Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d7d1fbd4-da59-3b25-bf1e-127472184883.roa
File:                     d7d1fbd4-da59-3b25-bf1e-127472184883.roa (raw, json)
Hash identifier:          6EHF9V4YFvQkbjGxMVppmsYpU4TDFvCPa6+HgWLLnig=
Subject key identifier:   52:01:A9:28:24:7B:02:B6:DD:E4:EE:D0:C4:EA:73:A4:1D:FC:F6:ED
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350E90878FE8E901A292DC80
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d7d1fbd4-da59-3b25-bf1e-127472184883.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:203f::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:90:87:8f:e8:e9:01:a2:92:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=5230f164-5e75-4d2e-8aab-2a4e54c41bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:47:56:a3:f9:6e:81:18:94:d4:be:99:d9:
                    44:29:33:09:14:98:11:50:5f:b2:99:41:1f:2c:3f:
                    41:e1:d7:c7:bb:67:e4:bf:ff:84:5f:30:91:77:da:
                    90:60:af:2c:ca:79:a2:fd:83:e6:b6:0f:e6:99:e8:
                    cf:5a:08:f9:8e:2e:ae:1b:da:c4:f4:5d:f2:fd:de:
                    e2:6f:e7:0e:d6:18:47:02:e9:f9:c6:7d:91:60:d1:
                    8e:09:6f:95:da:0e:19:c5:14:03:bd:c2:fd:ea:f5:
                    d8:dc:d3:a8:07:f8:5b:fa:50:6f:94:14:ce:92:b1:
                    c5:47:c7:c1:48:cc:1e:74:34:30:65:26:97:5e:ef:
                    21:1e:bb:e8:70:8f:02:21:6f:48:b6:a6:38:91:27:
                    e1:61:29:86:7a:dd:97:4d:b0:77:eb:90:89:a5:1c:
                    88:17:5e:3b:bb:30:15:c5:23:36:e6:ff:e8:03:92:
                    f7:04:0e:e8:7b:04:19:8f:c8:c1:4b:83:27:be:f6:
                    2f:46:02:ed:09:07:e1:6d:84:ac:9c:ce:7f:68:7e:
                    ac:ec:42:6e:00:c2:af:d0:07:bd:e2:45:fc:9c:ef:
                    cd:d5:ba:00:e0:0f:1e:66:de:c1:02:23:86:b3:e6:
                    bb:17:04:89:64:74:80:aa:0a:4d:43:9c:85:cb:f7:
                    b0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:01:A9:28:24:7B:02:B6:DD:E4:EE:D0:C4:EA:73:A4:1D:FC:F6:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d7d1fbd4-da59-3b25-bf1e-127472184883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:203f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ed:cc:61:8c:5b:2c:f4:2d:b7:c7:f8:f4:c4:5d:27:d3:71:
         1a:b2:32:57:51:e1:b9:ab:5e:89:78:80:86:57:b2:95:74:62:
         cc:7f:64:9b:be:37:a3:bd:c6:df:d5:f1:87:18:b5:bb:98:de:
         02:ab:a6:c5:f9:d9:3b:c1:d4:70:56:df:84:55:50:8b:ce:17:
         0a:e4:1a:d3:6b:35:17:cc:0b:09:24:d4:eb:f4:29:9a:c2:c9:
         9c:9c:01:0f:43:d4:70:4c:62:f2:a8:14:8b:9f:a7:b8:a4:4a:
         a2:7d:65:23:24:f3:94:38:dd:52:26:b3:53:64:99:9f:12:65:
         6b:0c:f2:e0:8a:b6:5b:a4:bc:ce:58:fa:2d:90:29:c9:5a:71:
         2e:6a:cc:b5:15:dc:fd:af:20:28:6b:17:b4:fb:58:b7:dc:31:
         4c:8d:84:77:6e:5e:d9:ec:76:4e:fe:be:2e:06:88:5b:41:dd:
         3c:27:e9:2d:5b:35:ee:d2:56:d5:e7:76:3e:84:b1:05:6d:94:
         ff:bd:c6:48:92:11:d6:96:75:6b:d8:ee:33:c1:75:68:da:fb:
         3a:7c:ab:da:ca:76:80:2e:e2:ba:aa:48:21:9b:07:a0:68:8e:
         be:fb:7a:ff:5a:33:69:c2:03:1c:7b:f8:b4:8d:78:d0:9f:01:
         6f:1d:43:db
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk1DpCHj+jpAaKS3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
NTIzMGYxNjQtNWU3NS00ZDJlLThhYWItMmE0ZTU0YzQxYmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5lHVqP5boEYlNS+mdlEKTMJFJgRUF+ymUEf
LD9B4dfHu2fkv/+EXzCRd9qQYK8synmi/YPmtg/mmejPWgj5ji6uG9rE9F3y/d7i
b+cO1hhHAun5xn2RYNGOCW+V2g4ZxRQDvcL96vXY3NOoB/hb+lBvlBTOkrHFR8fB
SMwedDQwZSaXXu8hHrvocI8CIW9ItqY4kSfhYSmGet2XTbB365CJpRyIF147uzAV
xSM25v/oA5L3BA7oewQZj8jBS4MnvvYvRgLtCQfhbYSsnM5/aH6s7EJuAMKv0Ae9
4kX8nO/N1boA4A8eZt7BAiOGs+a7FwSJZHSAqgpNQ5yFy/ew/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFIBqSgkewK23eTu0MTqc6Qd/PbtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvZDdkMWZiZDQtZGE1OS0z
YjI1LWJmMWUtMTI3NDcyMTg0ODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCA/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG7tzGGMWyz0LbfH+PTEXSfTcRqyMldR4bmrXol4gIZXspV0Ysx/
ZJu+N6O9xt/V8YcYtbuY3gKrpsX52TvB1HBW34RVUIvOFwrkGtNrNRfMCwkk1Ov0
KZrCyZycAQ9D1HBMYvKoFIufp7ikSqJ9ZSMk85Q43VIms1NkmZ8SZWsM8uCKtluk
vM5Y+i2QKclacS5qzLUV3P2vIChrF7T7WLfcMUyNhHduXtnsdk7+vi4GiFtB3Twn
6S1bNe7SVtXndj6EsQVtlP+9xkiSEdaWdWvY7jPBdWja+zp8q9rKdoAu4rqqSCGb
B6Bojr77ev9aM2nCAxx7+LSNeNCfAW8dQ9s=
-----END CERTIFICATE-----