Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960/05bf2ef5-55ab-3860-b148-9e16f4e86ba6.roa
File:                     05bf2ef5-55ab-3860-b148-9e16f4e86ba6.roa (raw, json)
Hash identifier:          IEYCOwYXo9+k0ewjdthCEw7JhDT4noSSQf4MMxy4NsA=
Subject key identifier:   2E:B4:3E:DF:69:47:D7:98:6F:2E:35:49:1B:62:9C:00:14:98:57:F1
Certificate issuer:       /CN=dfbb4144-3bd6-4c5c-9b1f-60af8dda0960
Certificate serial:       010D0C9F43285848EF6162FF01813B2FC4B8E320
Authority key identifier: 44:50:E6:9D:82:61:B8:2C:3F:7B:A8:79:53:EF:CA:E6:74:2B:90:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960/05bf2ef5-55ab-3860-b148-9e16f4e86ba6.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     11142
IP address blocks:        2605:e780::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:62:ff:01:81:3b:2f:c4:b8:e3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfbb4144-3bd6-4c5c-9b1f-60af8dda0960
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=fd271ab0-099f-4caa-99fc-1e15cab26327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:76:56:bb:f9:1e:28:37:60:47:89:77:83:
                    44:f1:ff:d5:c2:8f:83:e1:ca:41:4c:f3:eb:f4:b0:
                    c9:24:54:80:9e:fc:01:85:67:ea:05:24:84:95:8a:
                    22:e2:66:14:98:b8:c6:3d:9a:cf:c9:93:0f:f9:4c:
                    78:54:0b:21:40:c0:30:4a:45:1e:27:b4:eb:3d:17:
                    28:fa:79:73:50:71:4a:93:51:5b:2d:c0:5a:fd:9f:
                    43:04:7e:72:da:9e:68:99:25:d7:62:dd:9a:11:ef:
                    b1:2a:b6:10:d0:38:43:5c:a4:82:fe:7d:89:d1:36:
                    4c:24:5d:f4:50:df:d0:35:59:98:bd:1d:4f:cf:22:
                    1c:7d:78:e6:85:fe:39:c3:75:ca:1f:21:20:23:09:
                    52:4e:65:1d:44:4b:09:f8:f9:bd:bb:f0:f7:32:d2:
                    63:39:8b:32:43:5d:83:ce:de:47:c9:be:0e:a4:1c:
                    99:a9:e6:57:a8:58:21:c8:5f:fc:5d:48:b8:24:bb:
                    59:fe:7a:bb:62:3a:e7:38:97:5b:f6:fd:41:7d:51:
                    58:6f:f3:de:33:c7:b6:4e:6d:dd:fd:8b:c6:55:31:
                    61:cc:5a:30:f7:c1:60:05:55:b1:6b:63:a0:54:ca:
                    a5:f3:e2:d9:a0:fa:7d:1b:82:1c:03:3b:f6:6a:23:
                    17:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B4:3E:DF:69:47:D7:98:6F:2E:35:49:1B:62:9C:00:14:98:57:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960/05bf2ef5-55ab-3860-b148-9e16f4e86ba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.crl

            X509v3 Authority Key Identifier:
                keyid:44:50:E6:9D:82:61:B8:2C:3F:7B:A8:79:53:EF:CA:E6:74:2B:90:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:50:4e:94:1c:ef:53:5c:ac:16:89:fa:c0:a3:f3:f5:4a:4c:
         a9:24:97:52:37:80:94:23:8a:26:41:b2:e8:d9:d1:fb:9a:3a:
         0f:93:9e:5f:eb:3d:13:e9:65:e0:33:f0:e9:fc:46:92:29:a5:
         18:ec:65:43:2a:da:8f:81:ce:0a:d3:e7:da:0a:da:d9:27:eb:
         e8:10:d1:78:49:91:f5:64:9e:1e:0b:e5:70:ae:8a:7f:8f:df:
         b0:d0:55:70:83:8e:7c:81:1f:38:15:8b:ff:98:4b:62:7e:f1:
         7a:44:35:68:64:58:7c:aa:e3:43:fb:8d:2b:02:8f:c0:55:04:
         de:a6:5a:0f:0d:36:43:5a:3d:65:c8:43:ad:c5:31:28:3c:03:
         3c:6d:0f:81:8f:56:cb:4a:47:28:a6:d6:03:be:56:a7:1e:e5:
         41:00:de:5b:3d:95:96:9f:c4:24:44:d7:0d:e1:a2:45:0e:e5:
         9a:08:0b:1d:b8:23:c9:ff:5c:1e:fc:71:dc:a7:4d:6d:b0:4b:
         0b:12:06:4d:72:a8:06:5c:6f:5e:41:97:4f:c5:82:2c:a4:21:
         59:31:8e:b7:d7:98:73:5b:76:54:93:dd:40:69:58:0c:af:2b:
         87:04:40:f7:b9:74:5f:51:77:eb:12:a8:b0:65:9c:09:db:7c:
         9b:aa:0c:f9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjvYWL/AYE7L8S44yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZiYjQxNDQtM2JkNi00YzVjLTliMWYtNjBhZjhkZGEw
OTYwMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
ZmQyNzFhYjAtMDk5Zi00Y2FhLTk5ZmMtMWUxNWNhYjI2MzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySh2Vrv5Hig3YEeJd4NE8f/Vwo+D4cpBTPPr
9LDJJFSAnvwBhWfqBSSElYoi4mYUmLjGPZrPyZMP+Ux4VAshQMAwSkUeJ7TrPRco
+nlzUHFKk1FbLcBa/Z9DBH5y2p5omSXXYt2aEe+xKrYQ0DhDXKSC/n2J0TZMJF30
UN/QNVmYvR1PzyIcfXjmhf45w3XKHyEgIwlSTmUdREsJ+Pm9u/D3MtJjOYsyQ12D
zt5Hyb4OpByZqeZXqFghyF/8XUi4JLtZ/nq7YjrnOJdb9v1BfVFYb/PeM8e2Tm3d
/YvGVTFhzFow98FgBVWxa2OgVMql8+LZoPp9G4IcAzv2aiMXDQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFC60Pt9pR9eYby41SRtinAAUmFfxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZmJi
NDE0NC0zYmQ2LTRjNWMtOWIxZi02MGFmOGRkYTA5NjAvMDViZjJlZjUtNTVhYi0z
ODYwLWIxNDgtOWUxNmY0ZTg2YmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGZiYjQxNDQtM2JkNi00YzVjLTli
MWYtNjBhZjhkZGEwOTYwL2RmYmI0MTQ0LTNiZDYtNGM1Yy05YjFmLTYwYWY4ZGRh
MDk2MC5jcmwwHwYDVR0jBBgwFoAURFDmnYJhuCw/e6h5U+/K5nQrkDIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZmJiNDE0NC0zYmQ2LTRjNWMtOWIxZi02MGFm
OGRkYTA5NjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXngDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQApUE6UHO9TXKwWifrAo/P1SkypJJdSN4CUI4omQbLo2dH7mjoPk55f
6z0T6WXgM/Dp/EaSKaUY7GVDKtqPgc4K0+faCtrZJ+voENF4SZH1ZJ4eC+Vwrop/
j9+w0FVwg458gR84FYv/mEtifvF6RDVoZFh8quND+40rAo/AVQTeploPDTZDWj1l
yEOtxTEoPAM8bQ+Bj1bLSkcoptYDvlanHuVBAN5bPZWWn8QkRNcN4aJFDuWaCAsd
uCPJ/1we/HHcp01tsEsLEgZNcqgGXG9eQZdPxYIspCFZMY6315hzW3ZUk91AaVgM
ryuHBED3uXRfUXfrEqiwZZwJ23ybqgz5
-----END CERTIFICATE-----