Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/cd7bbf4a-f326-3337-957b-4b50b07568e4.roa
File:                     cd7bbf4a-f326-3337-957b-4b50b07568e4.roa (raw, json)
Hash identifier:          8ili5Sk4r4Y5BAwQonrqS225zJPKIsyfMD+WpJccRRE=
Subject key identifier:   A7:37:C2:89:92:9B:14:27:51:4E:09:63:E8:47:0B:C5:F5:52:69:63
Certificate issuer:       /CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
Certificate serial:       010D0C9F432858492CAE79AC8533F2A245D9E620
Authority key identifier: DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/cd7bbf4a-f326-3337-957b-4b50b07568e4.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     11039
IP address blocks:        2606:69c0:9000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:79:ac:85:33:f2:a2:45:d9:e6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=fc260eb5-0912-49a4-b831-3cfc322274a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:00:18:91:22:2a:b2:bd:43:88:c9:6a:7b:7b:
                    89:f1:ce:33:30:e1:28:d6:70:a5:ce:29:1f:53:15:
                    41:43:36:73:5f:27:72:f4:ae:13:f3:82:70:bc:fd:
                    cf:84:a3:e4:ec:aa:e9:07:a4:fe:83:64:d0:fb:e5:
                    9f:c9:8a:a1:b8:9a:89:31:97:74:bd:bb:ac:91:05:
                    8b:d6:64:8b:11:af:25:44:92:fe:4f:9a:bc:c6:9a:
                    c2:65:c9:09:f7:44:53:e1:41:a8:0b:98:8c:f8:53:
                    cf:31:f1:9c:84:f8:7d:a0:13:96:af:26:76:92:6e:
                    84:88:ba:9b:0a:3d:db:db:d9:17:76:28:2c:ed:16:
                    cf:30:26:cd:a5:93:23:34:3f:45:60:2b:49:a3:5d:
                    fd:8a:e0:70:f4:6a:61:50:d9:33:7b:80:d0:a2:aa:
                    64:c7:fa:61:03:c2:e8:86:d7:59:ec:8f:f5:6d:d9:
                    36:c6:cc:bc:69:c5:2d:33:3a:2c:a6:ad:65:90:7a:
                    29:c2:26:26:93:b1:2b:9d:9d:5a:ae:53:7f:bb:ea:
                    2f:03:97:58:85:43:6a:0e:b9:3e:11:69:7c:30:cd:
                    3e:f1:f1:63:4b:f7:3c:f0:ad:bc:6c:f8:99:2b:74:
                    37:ac:c9:d1:77:c7:32:90:a6:3e:3b:b6:0f:33:aa:
                    8b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:37:C2:89:92:9B:14:27:51:4E:09:63:E8:47:0B:C5:F5:52:69:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/cd7bbf4a-f326-3337-957b-4b50b07568e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl

            X509v3 Authority Key Identifier:
                keyid:DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:69c0:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:55:c1:7f:88:48:1c:f1:6d:d6:da:80:14:25:de:71:64:01:
         d9:63:53:51:33:64:8c:fc:f4:29:fa:91:02:7a:9e:db:4c:ee:
         46:88:10:1f:3f:25:27:99:f2:cd:50:79:d4:20:d6:20:d7:28:
         dc:a1:cc:42:49:18:71:5a:99:77:6c:80:3c:a2:2a:6a:15:31:
         1e:5b:f8:b9:2e:c5:99:e8:ce:16:40:60:ff:e9:1a:b3:59:74:
         9a:42:91:fd:72:9c:44:06:7b:1b:e0:3e:5f:eb:e1:4b:71:6e:
         8b:c4:f9:55:35:d2:8e:69:20:ac:9a:17:b8:15:e1:9c:10:ee:
         3a:4e:fa:ff:f0:1e:2e:60:2b:77:f9:9a:8b:46:db:c2:64:b0:
         bf:a8:a6:5f:3d:71:d8:dd:81:4b:35:df:45:66:3c:d3:3c:63:
         53:17:f9:8e:dd:fa:d2:b5:b4:72:1b:11:27:08:8c:6a:d0:eb:
         cf:9b:d2:86:9e:ca:33:1b:fb:8c:f5:0c:d4:07:c9:c8:c5:6f:
         51:9b:ad:76:85:f3:74:c1:4a:0b:30:31:90:92:f8:7f:1b:64:
         20:3a:0c:35:03:b0:21:01:e4:e1:88:e7:82:c3:e6:9d:60:b4:
         fb:e5:ba:39:c3:bb:24:26:2b:b4:3c:62:cc:5d:b6:7d:7c:21:
         38:b2:8f:01
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEksrnmshTPyokXZ5iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDkyMDA5MmYtMzA3ZS00NGIzLWI1NWEtY2M1YThjNjIy
NGRjMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZmMyNjBlYjUtMDkxMi00OWE0LWI4MzEtM2NmYzMyMjI3NGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AAYkSIqsr1DiMlqe3uJ8c4zMOEo1nClzikf
UxVBQzZzXydy9K4T84JwvP3PhKPk7KrpB6T+g2TQ++WfyYqhuJqJMZd0vbuskQWL
1mSLEa8lRJL+T5q8xprCZckJ90RT4UGoC5iM+FPPMfGchPh9oBOWryZ2km6EiLqb
Cj3b29kXdigs7RbPMCbNpZMjND9FYCtJo139iuBw9GphUNkze4DQoqpkx/phA8Lo
htdZ7I/1bdk2xsy8acUtMzospq1lkHopwiYmk7ErnZ1arlN/u+ovA5dYhUNqDrk+
EWl8MM0+8fFjS/c88K28bPiZK3Q3rMnRd8cykKY+O7YPM6qLyQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKc3womSmxQnUU4JY+hHC8X1UmljMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80OTIw
MDkyZi0zMDdlLTQ0YjMtYjU1YS1jYzVhOGM2MjI0ZGMvY2Q3YmJmNGEtZjMyNi0z
MzM3LTk1N2ItNGI1MGIwNzU2OGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDkyMDA5MmYtMzA3ZS00NGIzLWI1
NWEtY2M1YThjNjIyNGRjLzQ5MjAwOTJmLTMwN2UtNDRiMy1iNTVhLWNjNWE4YzYy
MjRkYy5jcmwwHwYDVR0jBBgwFoAU2uEK04DVy5MIaCALI4wo08iWDL0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80OTIwMDkyZi0zMDdlLTQ0YjMtYjU1YS1jYzVh
OGM2MjI0ZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgZpwJAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAyVXBf4hIHPFt1tqAFCXecWQB2WNTUTNkjPz0KfqRAnqe20zuRogQ
Hz8lJ5nyzVB51CDWINco3KHMQkkYcVqZd2yAPKIqahUxHlv4uS7FmejOFkBg/+ka
s1l0mkKR/XKcRAZ7G+A+X+vhS3Fui8T5VTXSjmkgrJoXuBXhnBDuOk76//AeLmAr
d/mai0bbwmSwv6imXz1x2N2BSzXfRWY80zxjUxf5jt360rW0chsRJwiMatDrz5vS
hp7KMxv7jPUM1AfJyMVvUZutdoXzdMFKCzAxkJL4fxtkIDoMNQOwIQHk4YjngsPm
nWC0++W6OcO7JCYrtDxizF22fXwhOLKPAQ==
-----END CERTIFICATE-----