Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/1ef992c6-cca8-3207-9c54-b2d4dbc7568c.roa
File:                     1ef992c6-cca8-3207-9c54-b2d4dbc7568c.roa (raw, json)
Hash identifier:          2myLrbxCs9AeGaCTuWr4rZguCiJm0x/YGPcwzcD9rfM=
Subject key identifier:   BA:D2:E3:7D:01:84:BD:17:C4:E6:5F:05:67:26:91:B1:DD:F3:38:1A
Certificate issuer:       /CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Certificate serial:       010D0C9F432858496E498CF5FA3DFBCD9854AE80
Authority key identifier: 3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/1ef992c6-cca8-3207-9c54-b2d4dbc7568c.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     15171
IP address blocks:        2605:a940::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:8c:f5:fa:3d:fb:cd:98:54:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=9a7bc1cd-6f95-4f99-96b5-daa7ab695918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:de:67:3f:0c:c8:07:ec:c6:3e:8e:53:1d:0d:
                    48:33:eb:64:6e:9f:3b:60:37:da:aa:e7:82:32:0d:
                    9f:99:6c:7d:79:a3:e0:d4:5e:3d:24:06:13:80:bd:
                    8a:f1:98:f2:81:f9:7b:08:80:05:e9:82:0a:69:1f:
                    96:0e:74:12:21:fd:bf:7e:a1:dd:71:93:75:d8:c5:
                    83:56:3a:85:7b:da:6e:0b:8a:75:55:ba:65:19:f7:
                    79:e4:d4:ea:03:69:94:17:29:69:b3:b2:56:fc:77:
                    7e:12:00:f9:a1:e6:e3:dd:2e:e6:c5:82:29:9b:92:
                    1a:fd:b0:8c:ff:e5:15:08:13:1e:58:1e:c7:58:c3:
                    d6:6c:3b:a7:62:14:ff:ea:11:68:26:0e:9f:59:0e:
                    b5:40:1a:45:74:80:c3:a6:d8:69:8c:d9:61:5d:88:
                    69:2c:e5:cf:b2:79:e8:7d:6b:1a:ca:b8:7b:58:1d:
                    b5:50:01:9d:17:1a:cf:60:2b:5a:60:a8:92:45:d4:
                    5c:78:25:98:a3:16:51:4e:51:1d:d7:49:89:e9:ca:
                    70:2b:61:c1:09:56:5b:ac:2c:ed:7f:91:ce:32:cf:
                    d7:b1:3d:57:7a:a0:23:99:9a:cc:03:2e:03:db:d9:
                    36:d3:9a:5e:c7:dd:0f:c4:2b:21:a1:55:e4:c5:3e:
                    fa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D2:E3:7D:01:84:BD:17:C4:E6:5F:05:67:26:91:B1:DD:F3:38:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/1ef992c6-cca8-3207-9c54-b2d4dbc7568c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl

            X509v3 Authority Key Identifier:
                keyid:3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:fe:61:73:80:f2:93:a0:3c:45:a8:41:8f:95:28:43:bc:08:
         96:06:de:50:24:15:b9:8f:56:01:5e:43:1e:b6:db:85:69:9e:
         23:b3:51:f2:b7:bc:8b:1e:25:a2:7d:5f:79:49:2f:72:12:15:
         69:85:cd:f0:5d:37:d5:09:64:28:6c:82:bd:34:36:1a:a0:ef:
         21:f0:e6:37:60:39:17:fe:0b:01:91:17:3f:54:c3:7a:a8:df:
         4a:e6:0e:2a:11:22:ec:e5:b7:09:ff:20:cb:51:47:e7:46:d3:
         82:fc:2a:20:e1:66:6d:6a:76:a3:f8:4c:e0:d2:18:06:a5:33:
         b1:62:d1:2f:fb:bf:ac:25:21:06:c0:7c:81:ff:02:f9:a0:d3:
         6e:e4:af:3e:18:09:35:87:ed:45:ee:7d:8d:08:af:5e:e7:da:
         70:05:a9:6d:82:42:b1:a0:ba:1c:e5:67:79:83:f0:eb:06:4e:
         c2:d1:3f:af:32:f8:17:a6:1d:ba:4a:23:19:d1:ee:51:5a:26:
         c3:e6:6c:da:5a:fa:92:06:f0:c6:99:73:5c:eb:02:dc:66:90:
         2e:1a:dc:9e:19:e4:bd:76:e8:d7:0c:5c:7c:62:1d:bb:cf:bb:
         54:00:bd:5b:bb:75:75:6c:77:58:ea:11:b3:b5:d0:3e:4e:7d:
         34:8b:34:75
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEluSYz1+j37zZhUroAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmJkMTEwNzUtY2RkNC00Y2M3LTk0N2MtYTk0YzU2MjRh
ZGVkMB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk
OWE3YmMxY2QtNmY5NS00Zjk5LTk2YjUtZGFhN2FiNjk1OTE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd5nPwzIB+zGPo5THQ1IM+tkbp87YDfaqueC
Mg2fmWx9eaPg1F49JAYTgL2K8Zjygfl7CIAF6YIKaR+WDnQSIf2/fqHdcZN12MWD
VjqFe9puC4p1VbplGfd55NTqA2mUFylps7JW/Hd+EgD5oebj3S7mxYIpm5Ia/bCM
/+UVCBMeWB7HWMPWbDunYhT/6hFoJg6fWQ61QBpFdIDDpthpjNlhXYhpLOXPsnno
fWsayrh7WB21UAGdFxrPYCtaYKiSRdRceCWYoxZRTlEd10mJ6cpwK2HBCVZbrCzt
f5HOMs/XsT1XeqAjmZrMAy4D29k205pex90PxCshoVXkxT767QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLrS430BhL0XxOZfBWcmkbHd8zgaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82YmQx
MTA3NS1jZGQ0LTRjYzctOTQ3Yy1hOTRjNTYyNGFkZWQvMWVmOTkyYzYtY2NhOC0z
MjA3LTljNTQtYjJkNGRiYzc1NjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNmJkMTEwNzUtY2RkNC00Y2M3LTk0
N2MtYTk0YzU2MjRhZGVkLzZiZDExMDc1LWNkZDQtNGNjNy05NDdjLWE5NGM1NjI0
YWRlZC5jcmwwHwYDVR0jBBgwFoAUP5ADfwiMLsR8qc08o/FSGtCv/EUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82YmQxMTA3NS1jZGQ0LTRjYzctOTQ3Yy1hOTRj
NTYyNGFkZWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWpQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAD/mFzgPKToDxFqEGPlShDvAiWBt5QJBW5j1YBXkMettuFaZ4js1Hy
t7yLHiWifV95SS9yEhVphc3wXTfVCWQobIK9NDYaoO8h8OY3YDkX/gsBkRc/VMN6
qN9K5g4qESLs5bcJ/yDLUUfnRtOC/Cog4WZtanaj+Ezg0hgGpTOxYtEv+7+sJSEG
wHyB/wL5oNNu5K8+GAk1h+1F7n2NCK9e59pwBaltgkKxoLoc5Wd5g/DrBk7C0T+v
MvgXph26SiMZ0e5RWibD5mzaWvqSBvDGmXNc6wLcZpAuGtyeGeS9dujXDFx8Yh27
z7tUAL1bu3V1bHdY6hGztdA+Tn00izR1
-----END CERTIFICATE-----