Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/76563adb-301d-3bd2-8772-7acf2c4e0bdd.roa
File:                     76563adb-301d-3bd2-8772-7acf2c4e0bdd.roa (raw, json)
Hash identifier:          9Joh0SGwCHgk8Pp1aHN9VRn32spRysQeXq3uhe/YgJw=
Subject key identifier:   3C:31:14:6D:1B:AA:CB:4C:8E:32:B5:A8:D7:E8:B1:D4:BE:FA:75:1F
Certificate issuer:       /CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
Certificate serial:       010D0C9F43285848A29B437F323575456660A7C0
Authority key identifier: CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/76563adb-301d-3bd2-8772-7acf2c4e0bdd.roa
Signing time:             Thu 23 Jan 2025 02:00:40 +0000
ROA not before:           Thu 23 Jan 2025 02:00:40 +0000
ROA not after:            Wed 23 Apr 2025 01:00:40 +0000
asID:                     152726
IP address blocks:        2607:b740:1234::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:9b:43:7f:32:35:75:45:66:60:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
        Validity
            Not Before: Jan 23 02:00:40 2025 GMT
            Not After : Apr 23 01:00:40 2025 GMT
        Subject: CN=b69bec86-1e1a-4910-9c8c-f9848fb3990c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9f:f6:b1:59:38:ef:b5:2f:cc:e1:22:b2:85:
                    f0:30:45:be:07:ff:57:99:60:78:36:e5:59:f4:65:
                    8f:72:21:b5:90:47:8c:68:1d:88:99:3d:ec:de:11:
                    4e:d2:e1:25:c8:ec:5c:59:1e:45:3b:13:81:60:f8:
                    c7:b0:94:93:34:ee:f9:51:06:bf:e3:fe:d9:e8:b7:
                    e6:89:42:c2:ed:7f:f4:ba:a5:c3:91:d4:d5:3b:f0:
                    64:0a:68:2e:12:0b:24:a8:94:78:e3:7f:b9:6a:05:
                    43:e7:6a:a2:da:33:b7:f3:02:41:bb:0c:a3:81:ea:
                    fc:0f:2e:b6:d0:67:8f:96:ea:b4:8b:be:c7:b0:5d:
                    af:c4:83:8c:76:0b:88:47:9d:af:0f:b3:8b:0f:59:
                    77:5f:b4:65:6b:19:a6:e3:96:78:ae:71:7a:fe:10:
                    bd:bc:63:63:39:1c:4c:9c:b7:4e:fb:39:0d:f2:1a:
                    55:9c:86:38:20:7e:2c:79:6b:c5:c0:1b:6d:6c:df:
                    9a:95:a8:a7:75:1c:6f:c8:34:d2:17:65:37:ca:8d:
                    56:c0:c4:a9:3d:a4:62:a6:fd:7e:2e:ab:c9:b9:2b:
                    41:a5:b6:6a:91:b4:3d:0a:ed:2a:57:b8:42:1a:5c:
                    8b:e0:3f:d1:de:83:1f:5e:b6:28:8c:16:24:cf:d7:
                    6e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:31:14:6D:1B:AA:CB:4C:8E:32:B5:A8:D7:E8:B1:D4:BE:FA:75:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/76563adb-301d-3bd2-8772-7acf2c4e0bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.crl

            X509v3 Authority Key Identifier:
                keyid:CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b740:1234::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:12:0e:d4:3f:f2:94:9b:c4:d7:af:3d:5f:a6:2b:b8:e7:a8:
         31:d3:78:f3:c3:1a:3a:ed:18:8e:18:55:29:ec:37:e2:96:ca:
         a1:d2:3e:2b:28:bd:82:36:e4:02:fe:a6:5b:87:af:57:45:ec:
         4d:2c:37:cf:fa:19:fd:b5:bb:82:63:ae:37:b3:7e:55:b8:03:
         95:ed:cc:5c:61:ac:bb:00:34:32:c0:43:b8:8d:74:e4:98:df:
         bb:b5:20:6f:8c:80:e2:e6:b2:91:66:e2:27:d2:63:42:f4:5b:
         57:ec:11:2c:a4:be:39:f0:23:1b:66:f6:e0:bd:c2:16:13:df:
         33:83:2f:70:fc:5d:0d:78:80:48:2f:cc:b0:5e:73:f9:57:f9:
         4c:a6:63:48:91:25:e9:c3:a9:9d:44:39:3b:e8:e9:28:9a:6f:
         8a:db:50:95:f5:cd:dc:51:88:6e:e8:fb:c6:b6:d9:3b:6b:40:
         16:dc:63:e5:8e:e6:10:7e:d4:90:37:c7:c6:0a:85:da:58:ea:
         0f:ab:0e:61:6e:26:9a:2d:75:35:2d:60:f6:3a:80:fd:bc:53:
         bd:ef:1c:b2:e4:9d:bf:98:f7:90:8a:4c:80:02:ce:1c:2c:12:
         d8:e5:b9:c4:be:73:af:82:ba:e2:56:3b:8b:48:6f:c3:e1:d3:
         25:6e:fb:5b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiim0N/MjV1RWZgp8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg4MmFjNjctOTZiYy00M2JhLWIwNmUtYzJmNTMzYzg1
MmY0MB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk
YjY5YmVjODYtMWUxYS00OTEwLTljOGMtZjk4NDhmYjM5OTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Z/2sVk477UvzOEisoXwMEW+B/9XmWB4NuVZ
9GWPciG1kEeMaB2ImT3s3hFO0uElyOxcWR5FOxOBYPjHsJSTNO75UQa/4/7Z6Lfm
iULC7X/0uqXDkdTVO/BkCmguEgskqJR443+5agVD52qi2jO38wJBuwyjger8Dy62
0GePluq0i77HsF2vxIOMdguIR52vD7OLD1l3X7Rlaxmm45Z4rnF6/hC9vGNjORxM
nLdO+zkN8hpVnIY4IH4seWvFwBttbN+alaindRxvyDTSF2U3yo1WwMSpPaRipv1+
LqvJuStBpbZqkbQ9Cu0qV7hCGlyL4D/R3oMfXrYojBYkz9duRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDwxFG0bqstMjjK1qNfosdS++nUfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yODgy
YWM2Ny05NmJjLTQzYmEtYjA2ZS1jMmY1MzNjODUyZjQvNzY1NjNhZGItMzAxZC0z
YmQyLTg3NzItN2FjZjJjNGUwYmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjg4MmFjNjctOTZiYy00M2JhLWIw
NmUtYzJmNTMzYzg1MmY0LzI4ODJhYzY3LTk2YmMtNDNiYS1iMDZlLWMyZjUzM2M4
NTJmNC5jcmwwHwYDVR0jBBgwFoAUzMgpXPbSbm1R4oeTRWf1hotLHrIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8yODgyYWM2Ny05NmJjLTQzYmEtYjA2ZS1jMmY1
MzNjODUyZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJge3QBI0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJQSDtQ/8pSbxNevPV+mK7jnqDHTePPDGjrtGI4YVSnsN+KWyqHS
PisovYI25AL+pluHr1dF7E0sN8/6Gf21u4JjrjezflW4A5XtzFxhrLsANDLAQ7iN
dOSY37u1IG+MgOLmspFm4ifSY0L0W1fsESykvjnwIxtm9uC9whYT3zODL3D8XQ14
gEgvzLBec/lX+UymY0iRJenDqZ1EOTvo6Siab4rbUJX1zdxRiG7o+8a22TtrQBbc
Y+WO5hB+1JA3x8YKhdpY6g+rDmFuJpotdTUtYPY6gP28U73vHLLknb+Y95CKTIAC
zhwsEtjlucS+c6+CuuJWO4tIb8Ph0yVu+1s=
-----END CERTIFICATE-----