Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/d389e7f4-ba05-3d2e-923a-b2a6687d3ddf.roa
File:                     d389e7f4-ba05-3d2e-923a-b2a6687d3ddf.roa (raw, json)
Hash identifier:          EEesgjy1avDbK4QHDYsx2g864q6iKsM4JElCBkS6bNo=
Subject key identifier:   B5:1D:DE:7F:C1:A3:F0:56:95:E6:5C:8F:74:8D:33:24:6A:F7:F0:C5
Certificate issuer:       /CN=1a319486-03d5-4fb1-997e-228350330847
Certificate serial:       010D0C9F4328584975445FF0EDEFD99577675080
Authority key identifier: A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/d389e7f4-ba05-3d2e-923a-b2a6687d3ddf.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     16509
IP address blocks:        2602:815:3003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:5f:f0:ed:ef:d9:95:77:67:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a319486-03d5-4fb1-997e-228350330847
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=3c654aaf-14f4-4ee3-95f4-a6c5cd52faa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b6:d4:c9:b7:a6:f6:46:58:8c:b2:20:4e:42:
                    0e:f3:1b:37:0d:f7:c1:1e:9b:e7:c2:b0:61:db:2d:
                    40:d1:23:d0:bf:cb:45:f1:5d:a0:b8:cb:bd:24:3a:
                    e3:a3:f5:a7:c5:f5:b3:e4:b7:06:9c:49:80:2f:5b:
                    8b:8a:cf:5a:f4:ad:f8:11:65:10:86:bc:62:d4:2b:
                    da:a2:fc:7b:5d:43:c0:c7:ae:f6:94:76:fa:be:7b:
                    8a:68:24:b5:12:0d:3b:2a:fa:97:24:d3:18:16:12:
                    52:3c:e7:5d:f4:ba:26:07:e2:09:ba:b2:09:07:3a:
                    e9:a4:a0:2e:aa:84:52:b5:6c:ec:64:04:73:cc:77:
                    2a:96:e7:23:c8:f8:bc:db:02:b9:61:0e:12:d0:ae:
                    c4:00:82:57:33:06:19:d8:6d:ad:f4:8a:71:52:b9:
                    20:c9:82:07:28:80:80:f2:40:6d:cf:e3:7d:13:e3:
                    9d:18:fc:da:24:2e:61:24:9b:84:15:db:35:a0:04:
                    5b:40:cf:86:06:25:94:c4:fe:e7:b0:db:4f:e9:de:
                    69:6d:e1:f9:17:f6:7c:e1:c5:4a:7a:04:92:13:74:
                    84:d7:c9:58:62:f1:6e:fd:42:97:37:20:35:68:b5:
                    49:b0:fa:88:5d:02:32:50:af:35:4d:1b:78:47:02:
                    1c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1D:DE:7F:C1:A3:F0:56:95:E6:5C:8F:74:8D:33:24:6A:F7:F0:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/d389e7f4-ba05-3d2e-923a-b2a6687d3ddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl

            X509v3 Authority Key Identifier:
                keyid:A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:3003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:cb:5e:ac:c0:5b:c7:d2:4b:73:ef:f9:b4:65:05:05:da:19:
         a0:f1:d9:6c:29:6d:8b:40:ef:4a:06:bc:52:83:d7:31:0a:75:
         9c:10:04:1c:b2:75:3b:50:c3:11:3c:24:aa:2b:fe:78:f1:05:
         b5:97:ab:5b:fa:c1:f5:b2:d8:a8:28:19:67:02:fa:c0:f7:ba:
         6a:c1:ad:45:e0:70:d2:3c:ae:fb:dc:9d:00:06:54:c8:dc:da:
         c3:5f:21:21:e1:4a:74:07:ed:df:ee:f9:93:a1:7c:50:ed:68:
         3b:10:52:ad:6f:4d:16:27:30:d6:0b:19:aa:5f:56:ff:5e:04:
         a9:f8:58:d7:1d:0b:9c:0e:b2:f4:4b:1c:94:4d:8c:74:84:c7:
         01:f4:d6:ba:8f:26:e4:c4:3b:5d:fe:e7:f2:d2:5e:70:ff:36:
         e5:0e:7f:98:a2:be:96:2a:a9:8d:9a:bc:6a:17:98:46:0e:35:
         21:17:19:ca:44:b2:37:7e:58:21:9f:03:e8:5d:af:0b:da:01:
         94:92:49:5a:e8:1d:91:74:95:49:4a:58:a5:80:21:36:ff:d7:
         65:54:1b:49:3d:d3:88:a6:6b:c4:e0:19:60:20:c6:77:0c:f9:
         fc:9d:ff:d8:72:79:70:6d:9a:98:0c:d3:e2:ad:20:e0:01:32:
         30:a1:5c:02
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl1RF/w7e/ZlXdnUIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWEzMTk0ODYtMDNkNS00ZmIxLTk5N2UtMjI4MzUwMzMw
ODQ3MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk
M2M2NTRhYWYtMTRmNC00ZWUzLTk1ZjQtYTZjNWNkNTJmYWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7bUybem9kZYjLIgTkIO8xs3DffBHpvnwrBh
2y1A0SPQv8tF8V2guMu9JDrjo/WnxfWz5LcGnEmAL1uLis9a9K34EWUQhrxi1Cva
ovx7XUPAx672lHb6vnuKaCS1Eg07KvqXJNMYFhJSPOdd9LomB+IJurIJBzrppKAu
qoRStWzsZARzzHcqlucjyPi82wK5YQ4S0K7EAIJXMwYZ2G2t9IpxUrkgyYIHKICA
8kBtz+N9E+OdGPzaJC5hJJuEFds1oARbQM+GBiWUxP7nsNtP6d5pbeH5F/Z84cVK
egSSE3SE18lYYvFu/UKXNyA1aLVJsPqIXQIyUK81TRt4RwIchQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLUd3n/Bo/BWleZcj3SNMyRq9/DFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xYTMx
OTQ4Ni0wM2Q1LTRmYjEtOTk3ZS0yMjgzNTAzMzA4NDcvZDM4OWU3ZjQtYmEwNS0z
ZDJlLTkyM2EtYjJhNjY4N2QzZGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWEzMTk0ODYtMDNkNS00ZmIxLTk5
N2UtMjI4MzUwMzMwODQ3LzFhMzE5NDg2LTAzZDUtNGZiMS05OTdlLTIyODM1MDMz
MDg0Ny5jcmwwHwYDVR0jBBgwFoAUojoUY2Szy8/8gGpP64Xxl3Adxp0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xYTMxOTQ4Ni0wM2Q1LTRmYjEtOTk3ZS0yMjgz
NTAzMzA4NDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFTAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAArLXqzAW8fSS3Pv+bRlBQXaGaDx2WwpbYtA70oGvFKD1zEKdZwQ
BByydTtQwxE8JKor/njxBbWXq1v6wfWy2KgoGWcC+sD3umrBrUXgcNI8rvvcnQAG
VMjc2sNfISHhSnQH7d/u+ZOhfFDtaDsQUq1vTRYnMNYLGapfVv9eBKn4WNcdC5wO
svRLHJRNjHSExwH01rqPJuTEO13+5/LSXnD/NuUOf5iivpYqqY2avGoXmEYONSEX
GcpEsjd+WCGfA+hdrwvaAZSSSVroHZF0lUlKWKWAITb/12VUG0k904ima8TgGWAg
xncM+fyd/9hyeXBtmpgM0+KtIOABMjChXAI=
-----END CERTIFICATE-----