Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a34bb302-49e0-3e41-8a06-b70ec4051c38.roa
File:                     a34bb302-49e0-3e41-8a06-b70ec4051c38.roa (raw, json)
Hash identifier:          iOMZFCq0Qr3+gDtm8yFrqASmZkZsEg5DQiC8xtK7UV8=
Subject key identifier:   E2:8F:B0:33:A2:52:37:DE:8B:B3:EF:E9:74:1D:3B:5F:52:30:30:A7
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584863CB03FFBC007B3A7FC22100
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a34bb302-49e0-3e41-8a06-b70ec4051c38.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     13807
IP address blocks:        2604:c80::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:03:ff:bc:00:7b:3a:7f:c2:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=0e9cb218-9c57-4699-ab25-08464b1a2f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:43:ae:11:ff:bb:d8:7f:cb:d0:75:51:0b:2e:
                    60:e2:c5:20:00:bb:37:89:32:4b:de:0d:da:a4:9f:
                    b2:37:f7:03:a2:65:59:da:b8:d9:3b:28:b5:df:f8:
                    b0:e4:ec:31:06:b5:a2:6a:4e:b6:cb:ec:be:9b:71:
                    ed:13:80:ff:c3:5e:45:f0:3f:80:cb:0f:1f:49:68:
                    09:53:ee:83:1e:a5:e7:a6:ac:f7:18:88:fa:a8:91:
                    41:9a:23:44:16:74:30:18:f1:27:65:bd:14:98:70:
                    41:55:eb:f4:1b:6b:5b:bc:37:ca:37:3d:28:20:96:
                    2d:6b:a6:11:ab:6e:9c:2a:3e:87:b2:d7:89:9c:7e:
                    19:f3:d4:7c:ff:86:bb:fd:56:a2:b8:4e:e0:39:a0:
                    d7:b6:f4:30:13:0b:b7:2b:14:88:1e:2c:b4:11:e1:
                    10:04:51:72:e2:d5:d0:01:0c:48:5b:5d:d4:6f:1d:
                    16:df:15:b8:18:ce:09:a2:5c:4a:fb:e4:e1:63:df:
                    2c:d5:1e:28:ce:d8:8b:9e:f0:ab:da:bf:0d:fc:16:
                    a8:10:9d:bf:7f:e8:a2:63:8b:f5:e7:1a:9e:9f:32:
                    cb:64:28:29:8e:f1:a0:40:a8:f2:e8:44:84:fd:a6:
                    77:a8:31:be:29:d7:31:b9:c5:80:02:18:47:a1:c8:
                    21:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8F:B0:33:A2:52:37:DE:8B:B3:EF:E9:74:1D:3B:5F:52:30:30:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a34bb302-49e0-3e41-8a06-b70ec4051c38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a1:29:a9:ce:82:96:50:2f:57:67:aa:55:3b:84:0e:f4:99:
         c7:4a:0d:10:44:92:c5:e6:05:51:1b:3f:9b:c8:ab:c9:1f:89:
         ac:59:07:13:94:00:2c:12:d7:4a:44:59:2f:07:14:fa:89:c6:
         a9:dd:0e:3d:62:13:27:f3:61:24:2f:1f:16:b9:f7:96:52:18:
         e6:fe:3b:9a:1e:c0:cd:02:0a:8c:d9:75:88:af:ba:1c:25:6e:
         61:67:11:63:21:d9:cd:12:6d:46:82:81:76:73:eb:ca:a7:1a:
         f3:10:9e:d7:99:33:38:32:56:a3:b7:7b:14:38:d6:45:74:bb:
         28:41:71:71:6e:c2:bf:10:59:4d:fa:77:74:f5:79:02:26:b7:
         50:40:07:2d:de:07:bf:f6:d8:10:b1:a6:2c:50:96:dd:95:1b:
         c1:c7:fe:3f:2b:b4:12:21:21:43:fa:cb:b3:e1:1b:bf:bd:4c:
         29:c2:f0:53:66:29:8b:99:49:72:ec:ae:eb:5c:fd:2f:8e:fc:
         b2:a4:8b:c3:df:8d:56:19:32:0d:e0:13:63:4e:11:99:9a:90:
         5d:83:a5:98:a0:ae:18:ca:69:97:11:24:df:cf:67:15:11:89:
         55:35:91:38:29:7a:89:d1:9a:6b:9f:4d:85:53:5a:6b:1b:ae:
         26:70:38:93
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhjywP/vAB7On/CIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw
NTM2MB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk
MGU5Y2IyMTgtOWM1Ny00Njk5LWFiMjUtMDg0NjRiMWEyZjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkOuEf+72H/L0HVRCy5g4sUgALs3iTJL3g3a
pJ+yN/cDomVZ2rjZOyi13/iw5OwxBrWiak62y+y+m3HtE4D/w15F8D+Ayw8fSWgJ
U+6DHqXnpqz3GIj6qJFBmiNEFnQwGPEnZb0UmHBBVev0G2tbvDfKNz0oIJYta6YR
q26cKj6HsteJnH4Z89R8/4a7/VaiuE7gOaDXtvQwEwu3KxSIHiy0EeEQBFFy4tXQ
AQxIW13Ubx0W3xW4GM4JolxK++ThY98s1R4oztiLnvCr2r8N/BaoEJ2/f+iiY4v1
5xqenzLLZCgpjvGgQKjy6ESE/aZ3qDG+KdcxucWAAhhHocghZwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOKPsDOiUjfei7Pv6XQdO19SMDCnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm
MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvYTM0YmIzMDItNDllMC0z
ZTQxLThhMDYtYjcwZWM0MDUxYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3
OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj
MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh
ZWUwYzA1MzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQMgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA/oSmpzoKWUC9XZ6pVO4QO9JnHSg0QRJLF5gVRGz+byKvJH4msWQcT
lAAsEtdKRFkvBxT6icap3Q49YhMn82EkLx8WufeWUhjm/juaHsDNAgqM2XWIr7oc
JW5hZxFjIdnNEm1GgoF2c+vKpxrzEJ7XmTM4Mlajt3sUONZFdLsoQXFxbsK/EFlN
+nd09XkCJrdQQAct3ge/9tgQsaYsUJbdlRvBx/4/K7QSISFD+suz4Ru/vUwpwvBT
ZimLmUly7K7rXP0vjvyypIvD341WGTIN4BNjThGZmpBdg6WYoK4YymmXESTfz2cV
EYlVNZE4KXqJ0Zprn02FU1prG64mcDiT
-----END CERTIFICATE-----