Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6cb1607c-642c-3255-b4f9-24a4a062c549.roa
File:                     6cb1607c-642c-3255-b4f9-24a4a062c549.roa (raw, json)
Hash identifier:          85vsUX3rP3tBQ7fW5EYFTAuoQ5IX7R9T8uNWU4dARV8=
Subject key identifier:   FA:2F:A2:CD:1D:49:3F:F1:52:26:57:5A:71:8A:31:A6:08:98:9B:33
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00669BC6242D1A85B3F3800
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6cb1607c-642c-3255-b4f9-24a4a062c549.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8007::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:69:bc:62:42:d1:a8:5b:3f:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=5fa62847-2535-47c1-94bd-ae6e832cc34a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fa:48:68:43:cf:76:0c:7f:20:57:33:96:c4:
                    07:40:09:78:6d:1e:d4:42:e0:e6:19:8a:66:52:50:
                    e7:7b:85:62:09:e7:8f:53:9e:e4:ef:1c:f2:be:fe:
                    6b:9d:51:f1:3a:b1:73:84:03:66:fd:a6:a6:39:d3:
                    ec:b8:24:6f:2b:b2:e9:e3:0e:18:55:a3:33:32:f7:
                    5c:4e:02:c2:cb:af:25:36:fb:47:ec:61:a0:50:df:
                    56:9c:e3:8a:d1:e1:12:39:ea:f6:4d:f8:9a:34:37:
                    10:d4:da:7e:4f:0d:7a:21:77:75:a9:ee:0b:16:d7:
                    75:53:07:59:77:f0:df:e1:d7:a9:43:d4:00:f8:2c:
                    78:81:82:b9:a9:cf:f1:3e:f3:7e:5e:9a:1a:9b:82:
                    74:69:54:75:c6:dd:b9:7e:95:f6:52:56:a3:0b:3f:
                    97:60:70:cc:47:db:be:ed:ec:74:0f:3f:85:fe:4b:
                    f4:e2:cb:a7:b3:77:9e:c7:89:e1:33:17:da:24:30:
                    a8:36:5e:b7:a7:67:68:17:fa:f7:16:6b:4c:d4:69:
                    ed:56:44:a4:35:0f:01:10:49:c2:53:14:fa:33:24:
                    22:68:da:bc:d7:0f:a9:d3:e7:5b:dc:4a:62:3e:12:
                    f2:91:dd:7e:d7:3e:7d:52:93:d5:96:fb:58:d6:53:
                    e9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2F:A2:CD:1D:49:3F:F1:52:26:57:5A:71:8A:31:A6:08:98:9B:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6cb1607c-642c-3255-b4f9-24a4a062c549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:53:b5:c2:25:91:a6:a6:ae:dd:79:88:1a:91:85:6e:de:9f:
         23:db:3c:eb:10:0c:13:60:f6:0d:c1:3b:56:1d:48:05:60:22:
         8a:f7:82:53:d9:d3:65:e0:56:32:e7:49:7a:f1:aa:83:92:04:
         1f:51:4b:c4:ef:bd:0e:d2:3d:28:aa:07:6a:11:fa:6d:cd:5e:
         b6:bb:1f:df:3b:24:45:df:e0:eb:79:fd:e7:a5:b6:ae:d9:20:
         91:19:fa:be:fb:4f:dc:83:2c:ee:c8:85:68:a9:3a:32:7e:26:
         74:d7:6e:9d:76:36:00:5b:c1:50:e0:fe:a4:9f:1f:03:e8:c1:
         8e:28:12:0d:21:99:ab:ea:53:2f:d6:31:e3:4c:38:cb:4c:a7:
         18:7e:fe:4a:68:36:9d:42:47:a9:9b:09:89:b4:d7:f8:bc:92:
         b2:68:bd:73:3d:d7:d4:96:1a:0a:c0:d8:7f:c5:d8:c9:10:4f:
         29:1a:0c:bf:c2:cd:be:4f:13:30:b2:1b:d8:90:f6:0e:00:23:
         8b:d6:7c:ce:9c:01:4d:f9:17:42:d8:91:89:63:29:0e:aa:74:
         48:fe:b0:f2:b5:8f:ee:7e:36:34:8a:dc:81:e0:48:a3:51:eb:
         2a:00:f6:8b:dc:e0:de:3e:cf:35:91:05:4a:b5:1f:b8:26:4e:
         4d:13:7d:33
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjgBmm8YkLRqFs/OAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
NWZhNjI4NDctMjUzNS00N2MxLTk0YmQtYWU2ZTgzMmNjMzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfpIaEPPdgx/IFczlsQHQAl4bR7UQuDmGYpm
UlDne4ViCeePU57k7xzyvv5rnVHxOrFzhANm/aamOdPsuCRvK7Lp4w4YVaMzMvdc
TgLCy68lNvtH7GGgUN9WnOOK0eESOer2TfiaNDcQ1Np+Tw16IXd1qe4LFtd1UwdZ
d/Df4depQ9QA+Cx4gYK5qc/xPvN+Xpoam4J0aVR1xt25fpX2UlajCz+XYHDMR9u+
7ex0Dz+F/kv04suns3eex4nhMxfaJDCoNl63p2doF/r3FmtM1GntVkSkNQ8BEEnC
UxT6MyQiaNq81w+p0+db3EpiPhLykd1+1z59UpPVlvtY1lPpJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPovos0dST/xUiZXWnGKMaYImJszMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNmNiMTYwN2MtNjQyYy0z
MjU1LWI0ZjktMjRhNGEwNjJjNTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYAH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAdTtcIlkaamrt15iBqRhW7enyPbPOsQDBNg9g3BO1YdSAVgIor3
glPZ02XgVjLnSXrxqoOSBB9RS8TvvQ7SPSiqB2oR+m3NXra7H987JEXf4Ot5/eel
tq7ZIJEZ+r77T9yDLO7IhWipOjJ+JnTXbp12NgBbwVDg/qSfHwPowY4oEg0hmavq
Uy/WMeNMOMtMpxh+/kpoNp1CR6mbCYm01/i8krJovXM919SWGgrA2H/F2MkQTyka
DL/Czb5PEzCyG9iQ9g4AI4vWfM6cAU35F0LYkYljKQ6qdEj+sPK1j+5+NjSK3IHg
SKNR6yoA9ovc4N4+zzWRBUq1H7gmTk0TfTM=
-----END CERTIFICATE-----