Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/6749cd4c-bcc0-39f2-a22c-b739152cdf6f.roa
File:                     6749cd4c-bcc0-39f2-a22c-b739152cdf6f.roa (raw, json)
Hash identifier:          yX5SRzcGYKjAbVWqIkcON6INBRoycMgc4VuhB6WlFPI=
Subject key identifier:   A2:56:8E:53:35:B2:78:0D:EB:C8:10:57:61:71:CF:B5:12:A6:10:DF
Certificate issuer:       /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
Certificate serial:       010D0C9F43285849780F10BB91DAA8AB39A39800
Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/6749cd4c-bcc0-39f2-a22c-b739152cdf6f.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     8987
IP address blocks:        2610:e8:3180::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:10:bb:91:da:a8:ab:39:a3:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=5f7acf01-e980-4a39-b3b0-a061ea29d0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:35:3c:35:d0:ba:5a:61:28:8e:6e:b5:6e:
                    ad:8e:a8:a4:2b:4c:b1:74:69:88:90:02:26:b9:4c:
                    5b:37:8b:31:94:78:06:05:0e:5d:c4:f0:15:9a:ca:
                    0a:67:13:4b:88:ab:6e:5f:7a:6f:0e:38:29:a4:d7:
                    e6:81:59:b1:8e:14:1f:3a:c2:1d:bb:2f:e1:a3:b5:
                    de:ef:1b:98:c5:43:0f:56:82:21:60:0a:5d:23:23:
                    17:88:2e:f0:d8:c1:e5:e7:40:c7:7f:84:84:71:58:
                    4e:05:98:a5:08:90:6f:47:ae:c7:4f:bf:d0:be:d8:
                    38:34:97:b7:28:76:55:8d:b9:b7:95:2b:7e:f4:b0:
                    a4:c6:f7:52:7f:dc:cc:0d:cc:98:a5:b9:54:df:2b:
                    f6:f7:ca:3b:1b:79:82:b7:66:f9:d2:61:73:f8:cd:
                    b1:a1:fa:5a:3b:07:e9:41:05:0c:fa:e6:47:fd:74:
                    71:b6:8a:3e:00:f6:a7:8f:64:98:86:1b:28:81:0b:
                    40:c7:c3:c7:43:71:16:48:55:d1:d3:c3:21:9c:70:
                    f8:89:82:bb:66:c0:60:11:ce:13:b7:8f:9e:4d:68:
                    5e:ae:6a:8e:27:64:ab:78:00:16:c0:17:84:ff:da:
                    ef:5b:28:13:22:4d:77:96:36:1d:36:43:08:12:fe:
                    13:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:56:8E:53:35:B2:78:0D:EB:C8:10:57:61:71:CF:B5:12:A6:10:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/6749cd4c-bcc0-39f2-a22c-b739152cdf6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl

            X509v3 Authority Key Identifier:
                keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:e8:3180::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a6:cf:72:bc:b9:5e:4e:ca:b4:03:91:bd:00:41:d3:bd:62:
         e2:bb:63:a5:f3:6e:9d:d6:0c:90:70:09:34:40:ad:b0:3d:88:
         b6:bd:b6:13:6c:6a:3f:cd:79:52:65:95:14:91:7a:06:dd:ee:
         c4:1c:2f:b7:81:72:3d:14:8e:b7:2d:f3:f0:94:62:e7:97:97:
         5b:ee:c9:41:c1:93:cc:02:d7:e1:86:8a:68:28:23:0b:9d:72:
         9b:1a:a0:c3:ff:f3:f6:75:7c:58:2e:91:5b:b8:5c:a1:75:c6:
         98:5f:c4:e5:c6:80:68:be:1a:a5:3e:9d:71:5f:84:0e:1a:97:
         e4:bc:c2:30:68:90:97:dc:25:46:86:21:8f:cd:a7:a0:21:ff:
         77:13:f8:93:37:9e:05:43:be:0a:57:62:82:ca:dc:56:44:79:
         c8:4f:ca:b9:ca:c6:64:60:70:ec:b8:a2:78:b7:be:02:e0:a6:
         c3:a4:ca:14:5a:b8:2d:0b:9d:7f:a9:f5:52:ed:c0:71:6d:9c:
         a1:70:7b:91:d6:c1:b1:2d:fb:a3:f3:56:1e:f1:50:cc:d4:f9:
         22:34:84:46:38:16:91:b4:60:32:7e:a3:7d:c6:d8:74:b5:54:
         15:8a:63:12:10:e0:84:02:c4:89:83:43:a4:21:21:d4:72:a9:
         17:88:7b:75
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl4DxC7kdqoqzmjmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0
ZDdiMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk
NWY3YWNmMDEtZTk4MC00YTM5LWIzYjAtYTA2MWVhMjlkMGFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIs1PDXQulphKI5utW6tjqikK0yxdGmIkAIm
uUxbN4sxlHgGBQ5dxPAVmsoKZxNLiKtuX3pvDjgppNfmgVmxjhQfOsIduy/ho7Xe
7xuYxUMPVoIhYApdIyMXiC7w2MHl50DHf4SEcVhOBZilCJBvR67HT7/Qvtg4NJe3
KHZVjbm3lSt+9LCkxvdSf9zMDcyYpblU3yv298o7G3mCt2b50mFz+M2xofpaOwfp
QQUM+uZH/XRxtoo+APanj2SYhhsogQtAx8PHQ3EWSFXR08MhnHD4iYK7ZsBgEc4T
t4+eTWhermqOJ2SreAAWwBeE/9rvWygTIk13ljYdNkMIEv4TGQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKJWjlM1sngN68gQV2Fxz7USphDfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0
MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvNjc0OWNkNGMtYmNjMC0z
OWYyLWEyMmMtYjczOTE1MmNkZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll
MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4
NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw
NzljODRkN2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAA6DGA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHymz3K8uV5OyrQDkb0AQdO9YuK7Y6Xzbp3WDJBwCTRArbA9iLa9
thNsaj/NeVJllRSRegbd7sQcL7eBcj0Ujrct8/CUYueXl1vuyUHBk8wC1+GGimgo
IwudcpsaoMP/8/Z1fFgukVu4XKF1xphfxOXGgGi+GqU+nXFfhA4al+S8wjBokJfc
JUaGIY/Np6Ah/3cT+JM3ngVDvgpXYoLK3FZEechPyrnKxmRgcOy4oni3vgLgpsOk
yhRauC0LnX+p9VLtwHFtnKFwe5HWwbEt+6PzVh7xUMzU+SI0hEY4FpG0YDJ+o33G
2HS1VBWKYxIQ4IQCxImDQ6QhIdRyqReIe3U=
-----END CERTIFICATE-----