Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/39f1df2e-d253-3c81-b258-d0b5d7c7349a.roa
File:                     39f1df2e-d253-3c81-b258-d0b5d7c7349a.roa (raw, json)
Hash identifier:          c2+D2m3qinzgyrBWJ8qbsoAMsf2rDmYOhCxNlkGl3Tk=
Subject key identifier:   77:0F:5A:81:E9:84:4B:0F:31:2E:CC:32:81:C1:B2:6C:78:66:D6:9B
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350E9FE2EC20A73F239E4100
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/39f1df2e-d253-3c81-b258-d0b5d7c7349a.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:20b4::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:9f:e2:ec:20:a7:3f:23:9e:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=391cba8d-1669-4a86-b4fa-ec539403a8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:21:b4:6e:d4:9d:52:d0:a8:1a:bc:47:ae:
                    b5:bd:9b:f5:ce:a2:43:2a:0b:fd:a0:fa:42:e4:7d:
                    f8:10:75:11:5a:62:10:17:f1:ab:9b:75:0f:99:40:
                    7d:83:1a:d9:8f:02:f2:d8:57:41:0c:35:84:67:d8:
                    d6:88:9e:e4:3d:d7:94:e8:76:3c:ef:88:e9:dd:a9:
                    6a:06:26:08:fa:c2:c2:87:84:f2:4f:5c:51:ea:da:
                    5c:41:83:3b:a3:f4:aa:1e:46:38:12:23:3f:f7:60:
                    b3:38:27:2e:c2:c0:d2:f7:f0:4e:01:00:6a:f5:a6:
                    8a:ce:a8:e6:94:ee:c5:f3:e8:41:a1:66:63:52:dc:
                    ad:c6:ac:62:e3:47:df:22:70:bd:e4:40:81:1f:1e:
                    fc:74:39:41:90:73:09:1e:a6:74:96:56:6d:57:bb:
                    e5:74:5a:02:44:8e:43:b7:e7:56:99:91:2d:8f:2f:
                    2a:6f:22:25:94:ce:dc:6b:40:ea:8e:87:2a:b1:44:
                    9c:2f:25:51:fd:08:e4:8d:9b:7b:ec:6c:98:3b:39:
                    9a:fc:dd:87:b8:82:5d:d4:5e:7c:6e:ad:00:8a:24:
                    b5:c6:7a:c1:84:4d:51:0c:49:ae:eb:94:ce:15:85:
                    78:84:b5:18:63:ca:6c:c5:df:e3:b2:2d:a5:9e:c7:
                    aa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0F:5A:81:E9:84:4B:0F:31:2E:CC:32:81:C1:B2:6C:78:66:D6:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/39f1df2e-d253-3c81-b258-d0b5d7c7349a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20b4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:16:36:fa:cc:91:3d:6f:3a:44:d5:06:6e:cc:76:83:a5:8a:
         90:4a:1c:6f:15:0b:41:e0:19:2d:42:76:1a:ba:32:0b:c3:f8:
         1d:cb:2c:f0:74:e8:7a:43:f0:16:08:21:ec:78:ca:c2:53:3d:
         8b:7d:72:e2:42:40:9e:75:34:8f:cc:67:96:b0:06:69:7c:0d:
         d5:38:f0:cb:1e:73:fd:2f:17:49:ff:b9:92:20:e2:cb:4e:3d:
         dc:57:28:20:d1:a4:14:92:9b:66:e0:67:20:78:24:b4:aa:cb:
         d6:cd:25:20:18:2f:8b:95:83:13:c7:31:ab:59:ed:33:1f:79:
         e6:c0:8e:b6:f3:d1:ca:ef:2e:41:97:97:22:df:41:74:6c:f3:
         43:98:1c:8b:6e:d9:91:f0:02:fc:53:1f:f1:d2:79:f6:a8:3c:
         2b:1c:40:91:48:eb:19:bf:f0:a9:e0:88:af:7a:fd:89:70:89:
         da:4d:cb:cf:ab:8a:ce:d4:7e:38:66:80:06:ff:14:d6:8d:6c:
         65:a9:63:1a:44:12:6e:c6:1d:8b:8e:a4:64:f5:64:29:bb:f8:
         c8:ad:8a:79:89:e0:c5:d8:bb:6c:4c:0b:a6:5c:c3:fd:30:5c:
         95:fe:d2:42:dd:56:56:f3:83:c3:53:ef:d9:0f:8b:e2:d9:bd:
         60:e3:61:7f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk1Dp/i7CCnPyOeQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
MzkxY2JhOGQtMTY2OS00YTg2LWI0ZmEtZWM1Mzk0MDNhOGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7QhtG7UnVLQqBq8R661vZv1zqJDKgv9oPpC
5H34EHURWmIQF/Grm3UPmUB9gxrZjwLy2FdBDDWEZ9jWiJ7kPdeU6HY874jp3alq
BiYI+sLCh4TyT1xR6tpcQYM7o/SqHkY4EiM/92CzOCcuwsDS9/BOAQBq9aaKzqjm
lO7F8+hBoWZjUtytxqxi40ffInC95ECBHx78dDlBkHMJHqZ0llZtV7vldFoCRI5D
t+dWmZEtjy8qbyIllM7ca0DqjocqsUScLyVR/QjkjZt77GyYOzma/N2HuIJd1F58
bq0AiiS1xnrBhE1RDEmu65TOFYV4hLUYY8psxd/jsi2lnseqqQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHcPWoHphEsPMS7MMoHBsmx4ZtabMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvMzlmMWRmMmUtZDI1My0z
YzgxLWIyNTgtZDBiNWQ3YzczNDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCC0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAIWNvrMkT1vOkTVBm7MdoOlipBKHG8VC0HgGS1Cdhq6MgvD+B3L
LPB06HpD8BYIIex4ysJTPYt9cuJCQJ51NI/MZ5awBml8DdU48Msec/0vF0n/uZIg
4stOPdxXKCDRpBSSm2bgZyB4JLSqy9bNJSAYL4uVgxPHMatZ7TMfeebAjrbz0crv
LkGXlyLfQXRs80OYHItu2ZHwAvxTH/HSefaoPCscQJFI6xm/8KngiK96/YlwidpN
y8+ris7UfjhmgAb/FNaNbGWpYxpEEm7GHYuOpGT1ZCm7+MitinmJ4MXYu2xMC6Zc
w/0wXJX+0kLdVlbzg8NT79kPi+LZvWDjYX8=
-----END CERTIFICATE-----