Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80e7896d-6381-3f13-a711-9fbdaf27cb72.roa
File:                     80e7896d-6381-3f13-a711-9fbdaf27cb72.roa (raw, json)
Hash identifier:          SA2YqnF5a4eCZLjTcKKn9fl6C+qHLmYzXmFJ+Ipgqmw=
Subject key identifier:   3B:B3:19:21:60:E1:10:E6:BE:0B:3D:83:C7:A9:91:2E:2E:17:C5:FE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A996376DC37A4C73090D2240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80e7896d-6381-3f13-a711-9fbdaf27cb72.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        2600:1488:a005::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:37:6d:c3:7a:4c:73:09:0d:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=617245a8-0e7b-49a9-86d5-d9ef98e1bc59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:35:29:c4:79:96:3b:be:48:bb:13:b8:ae:91:
                    bc:6f:5e:10:1e:5c:7d:e3:d4:2a:6c:28:d1:31:a2:
                    16:e4:6f:68:67:f9:dc:a6:ce:a2:8a:35:3f:f1:7f:
                    8e:75:ae:02:f2:f3:23:f0:ea:64:7b:fc:f4:49:fa:
                    b8:80:9f:d9:81:32:37:f1:a4:ac:ee:b0:b8:61:4e:
                    1b:70:7d:95:25:4f:5a:4a:47:40:59:23:4e:e3:ef:
                    42:f2:2a:35:88:a4:97:20:d4:2c:16:c1:97:76:ba:
                    6a:e6:7f:75:d1:f7:e4:83:7d:69:c6:9b:76:66:05:
                    ee:48:33:9a:fc:67:a5:85:c9:19:2e:86:6c:af:7e:
                    6a:42:d1:d5:5d:91:df:ab:14:3a:2f:73:51:b6:1f:
                    70:54:ac:aa:c7:40:aa:4a:2f:06:4e:5c:3c:e0:01:
                    cc:f7:31:e0:d6:d7:09:eb:a3:9d:d2:93:df:f8:c0:
                    66:e7:58:e3:c2:36:89:82:6b:32:60:3d:34:22:cf:
                    59:06:13:a5:f0:dc:fb:73:58:1b:89:20:41:7d:f0:
                    ba:f7:e0:0b:e0:35:a8:5c:67:a5:09:2b:34:5a:4b:
                    8a:3a:73:94:ae:eb:65:c6:54:62:5e:e4:2c:ab:74:
                    8e:f6:65:cc:71:61:1b:f8:a9:bf:12:d6:a6:b8:8c:
                    75:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B3:19:21:60:E1:10:E6:BE:0B:3D:83:C7:A9:91:2E:2E:17:C5:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80e7896d-6381-3f13-a711-9fbdaf27cb72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:a005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:76:d6:f2:59:d2:00:4a:85:0f:af:1d:c1:db:58:1c:8a:72:
         eb:8b:dd:f5:99:a3:75:69:89:54:1b:4c:17:a7:1b:31:c2:4f:
         8e:da:97:e8:61:93:5f:e0:1e:0a:22:3b:a0:77:91:02:31:2e:
         ef:7d:05:fe:62:0d:78:05:2f:e1:72:01:70:08:7b:ed:1f:11:
         1e:ea:ce:d3:44:2f:5c:28:a1:e8:32:e4:02:67:14:e8:d4:fe:
         2a:77:22:c8:07:79:07:b0:f0:10:60:6e:19:4f:c7:a4:86:1c:
         1f:da:50:52:d0:2d:60:14:e3:4b:6d:1e:1b:0b:f0:f5:db:ab:
         3e:eb:66:48:99:cf:5a:b7:a2:0d:ce:06:b1:bd:2a:d6:ba:54:
         ce:c9:17:1c:15:37:25:a4:56:0f:d8:b2:9d:79:bf:88:af:2e:
         f3:5f:24:9c:aa:5c:5a:72:c8:b6:43:bc:94:5a:75:e0:f9:41:
         d6:a7:01:ed:58:82:46:72:6f:8c:15:7a:ee:71:05:c4:ab:71:
         9e:b3:2b:be:3c:5f:bc:6d:0e:b1:cb:0f:3b:d5:0d:b5:53:0c:
         ad:26:db:06:c1:4e:ad:13:48:6a:1b:ac:b9:7c:b2:bf:ed:e9:
         22:ef:5b:79:bf:da:59:96:c2:a6:d0:76:06:4a:c6:84:b2:a8:
         ae:62:96:eb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEipljdtw3pMcwkNIkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NjE3MjQ1YTgtMGU3Yi00OWE5LTg2ZDUtZDllZjk4ZTFiYzU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTUpxHmWO75IuxO4rpG8b14QHlx949QqbCjR
MaIW5G9oZ/ncps6iijU/8X+Oda4C8vMj8Opke/z0Sfq4gJ/ZgTI38aSs7rC4YU4b
cH2VJU9aSkdAWSNO4+9C8io1iKSXINQsFsGXdrpq5n910ffkg31pxpt2ZgXuSDOa
/GelhckZLoZsr35qQtHVXZHfqxQ6L3NRth9wVKyqx0CqSi8GTlw84AHM9zHg1tcJ
66Od0pPf+MBm51jjwjaJgmsyYD00Is9ZBhOl8Nz7c1gbiSBBffC69+AL4DWoXGel
CSs0WkuKOnOUrutlxlRiXuQsq3SO9mXMcWEb+Km/EtamuIx1AQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDuzGSFg4RDmvgs9g8epkS4uF8X+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODBlNzg5NmQtNjM4MS0z
ZjEzLWE3MTEtOWZiZGFmMjdjYjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKAF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEt21vJZ0gBKhQ+vHcHbWByKcuuL3fWZo3VpiVQbTBenGzHCT47a
l+hhk1/gHgoiO6B3kQIxLu99Bf5iDXgFL+FyAXAIe+0fER7qztNEL1wooegy5AJn
FOjU/ip3IsgHeQew8BBgbhlPx6SGHB/aUFLQLWAU40ttHhsL8PXbqz7rZkiZz1q3
og3OBrG9Kta6VM7JFxwVNyWkVg/Ysp15v4ivLvNfJJyqXFpyyLZDvJRadeD5Qdan
Ae1YgkZyb4wVeu5xBcSrcZ6zK748X7xtDrHLDzvVDbVTDK0m2wbBTq0TSGobrLl8
sr/t6SLvW3m/2lmWwqbQdgZKxoSyqK5ilus=
-----END CERTIFICATE-----