Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/7d713cfe-fa3b-3e70-add3-0b83b7ed1612.roa
File:                     7d713cfe-fa3b-3e70-add3-0b83b7ed1612.roa (raw, json)
Hash identifier:          To/cdAvaP6dVrTPneR58p3c2kYlMDnT1l/DRby/rmHU=
Subject key identifier:   66:C3:27:FE:16:1F:68:25:89:68:A3:59:F7:7A:12:11:70:02:B4:F6
Certificate issuer:       /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Certificate serial:       010D0C9F43285848EF613A25E2AE6ABDF4ED9100
Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/7d713cfe-fa3b-3e70-add3-0b83b7ed1612.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     46632
IP address blocks:        2606:6b00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:3a:25:e2:ae:6a:bd:f4:ed:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=bfc4b023-9158-4007-b51f-a6b1c1aefecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:a9:84:d2:42:3d:a9:bd:52:b2:77:9a:ef:
                    f1:1e:d5:08:84:e6:68:ef:0c:a2:7a:29:20:d2:2f:
                    f4:89:55:69:29:08:35:7e:61:2b:e6:51:c5:b1:b9:
                    39:2d:61:6e:f2:89:0a:92:42:e7:52:13:7a:9a:a4:
                    1c:c3:75:62:1b:e1:45:eb:79:17:56:94:0c:5e:f9:
                    11:7b:db:3c:86:95:32:e9:92:d3:c9:60:37:31:96:
                    46:44:92:75:68:90:70:96:d0:b5:97:c7:85:00:40:
                    bb:01:6e:d9:6c:94:31:87:f1:a2:64:77:9e:b0:5c:
                    ed:23:59:17:11:dc:88:82:15:c8:69:32:be:3e:fa:
                    0a:5b:23:ef:56:02:35:62:4e:e5:c8:4c:bf:8d:96:
                    bd:53:7f:f5:cc:55:a3:71:92:52:f6:99:8b:60:5c:
                    08:bc:3d:36:bf:e7:b0:57:84:46:b2:1a:5d:05:b5:
                    3b:a1:0f:7c:c0:15:02:87:9d:1a:2d:4b:f3:83:00:
                    a6:c1:33:21:50:f5:9d:60:6d:4b:87:87:b7:c3:76:
                    f8:58:aa:18:56:18:45:ad:f4:84:3a:c4:a2:4b:a7:
                    de:e8:c1:25:8b:3b:de:67:b7:cb:2a:da:c6:ea:65:
                    94:57:bd:21:b7:e9:44:f6:f1:c3:da:04:33:ba:2f:
                    55:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C3:27:FE:16:1F:68:25:89:68:A3:59:F7:7A:12:11:70:02:B4:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/7d713cfe-fa3b-3e70-add3-0b83b7ed1612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl

            X509v3 Authority Key Identifier:
                keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6b00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:4f:c5:3a:ea:e6:ca:09:e4:01:3b:46:19:7f:99:f5:32:ae:
         ef:09:2f:ea:50:13:d9:9f:13:a1:42:1d:4e:44:bc:0d:3d:9c:
         f8:a7:b5:03:ce:b0:2c:df:cd:69:74:5f:ba:5c:5c:d5:9a:81:
         f7:c1:64:49:fd:a6:b1:b8:23:fb:95:2d:15:89:17:fa:41:a2:
         76:49:e2:83:75:6a:b9:da:32:d4:56:44:bd:2b:0e:1f:03:b1:
         23:d2:9d:32:4a:98:43:48:61:5a:5b:52:ec:0a:35:3f:c9:9a:
         94:00:7a:ad:b4:0c:04:04:77:11:b4:e5:70:18:81:1f:f9:1a:
         6d:ff:52:dd:d3:ae:b4:60:1f:66:90:e9:01:b2:e8:36:af:b5:
         a0:da:63:d6:69:5a:45:a5:73:68:22:da:6d:67:37:cd:f9:25:
         b2:88:45:87:9e:47:70:70:4e:74:5c:bd:f1:1d:c4:67:a6:d3:
         24:72:a8:71:ef:bf:06:47:15:3a:5a:cd:55:1c:2b:d3:7c:07:
         af:e9:07:50:08:dd:86:50:53:d0:4a:95:48:3f:a3:bd:49:73:
         e7:95:b9:b8:34:e8:e4:90:81:42:2f:9f:6e:f7:ee:77:6b:22:
         4b:ec:fa:c1:65:f0:ec:a5:52:f3:4c:5e:a3:bf:bc:13:ef:ce:
         00:4f:36:85
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjvYTol4q5qvfTtkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ5ZWFhMDctOTNiZC00ZjJiLWI5YzYtYWMxZDQxMDZj
NWIwMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
YmZjNGIwMjMtOTE1OC00MDA3LWI1MWYtYTZiMWMxYWVmZWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw2phNJCPam9UrJ3mu/xHtUIhOZo7wyieikg
0i/0iVVpKQg1fmEr5lHFsbk5LWFu8okKkkLnUhN6mqQcw3ViG+FF63kXVpQMXvkR
e9s8hpUy6ZLTyWA3MZZGRJJ1aJBwltC1l8eFAEC7AW7ZbJQxh/GiZHeesFztI1kX
EdyIghXIaTK+PvoKWyPvVgI1Yk7lyEy/jZa9U3/1zFWjcZJS9pmLYFwIvD02v+ew
V4RGshpdBbU7oQ98wBUCh50aLUvzgwCmwTMhUPWdYG1Lh4e3w3b4WKoYVhhFrfSE
OsSiS6fe6MElizveZ7fLKtrG6mWUV70ht+lE9vHD2gQzui9VIwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGbDJ/4WH2gliWijWfd6EhFwArT2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDll
YWEwNy05M2JkLTRmMmItYjljNi1hYzFkNDEwNmM1YjAvN2Q3MTNjZmUtZmEzYi0z
ZTcwLWFkZDMtMGI4M2I3ZWQxNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTQ5ZWFhMDctOTNiZC00ZjJiLWI5
YzYtYWMxZDQxMDZjNWIwL2U0OWVhYTA3LTkzYmQtNGYyYi1iOWM2LWFjMWQ0MTA2
YzViMC5jcmwwHwYDVR0jBBgwFoAUDTlc4w0fvbZ5ih1QYOz8YldDgDUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDllYWEwNy05M2JkLTRmMmItYjljNi1hYzFk
NDEwNmM1YjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZrADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQATT8U66ubKCeQBO0YZf5n1Mq7vCS/qUBPZnxOhQh1ORLwNPZz4p7UD
zrAs381pdF+6XFzVmoH3wWRJ/aaxuCP7lS0ViRf6QaJ2SeKDdWq52jLUVkS9Kw4f
A7Ej0p0ySphDSGFaW1LsCjU/yZqUAHqttAwEBHcRtOVwGIEf+Rpt/1Ld0660YB9m
kOkBsug2r7Wg2mPWaVpFpXNoItptZzfN+SWyiEWHnkdwcE50XL3xHcRnptMkcqhx
778GRxU6Ws1VHCvTfAev6QdQCN2GUFPQSpVIP6O9SXPnlbm4NOjkkIFCL59u9+53
ayJL7PrBZfDspVLzTF6jv7wT784ATzaF
-----END CERTIFICATE-----