Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/d3b0535a-8e2b-30d0-975a-1f4dd984e18c.roa
File:                     d3b0535a-8e2b-30d0-975a-1f4dd984e18c.roa (raw, json)
Hash identifier:          iYgZRCJWgJ0qjUlLvR++lb/fj4Nr/YcQFnE3zAafKIQ=
Subject key identifier:   9C:E9:DB:3D:15:0F:F5:0D:37:0C:9D:FF:14:CD:2E:8C:20:21:D9:4B
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F432858482D5A87F535159A6227A77380
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/d3b0535a-8e2b-30d0-975a-1f4dd984e18c.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     13830
IP address blocks:        2604:4d40:8000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:87:f5:35:15:9a:62:27:a7:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=6b5e2a7f-7e9f-4265-847f-3fee5cb3a904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:48:a5:e6:62:ed:3a:57:92:73:e5:4f:12:
                    81:a2:c0:43:bf:6e:1b:5c:e4:02:1c:b5:af:b4:a5:
                    f4:b4:80:05:b7:ba:51:ec:25:ee:e8:59:6a:1d:11:
                    b9:32:81:98:c9:01:06:8f:09:51:4d:e7:08:53:d9:
                    16:8d:f4:e7:78:44:c7:d8:68:2a:3d:17:06:6b:5a:
                    dc:1d:b7:f5:80:e2:a6:42:d6:e6:67:57:35:8c:9d:
                    3a:97:38:77:44:76:ff:be:32:c7:af:49:db:f1:ea:
                    0a:1b:2a:40:50:bb:3f:73:28:e6:27:1c:d1:11:43:
                    ed:fe:e8:7a:93:7e:50:38:0c:12:34:8f:d9:bc:86:
                    98:0e:01:ac:71:d3:36:2a:4e:a9:e3:a1:55:5c:90:
                    2a:30:93:68:1b:a4:08:6b:07:ad:8b:6d:a0:0a:82:
                    a5:51:bd:13:9b:74:a1:0a:e6:19:74:b3:0c:36:4b:
                    f3:a2:25:80:db:0e:30:1f:f7:bf:d9:8c:ca:b2:42:
                    09:67:d5:76:38:d6:bb:1f:c2:3d:f7:88:6b:2f:60:
                    0f:b3:7d:37:26:79:a8:99:28:bf:5f:4c:5b:ed:06:
                    af:82:fe:3b:9f:74:05:53:87:3d:9f:dd:10:c0:cc:
                    e5:3b:e2:c5:47:31:54:14:90:c3:ce:bf:74:c7:a4:
                    d6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E9:DB:3D:15:0F:F5:0D:37:0C:9D:FF:14:CD:2E:8C:20:21:D9:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/d3b0535a-8e2b-30d0-975a-1f4dd984e18c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4d40:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:fc:61:69:e9:a5:e8:ca:f2:01:c6:1f:1f:2d:81:3e:18:e3:
         00:5a:6e:89:31:bb:06:14:3d:a5:b0:b1:6d:0d:54:c9:f5:d6:
         44:99:86:51:e0:d5:0e:d4:61:8f:7a:e8:3f:6f:ca:62:9c:b7:
         2f:2a:bf:fe:64:23:5b:e3:fe:dd:5a:71:86:8f:4e:f4:df:70:
         b0:6f:39:6b:c7:17:7c:77:41:55:22:bd:54:84:ca:5c:7f:23:
         b1:42:35:26:83:f6:e4:b6:2b:99:58:81:d4:af:9f:ac:bf:08:
         35:eb:eb:cd:df:61:05:08:cb:10:9b:24:3e:f1:56:22:08:a5:
         21:04:66:ca:7b:f7:20:23:05:c7:4a:1f:11:83:e9:88:bc:ed:
         ba:5e:dd:67:2b:69:06:bc:5d:a5:f7:d7:bd:0e:c6:fa:be:c4:
         99:01:16:1b:61:0a:06:a1:f8:e4:8d:39:0b:fd:44:f7:e8:e0:
         cb:c1:f6:d7:f5:ba:09:28:89:b3:15:7a:dd:99:14:27:34:cc:
         d0:9d:ea:34:b8:4b:d6:7b:d3:64:12:6a:d8:68:9f:3b:27:f2:
         4c:ba:8a:04:d9:bc:f2:4c:00:b7:d6:02:ea:7e:81:00:e7:a4:
         d6:12:87:33:9e:8e:d9:10:89:f1:73:70:fc:b4:34:4c:3a:6a:
         19:da:b1:bc
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgtWof1NRWaYienc4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3
Y2IzMB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk
NmI1ZTJhN2YtN2U5Zi00MjY1LTg0N2YtM2ZlZTVjYjNhOTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtVIpeZi7TpXknPlTxKBosBDv24bXOQCHLWv
tKX0tIAFt7pR7CXu6FlqHRG5MoGYyQEGjwlRTecIU9kWjfTneETH2GgqPRcGa1rc
Hbf1gOKmQtbmZ1c1jJ06lzh3RHb/vjLHr0nb8eoKGypAULs/cyjmJxzREUPt/uh6
k35QOAwSNI/ZvIaYDgGscdM2Kk6p46FVXJAqMJNoG6QIaweti22gCoKlUb0Tm3Sh
CuYZdLMMNkvzoiWA2w4wH/e/2YzKskIJZ9V2ONa7H8I994hrL2APs303JnmomSi/
X0xb7Qavgv47n3QFU4c9n90QwMzlO+LFRzFUFJDDzr90x6TWKwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJzp2z0VD/UNNwyd/xTNLowgIdlLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0
OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvZDNiMDUzNWEtOGUyYi0z
MGQwLTk3NWEtMWY0ZGQ5ODRlMThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw
MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj
N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw
OGUxYzdjYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRNQIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAsPxhaeml6MryAcYfHy2BPhjjAFpuiTG7BhQ9pbCxbQ1UyfXWRJmG
UeDVDtRhj3roP2/KYpy3Lyq//mQjW+P+3Vpxho9O9N9wsG85a8cXfHdBVSK9VITK
XH8jsUI1JoP25LYrmViB1K+frL8INevrzd9hBQjLEJskPvFWIgilIQRmynv3ICMF
x0ofEYPpiLztul7dZytpBrxdpffXvQ7G+r7EmQEWG2EKBqH45I05C/1E9+jgy8H2
1/W6CSiJsxV63ZkUJzTM0J3qNLhL1nvTZBJq2GifOyfyTLqKBNm88kwAt9YC6n6B
AOek1hKHM56O2RCJ8XNw/LQ0TDpqGdqxvA==
-----END CERTIFICATE-----