Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/5d25e087-be39-300b-9ac3-0f9a2a629082.roa
File:                     5d25e087-be39-300b-9ac3-0f9a2a629082.roa (raw, json)
Hash identifier:          ogetMleSUBAcIlKDGDfuDYiHItAfPsiYXw44A5GuIlg=
Subject key identifier:   67:61:48:90:CC:FC:E2:C8:21:9A:EA:01:1A:4E:7C:98:DA:54:58:F7
Certificate issuer:       /CN=567ba016-7d2d-4729-a696-45a28ff7f6ec
Certificate serial:       010D0C9F43285848F22BE4FD429C6CC944DBC900
Authority key identifier: D6:6E:19:18:0A:CA:D3:59:B1:E7:67:53:04:B4:DE:32:DA:8A:07:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/5d25e087-be39-300b-9ac3-0f9a2a629082.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     5670
IP address blocks:        2607:97c0:2000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2b:e4:fd:42:9c:6c:c9:44:db:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567ba016-7d2d-4729-a696-45a28ff7f6ec
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=01ce7e31-c60e-40b1-a846-24f4fcc0e45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2b:61:e4:58:e6:9d:e1:b3:17:62:08:0a:ff:
                    c0:e8:c4:66:ca:bc:88:16:d2:87:61:d4:88:4e:ce:
                    92:ae:d9:9b:84:69:ac:7a:28:9e:5d:ac:8a:43:97:
                    53:2a:cb:65:b7:88:10:54:ae:b8:b1:70:b4:8c:10:
                    f6:d0:0b:82:51:1c:84:26:69:a2:3e:b6:f1:0b:69:
                    e0:83:e6:f6:a2:db:55:6e:0b:23:f0:d7:f9:36:53:
                    0f:92:7b:b5:0f:a9:9b:2b:43:63:f4:11:b3:81:6a:
                    be:c2:f9:c4:ca:be:94:72:ce:3f:e2:e6:12:05:4e:
                    54:1f:62:e4:2a:8e:aa:1d:68:ba:b3:03:44:0a:a0:
                    c0:e3:12:57:64:19:3a:ad:9a:8d:e4:60:29:f6:87:
                    33:2c:7e:8c:d7:e6:38:ef:3a:2e:c4:74:9f:d8:d7:
                    3d:ce:1b:02:ef:74:26:15:77:31:9f:84:c9:61:5f:
                    bf:3e:7b:5e:3d:60:0e:63:21:4f:62:67:38:3c:0e:
                    4b:a4:05:b2:12:82:b5:de:5f:d3:1b:0f:6b:01:ac:
                    5e:21:a1:0d:7e:98:e4:f6:d0:09:8c:a4:5d:1c:46:
                    ac:34:60:5d:1a:c4:d5:be:b8:0c:4d:bb:26:bf:91:
                    97:6d:1c:f6:54:56:79:94:71:e4:bf:2a:b3:9f:32:
                    f1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:61:48:90:CC:FC:E2:C8:21:9A:EA:01:1A:4E:7C:98:DA:54:58:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/5d25e087-be39-300b-9ac3-0f9a2a629082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/567ba016-7d2d-4729-a696-45a28ff7f6ec.crl

            X509v3 Authority Key Identifier:
                keyid:D6:6E:19:18:0A:CA:D3:59:B1:E7:67:53:04:B4:DE:32:DA:8A:07:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:97c0:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:8c:62:f9:eb:64:00:f2:94:cf:72:ff:08:ea:cc:fc:3e:ae:
         95:1b:68:dc:05:89:98:31:c3:b5:4a:a8:18:20:ec:79:62:ee:
         ff:df:da:fa:8a:e3:67:6b:27:01:f4:a3:80:ac:34:29:27:e6:
         31:c1:c3:dc:ad:2c:67:07:35:8d:1e:ae:0c:de:a6:1a:ac:78:
         1a:db:86:6a:50:6c:31:50:e2:27:ae:5c:d8:b9:c7:ff:88:ca:
         2f:fa:47:92:20:0a:37:93:b0:29:49:8a:30:a5:3a:cb:e4:fb:
         d5:6d:43:37:34:7d:e2:31:9e:f7:52:f5:71:27:43:95:d1:4f:
         b1:55:15:11:80:a5:c9:d7:5d:58:c2:bc:4d:0b:d9:b0:76:5b:
         06:81:3d:4a:e5:a9:52:a2:0a:54:7b:eb:f2:62:df:25:53:16:
         8c:70:69:c1:f2:ac:1b:da:9d:71:0b:f3:cf:04:de:2d:d5:b6:
         ff:81:19:0b:6d:19:0b:06:56:eb:8e:69:53:81:21:56:6f:0c:
         8a:59:be:bb:c3:92:93:7c:af:83:99:35:01:ce:a9:02:28:dc:
         7b:2d:3e:d0:b6:6a:3b:20:ab:9f:f8:21:f4:8f:06:43:36:c3:
         45:25:27:17:dd:e5:6e:85:aa:aa:fe:59:4d:e1:be:58:cc:2f:
         70:2d:c0:6d
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjyK+T9QpxsyUTbyQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTY3YmEwMTYtN2QyZC00NzI5LWE2OTYtNDVhMjhmZjdm
NmVjMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
MDFjZTdlMzEtYzYwZS00MGIxLWE4NDYtMjRmNGZjYzBlNDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCth5FjmneGzF2IICv/A6MRmyryIFtKHYdSI
Ts6SrtmbhGmseiieXayKQ5dTKstlt4gQVK64sXC0jBD20AuCURyEJmmiPrbxC2ng
g+b2ottVbgsj8Nf5NlMPknu1D6mbK0Nj9BGzgWq+wvnEyr6Ucs4/4uYSBU5UH2Lk
Ko6qHWi6swNECqDA4xJXZBk6rZqN5GAp9oczLH6M1+Y47zouxHSf2Nc9zhsC73Qm
FXcxn4TJYV+/PntePWAOYyFPYmc4PA5LpAWyEoK13l/TGw9rAaxeIaENfpjk9tAJ
jKRdHEasNGBdGsTVvrgMTbsmv5GXbRz2VFZ5lHHkvyqznzLxcwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGdhSJDM/OLIIZrqARpOfJjaVFj3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Njdi
YTAxNi03ZDJkLTQ3MjktYTY5Ni00NWEyOGZmN2Y2ZWMvNWQyNWUwODctYmUzOS0z
MDBiLTlhYzMtMGY5YTJhNjI5MDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTY3YmEwMTYtN2QyZC00NzI5LWE2
OTYtNDVhMjhmZjdmNmVjLzU2N2JhMDE2LTdkMmQtNDcyOS1hNjk2LTQ1YTI4ZmY3
ZjZlYy5jcmwwHwYDVR0jBBgwFoAU1m4ZGArK01mx52dTBLTeMtqKBwcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NjdiYTAxNi03ZDJkLTQ3MjktYTY5Ni00NWEy
OGZmN2Y2ZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgeXwCAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAM4xi+etkAPKUz3L/COrM/D6ulRto3AWJmDHDtUqoGCDseWLu/9/a
+orjZ2snAfSjgKw0KSfmMcHD3K0sZwc1jR6uDN6mGqx4GtuGalBsMVDiJ65c2LnH
/4jKL/pHkiAKN5OwKUmKMKU6y+T71W1DNzR94jGe91L1cSdDldFPsVUVEYClyddd
WMK8TQvZsHZbBoE9SuWpUqIKVHvr8mLfJVMWjHBpwfKsG9qdcQvzzwTeLdW2/4EZ
C20ZCwZW645pU4EhVm8Milm+u8OSk3yvg5k1Ac6pAijcey0+0LZqOyCrn/gh9I8G
QzbDRSUnF93lboWqqv5ZTeG+WMwvcC3AbQ==
-----END CERTIFICATE-----