Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/d0fc7d83-8248-36e1-8957-e593c1f5887d.roa
File:                     d0fc7d83-8248-36e1-8957-e593c1f5887d.roa (raw, json)
Hash identifier:          wVLVYId0+SgORF6TUmKAOmpx8RPaJ5zoPMdQROC1jKE=
Subject key identifier:   45:31:3C:61:74:FF:B8:20:2E:9C:28:AA:3A:ED:50:23:9A:88:07:2A
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F432858480BDA69CFCEB4F01C0360B200
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/d0fc7d83-8248-36e1-8957-e593c1f5887d.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     4134
IP address blocks:        2605:9d80:8000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:69:cf:ce:b4:f0:1c:03:60:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=21274526-a52c-4a5e-8b75-af8bc62857af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:13:94:ad:2d:53:88:16:18:ee:0b:fd:40:1b:
                    43:f1:aa:88:a7:ab:98:ba:b2:40:4e:59:2d:77:1c:
                    d3:c3:a7:38:33:ae:b3:c8:b0:0a:0b:85:89:80:f2:
                    1f:25:02:ba:ee:45:a1:43:18:c2:e0:1b:80:cc:40:
                    02:22:f2:02:e9:87:1c:a6:ff:a5:e3:47:5f:90:f7:
                    e2:42:5c:c1:fc:54:7d:3a:eb:86:aa:05:7d:16:d7:
                    ac:d9:e8:fa:a8:36:6a:14:3a:c7:75:65:05:a6:53:
                    89:61:00:1d:b7:c8:1b:a6:7c:20:ca:f6:a3:98:24:
                    b4:f8:85:32:93:b4:cb:9b:cd:9e:08:1d:33:ae:57:
                    73:1e:c4:3e:ab:50:34:4b:d8:23:0f:46:aa:47:11:
                    2f:43:ee:7b:fc:a3:15:59:9e:94:61:b7:c8:6b:19:
                    e6:fe:74:f8:a8:cf:77:c8:cb:88:f8:c1:6e:79:ae:
                    ff:4f:ef:7c:7a:de:48:cc:af:23:a1:87:ed:38:07:
                    79:ac:0f:16:3f:84:9c:6f:07:96:9a:bd:fb:ac:b9:
                    56:ac:a8:90:e7:bc:d7:0e:30:ba:79:60:24:29:5e:
                    b2:10:cf:8e:4d:73:ac:5e:18:d4:78:37:c7:1c:bc:
                    15:61:d2:7a:71:67:2d:7c:d9:44:16:d4:ca:e2:0d:
                    a7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:31:3C:61:74:FF:B8:20:2E:9C:28:AA:3A:ED:50:23:9A:88:07:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/d0fc7d83-8248-36e1-8957-e593c1f5887d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9d80:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ad:b6:64:75:b5:07:e6:32:eb:73:35:de:9f:ec:6f:ba:27:
         9d:d4:46:23:ba:46:e0:36:89:15:1e:61:9f:e0:92:fa:3b:c0:
         de:f2:82:f8:6b:ae:73:c8:8f:59:e6:3c:46:e0:c4:e6:39:85:
         25:f2:14:aa:d3:28:31:9d:a6:1a:35:f3:19:28:4c:6c:a2:64:
         47:5f:2f:a3:e8:8f:7c:04:1f:30:80:f6:ae:51:c9:6c:89:aa:
         bf:88:a3:d6:cd:e7:ad:aa:c1:dc:d7:94:b1:90:9b:a5:b2:57:
         50:70:d6:f3:7b:71:9e:4c:ef:64:74:b0:41:67:33:5e:b3:57:
         c1:78:a7:e5:b8:81:01:18:d8:df:df:76:3b:a7:7a:ff:52:be:
         de:79:b9:c5:60:d5:eb:08:09:94:5c:1a:39:32:44:fa:5f:a5:
         1f:e6:bc:f8:c5:18:8f:d7:ed:2c:6a:78:21:5d:c9:e4:30:fb:
         dc:71:5b:b2:1d:08:40:33:ae:b9:05:0c:50:13:81:f2:ed:67:
         59:76:f3:35:ca:68:75:f3:bd:78:1b:26:15:17:3d:58:69:23:
         91:77:a8:51:3d:4d:dd:a6:61:59:23:d4:64:1f:d9:ac:f6:64:
         49:b0:af:22:a8:c3:77:e0:3a:69:e5:3e:c8:31:e3:6f:7a:08:
         0b:4c:cd:8c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgL2mnPzrTwHANgsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl
Y2FmMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk
MjEyNzQ1MjYtYTUyYy00YTVlLThiNzUtYWY4YmM2Mjg1N2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhOUrS1TiBYY7gv9QBtD8aqIp6uYurJATlkt
dxzTw6c4M66zyLAKC4WJgPIfJQK67kWhQxjC4BuAzEACIvIC6Yccpv+l40dfkPfi
QlzB/FR9OuuGqgV9Ftes2ej6qDZqFDrHdWUFplOJYQAdt8gbpnwgyvajmCS0+IUy
k7TLm82eCB0zrldzHsQ+q1A0S9gjD0aqRxEvQ+57/KMVWZ6UYbfIaxnm/nT4qM93
yMuI+MFuea7/T+98et5IzK8joYftOAd5rA8WP4ScbweWmr37rLlWrKiQ57zXDjC6
eWAkKV6yEM+OTXOsXhjUeDfHHLwVYdJ6cWctfNlEFtTK4g2n9QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEUxPGF0/7ggLpwoqjrtUCOaiAcqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj
ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvZDBmYzdkODMtODI0OC0z
NmUxLTg5NTctZTU5M2MxZjU4ODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5
NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4
ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1
ZmY3OGVjYWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgWdgIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAUK22ZHW1B+Yy63M13p/sb7onndRGI7pG4DaJFR5hn+CS+jvA3vKC
+Guuc8iPWeY8RuDE5jmFJfIUqtMoMZ2mGjXzGShMbKJkR18vo+iPfAQfMID2rlHJ
bImqv4ij1s3nrarB3NeUsZCbpbJXUHDW83txnkzvZHSwQWczXrNXwXin5biBARjY
3992O6d6/1K+3nm5xWDV6wgJlFwaOTJE+l+lH+a8+MUYj9ftLGp4IV3J5DD73HFb
sh0IQDOuuQUMUBOB8u1nWXbzNcpodfO9eBsmFRc9WGkjkXeoUT1N3aZhWSPUZB/Z
rPZkSbCvIqjDd+A6aeU+yDHjb3oIC0zNjA==
-----END CERTIFICATE-----