6:43:4d:13:75:fa:0a:38:78:b2:13:07:6d:5d:47:
                    30:a0:a2:64:78:ff:ce:c1:bb:fb:0b:ac:54:2e:ee:
                    41:db:b6:3f:fa:b8:60:86:2a:b1:d8:15:fa:4e:e2:
                    95:f0:33:40:b3:f9:0a:dd:19:3f:d5:c9:e3:46:d9:
                    ac:96:cc:9e:00:8e:b6:47:f4:f2:53:55:52:de:bd:
                    81:d2:06:63:13:6b:93:ec:fb:9d:f7:ba:ea:ed:47:
                    b2:e2:93:91:be:be:ff:08:43:d7:1e:4c:69:f2:02:
                    f1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:91:56:0E:6E:E4:A4:2C:CF:4D:EA:BA:B3:27:CD:C7:F1:32:E5:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b6b0f599-8b0a-3844-b406-2942745234fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:21:8f:81:f5:37:d4:ff:f0:81:56:40:e7:dc:35:a0:90:12:
         51:19:9e:de:92:05:fd:89:1f:82:c4:60:47:84:5b:65:ca:15:
         b5:1b:a9:8a:fe:3c:bb:cc:06:4f:b8:c8:6e:36:9c:dd:b9:8a:
         23:78:f6:51:f9:32:fb:6e:ab:91:e0:dc:c0:0a:6d:0d:53:ba:
         4a:42:66:b1:82:b0:7c:e9:36:73:a5:26:7b:41:3d:c7:f6:2a:
         5b:6e:eb:5b:1c:ae:47:37:7b:48:1c:6e:2f:0b:4d:f3:b8:93:
         19:a6:d3:78:38:21:d4:ac:35:c6:f3:47:a5:bf:2f:f6:28:09:
         ed:5d:a3:fc:be:87:fe:d0:94:f9:c3:99:02:d5:57:54:99:20:
         fb:da:65:14:12:63:b5:59:d9:e4:69:b9:93:89:80:fe:d0:b5:
         f8:dd:b5:a2:b6:94:c0:2a:2a:a6:f3:0e:09:93:f1:45:f3:06:
         ec:ff:45:79:c4:7a:07:34:e1:cb:12:86:3c:6b:47:94:69:6b:
         14:85:05:6d:bc:7f:9e:13:27:10:f5:87:19:ce:8d:26:1c:3b:
         cc:c7:22:50:3b:75:c6:27:e8:35:1d:dd:51:94:40:51:35:0a:
         5a:bf:85:17:63:c2:1b:19:28:3e:b5:ad:2a:38:24:3c:f2:23:
         a6:b1:f9:82
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgy7/YrCxOCpzMIhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
MjBjMjUyNzItMmY2OS00MTc4LWIxMmItZmRkYWY1NWViZTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iUU+lxsaBDz08++pJP7k2lWtnJd6sSzZJJD
o3BQnBXar8cVTxBa7ULLjUTjaFAXt6hrDwC37E3XShjE0oDku54BURd68mGf6/1v
ip/Yfj+h+e2yC9Tjtez5hZmI5bk91NMSSTtKqdyp9AO0PAirwTkmCfFRfB0Qwnz7
61PXccg+3STYnqpHrNU+IqepPCfiC8SaFsbmQ00TdfoKOHiyEwdtXUcwoKJkeP/O
wbv7C6xULu5B27Y/+rhghiqx2BX6TuKV8DNAs/kK3Rk/1cnjRtmslsyeAI62R/Ty
U1VS3r2B0gZjE2uT7Pud97rq7Uey4pORvr7/CEPXHkxp8gLxyQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE+RVg5u5KQsz03qurMnzcfxMuXGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjZiMGY1OTktOGIwYS0z
ODQ0LWI0MDYtMjk0Mjc0NTIzNGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAkYS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADQhj4H1N9T/8IFWQOfcNaCQElEZnt6SBf2JH4LEYEeEW2XKFbUb
qYr+PLvMBk+4yG42nN25iiN49lH5Mvtuq5Hg3MAKbQ1TukpCZrGCsHzpNnOlJntB
Pcf2Kltu61scrkc3e0gcbi8LTfO4kxmm03g4IdSsNcbzR6W/L/YoCe1do/y+h/7Q
lPnDmQLVV1SZIPvaZRQSY7VZ2eRpuZOJgP7QtfjdtaK2lMAqKqbzDgmT8UXzBuz/
RXnEegc04csShjxrR5RpaxSFBW28f54TJxD1hxnOjSYcO8zHIlA7dcYn6DUd3VGU
QFE1Clq/hRdjwhsZKD61rSo4JDzyI6ax+YI=
-----END CERTIFICATE-----