Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/8963bea2-57aa-3726-b264-cf5c3ed96a4f.roa
File:                     8963bea2-57aa-3726-b264-cf5c3ed96a4f.roa (raw, json)
Hash identifier:          ECzz3WmXDAKJkl6Fh9XVxmKtP4cMOEt141OI1r+YRsg=
Subject key identifier:   67:A4:3C:DB:B8:B7:24:FA:19:BB:23:DE:FB:EF:62:3C:90:76:1B:2B
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F43285848EC9690F08780E1A83DE6B880
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/8963bea2-57aa-3726-b264-cf5c3ed96a4f.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     4181
IP address blocks:        2604:ad00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:90:f0:87:80:e1:a8:3d:e6:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=a768d85e-e271-413f-8c07-4b0787a258e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d8:71:ad:e8:78:12:6a:e0:db:6c:2e:00:da:
                    d8:5b:69:5b:54:20:04:3f:bc:3d:e2:ea:c9:3c:f6:
                    ac:a3:e3:72:1f:d1:3d:16:97:3f:c4:dc:b5:5e:8f:
                    7b:76:73:be:b8:65:e6:4b:bd:17:27:e5:09:1a:b0:
                    99:7e:dd:37:56:c3:73:d9:7c:39:b9:ab:84:8b:f8:
                    08:88:0c:6d:61:2f:dd:c1:98:9f:9f:32:17:69:0c:
                    e7:85:22:18:98:45:f0:45:8a:d4:8d:34:db:86:93:
                    11:3e:09:ca:5f:84:4e:a6:76:7e:40:19:f5:d0:6f:
                    fe:da:7c:ec:2f:5c:29:4b:12:9a:d2:c5:52:9a:f9:
                    8b:44:94:e2:63:8c:40:cc:77:40:a0:0d:22:fa:48:
                    f2:0d:aa:77:82:61:66:ef:8c:24:7d:99:52:26:83:
                    0a:fe:76:f6:1b:64:89:e7:9d:04:02:95:64:e5:5d:
                    bf:49:a3:71:7a:9a:27:44:37:0f:0c:9b:6a:ac:ff:
                    9c:50:b3:25:a5:53:ef:31:07:4f:98:bc:b7:cf:11:
                    7e:a0:c8:52:4e:10:85:f1:61:87:96:eb:80:9a:32:
                    5c:1c:ea:e9:68:b6:8c:b8:62:10:33:57:7c:c3:f1:
                    ad:6c:8a:09:43:f3:80:30:44:62:a2:2c:9a:a5:bc:
                    e0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A4:3C:DB:B8:B7:24:FA:19:BB:23:DE:FB:EF:62:3C:90:76:1B:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/8963bea2-57aa-3726-b264-cf5c3ed96a4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ad00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:cb:1b:8a:8e:cc:d1:f3:4d:f7:3b:9d:02:4c:05:d3:9c:29:
         e3:d2:58:70:1a:e4:32:7b:42:6c:56:c4:98:cc:b1:92:f6:e2:
         de:7f:e5:1f:7d:18:7f:85:aa:29:7d:a8:ef:c8:ab:31:85:fb:
         07:29:d7:d6:f1:4d:1a:10:0b:15:e3:27:32:b8:88:60:09:01:
         39:75:b6:94:e0:4e:83:d3:be:d8:1e:75:a4:4b:a2:36:7a:10:
         13:bf:aa:f4:33:a9:fc:fe:e5:02:b8:30:92:5c:a5:c7:93:bf:
         90:ae:71:ce:bf:47:47:cf:32:fc:0d:88:23:99:af:45:90:06:
         71:09:10:36:a8:48:3e:56:2f:cd:cb:d9:24:b5:5f:b3:01:83:
         ab:df:a0:15:61:00:f4:b3:4f:97:83:a9:f5:7d:be:45:08:7b:
         54:56:ca:a9:fe:9b:7a:8e:38:db:57:71:a1:4c:5e:5b:e7:8e:
         08:bf:d0:04:6b:13:90:0e:5c:a0:f4:53:8e:d6:05:d4:c3:4b:
         d3:d3:0a:e5:08:10:31:b7:e0:96:b3:f8:ed:c2:c0:d5:af:d1:
         3a:68:a7:ed:e0:87:1a:1a:0e:ea:c8:c2:05:f4:54:79:45:79:
         95:0f:b2:eb:d3:cd:a0:d6:39:3d:7c:42:59:99:67:cd:a8:f2:
         76:d0:37:5c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjslpDwh4DhqD3muIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh
ZjAxMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
YTc2OGQ4NWUtZTI3MS00MTNmLThjMDctNGIwNzg3YTI1OGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdhxreh4Emrg22wuANrYW2lbVCAEP7w94urJ
PPaso+NyH9E9Fpc/xNy1Xo97dnO+uGXmS70XJ+UJGrCZft03VsNz2Xw5uauEi/gI
iAxtYS/dwZifnzIXaQznhSIYmEXwRYrUjTTbhpMRPgnKX4ROpnZ+QBn10G/+2nzs
L1wpSxKa0sVSmvmLRJTiY4xAzHdAoA0i+kjyDap3gmFm74wkfZlSJoMK/nb2G2SJ
550EApVk5V2/SaNxeponRDcPDJtqrP+cULMlpVPvMQdPmLy3zxF+oMhSThCF8WGH
luuAmjJcHOrpaLaMuGIQM1d8w/GtbIoJQ/OAMERioiyapbzgeQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGekPNu4tyT6Gbsj3vvvYjyQdhsrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk
NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvODk2M2JlYTItNTdhYS0z
NzI2LWIyNjQtY2Y1YzNlZDk2YTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx
MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl
YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3
MWQ0ZWFmMDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgStADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAOyxuKjszR8033O50CTAXTnCnj0lhwGuQye0JsVsSYzLGS9uLef+Uf
fRh/haopfajvyKsxhfsHKdfW8U0aEAsV4ycyuIhgCQE5dbaU4E6D077YHnWkS6I2
ehATv6r0M6n8/uUCuDCSXKXHk7+QrnHOv0dHzzL8DYgjma9FkAZxCRA2qEg+Vi/N
y9kktV+zAYOr36AVYQD0s0+Xg6n1fb5FCHtUVsqp/pt6jjjbV3GhTF5b544Iv9AE
axOQDlyg9FOO1gXUw0vT0wrlCBAxt+CWs/jtwsDVr9E6aKft4IcaGg7qyMIF9FR5
RXmVD7Lr082g1jk9fEJZmWfNqPJ20Ddc
-----END CERTIFICATE-----