Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/17e3ed9a-62b9-3885-ade8-7b977c4d47f8.roa
File:                     17e3ed9a-62b9-3885-ade8-7b977c4d47f8.roa (raw, json)
Hash identifier:          vo4osQg68Yj+2lig+OloL5QOc0UAwU5+O+JkxkUuq78=
Subject key identifier:   C6:FD:94:38:AB:64:DB:35:29:83:9B:1D:8F:FC:EC:29:3A:30:A2:84
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F432858497279AB84890AB2BD33207078
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/17e3ed9a-62b9-3885-ade8-7b977c4d47f8.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     5769
IP address blocks:        2607:fa4f::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:ab:84:89:0a:b2:bd:33:20:70:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=880bd74a-9977-4c94-ac7d-aabd247a8a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d4:d9:d8:82:7e:8c:bf:be:05:ac:0a:c4:8a:
                    41:b3:ef:b8:3d:08:25:0f:68:ed:60:9e:05:34:0f:
                    e3:d7:5d:52:bc:d3:3a:ec:1c:b7:d7:72:e3:cb:69:
                    eb:f4:bd:41:a6:0e:40:15:88:66:26:cd:a3:a1:c4:
                    9f:47:b2:d3:e3:72:af:3a:a8:94:d4:26:02:16:56:
                    b2:57:f2:58:15:55:41:98:5d:91:df:c8:a7:6e:2c:
                    a1:01:c7:f7:80:d5:39:cb:28:14:6b:1c:bc:f5:48:
                    8d:56:62:3a:a3:54:f7:dc:9e:6f:d9:9e:c0:ad:2d:
                    fa:37:49:70:17:0a:0a:1b:cd:6d:d7:8a:05:2b:fd:
                    69:34:a8:d5:a5:e2:62:ef:57:4f:3a:74:7e:b8:b3:
                    08:98:49:94:94:3a:73:dd:f4:c9:15:cc:24:3f:42:
                    74:a9:df:cf:c6:b1:53:95:3d:52:49:f4:69:9f:d3:
                    77:e0:85:e3:b8:2d:6b:8e:00:69:67:ca:1d:d2:0a:
                    a4:bd:64:27:11:d5:9e:52:51:4d:38:d5:ae:b0:62:
                    53:ac:84:87:53:f3:18:58:c8:e1:ec:42:ed:ad:26:
                    e5:d8:b3:b8:42:c7:fe:fe:fc:20:ec:21:2d:e9:e4:
                    38:e3:05:79:5b:a2:e0:3b:5d:fa:c4:1c:c3:aa:d0:
                    3b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FD:94:38:AB:64:DB:35:29:83:9B:1D:8F:FC:EC:29:3A:30:A2:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/17e3ed9a-62b9-3885-ade8-7b977c4d47f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa4f::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:17:94:5a:d5:6d:14:0f:41:81:9b:4f:9b:ec:20:e5:9d:69:
         86:b2:12:aa:fd:51:1c:3d:97:3a:bb:d8:25:38:34:a1:a1:d6:
         1b:7d:81:ab:b0:91:1e:6c:43:88:80:dc:24:bb:a1:ad:85:e5:
         cf:87:73:92:41:a5:bc:50:91:26:c6:9b:f0:49:5d:80:81:14:
         48:90:58:d2:27:8a:31:2a:d8:3f:51:ac:9a:fa:b4:55:af:58:
         ba:be:9c:08:1d:09:df:66:96:50:1e:ed:6a:84:88:27:36:1d:
         2e:1a:b7:b0:23:e7:ae:8e:80:d4:c7:25:8f:aa:f9:cf:f5:41:
         c5:9d:da:ec:c0:e1:e3:a8:b6:ee:53:f2:97:1f:7e:20:1b:c7:
         47:d6:6b:e0:a0:75:63:24:1d:cf:aa:7b:4f:e8:4f:23:c5:68:
         cc:87:37:ad:25:78:05:74:99:7d:a5:dc:45:61:be:74:9b:fb:
         81:7f:e2:ba:30:17:ba:a4:b3:d3:48:94:d0:a6:b8:74:5e:4c:
         3c:10:d6:7c:fd:0a:7d:52:ec:e1:ad:b6:89:c5:e1:d1:4e:04:
         48:20:fd:ea:91:80:52:a9:b8:f6:93:e7:a1:42:f2:77:ac:74:
         e4:c4:6e:0f:40:ac:8f:1d:d0:c4:05:c0:ff:a8:8e:c0:d3:26:
         9e:ec:f5:6d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElyeauEiQqyvTMgcHgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl
ZTdkMB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk
ODgwYmQ3NGEtOTk3Ny00Yzk0LWFjN2QtYWFiZDI0N2E4YTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdTZ2IJ+jL++BawKxIpBs++4PQglD2jtYJ4F
NA/j111SvNM67By313Ljy2nr9L1Bpg5AFYhmJs2jocSfR7LT43KvOqiU1CYCFlay
V/JYFVVBmF2R38inbiyhAcf3gNU5yygUaxy89UiNVmI6o1T33J5v2Z7ArS36N0lw
FwoKG81t14oFK/1pNKjVpeJi71dPOnR+uLMImEmUlDpz3fTJFcwkP0J0qd/PxrFT
lT1SSfRpn9N34IXjuC1rjgBpZ8od0gqkvWQnEdWeUlFNONWusGJTrISHU/MYWMjh
7ELtrSbl2LO4Qsf+/vwg7CEt6eQ44wV5W6LgO136xBzDqtA7HwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMb9lDirZNs1KYObHY/87Ck6MKKEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw
NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvMTdlM2VkOWEtNjJiOS0z
ODg1LWFkZTgtN2I5NzdjNGQ0N2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll
NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4
ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh
MzlmOGVlN2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6TzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBWF5Ra1W0UD0GBm0+b7CDlnWmGshKq/VEcPZc6u9glODShodYbfYGr
sJEebEOIgNwku6GtheXPh3OSQaW8UJEmxpvwSV2AgRRIkFjSJ4oxKtg/Uaya+rRV
r1i6vpwIHQnfZpZQHu1qhIgnNh0uGrewI+eujoDUxyWPqvnP9UHFndrswOHjqLbu
U/KXH34gG8dH1mvgoHVjJB3PqntP6E8jxWjMhzetJXgFdJl9pdxFYb50m/uBf+K6
MBe6pLPTSJTQprh0Xkw8ENZ8/Qp9UuzhrbaJxeHRTgRIIP3qkYBSqbj2k+ehQvJ3
rHTkxG4PQKyPHdDEBcD/qI7A0yae7PVt
-----END CERTIFICATE-----