Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa
File:                     d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa (raw, json)
Hash identifier:          ucueTqnzb+upvDeYCVdo/CW7UYIXN69EcvYo1xwP2uo=
Subject key identifier:   72:84:ED:9B:41:50:5E:D6:D2:56:4F:5D:A6:05:33:4F:94:04:A6:F7
Certificate issuer:       /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Certificate serial:       010D0C9F43285848CC7B8A76D3E18E21A1226BC0
Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     399358
IP address blocks:        2607:6bc0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:8a:76:d3:e1:8e:21:a1:22:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=beb97d82-0105-4be1-beed-59e4dfbf4df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:41:84:df:f9:17:10:a1:11:0e:fa:2c:a8:5b:
                    71:d2:9b:6b:c5:e0:2e:4f:27:98:af:70:29:49:9b:
                    7a:72:a4:95:2f:f4:21:4a:3a:2a:56:d0:78:26:11:
                    bf:5c:55:d8:7a:a8:a0:08:b5:99:23:cd:a3:63:2b:
                    bc:8b:20:ea:c3:0d:99:74:d2:5b:62:91:a0:c5:a0:
                    3c:f9:78:21:8d:20:95:19:81:40:f6:5c:ad:b7:31:
                    d4:6f:62:76:12:ca:5c:c6:15:d3:18:04:05:b2:e7:
                    0b:92:61:59:45:63:48:6c:dc:14:e6:0f:5b:cf:1b:
                    88:fd:c2:89:17:49:18:52:1c:f3:ed:60:38:0c:af:
                    f8:01:08:06:74:0f:fb:8e:1d:49:c9:db:30:14:e7:
                    59:dc:cb:69:1a:7d:33:1c:5e:30:27:9c:15:84:bc:
                    32:58:c7:13:b1:c5:65:e1:82:42:df:8c:ba:74:88:
                    92:7e:66:f6:80:bf:58:6e:41:d2:4d:c5:9d:b2:c3:
                    88:3b:76:fb:e2:b4:36:0a:7f:a1:17:c9:21:05:0d:
                    c2:a9:f7:ba:5b:6e:6e:d6:34:3c:40:fb:54:84:18:
                    d8:c1:1a:c2:29:e6:62:c0:4d:56:e1:bc:8d:73:9d:
                    50:ff:d1:4e:17:d9:5f:9d:a5:73:ef:d6:69:4e:74:
                    cc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:84:ED:9B:41:50:5E:D6:D2:56:4F:5D:A6:05:33:4F:94:04:A6:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl

            X509v3 Authority Key Identifier:
                keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e7:ae:d1:32:0e:bf:ca:48:0f:49:53:26:7f:c2:fa:a3:d8:
         b5:e7:9a:55:d7:4d:79:61:b2:1c:ee:d0:8d:5c:f6:5d:24:6a:
         e7:0a:bd:ca:36:1f:a7:19:ba:a3:52:7e:04:95:7a:0c:3d:10:
         62:75:9c:6f:5e:66:b9:c6:e1:c0:63:a8:95:62:90:42:fe:27:
         5a:64:9b:5d:c0:d0:e8:0d:ea:19:30:7a:b1:bb:b7:51:99:0b:
         3d:23:5a:45:7b:63:0a:fa:e6:96:7f:5f:73:83:e7:b0:26:53:
         ca:53:d0:f3:f5:c0:4e:1d:20:1c:16:78:82:67:4c:31:28:aa:
         80:3d:9a:4c:db:d5:48:61:64:42:07:84:84:41:71:ca:06:2e:
         ad:bb:48:0f:bf:20:3b:50:97:c9:92:89:ec:38:bf:7a:82:a5:
         9b:cf:4c:ac:b8:74:8f:61:bc:d6:54:0d:3f:65:50:29:3f:13:
         6a:0c:86:4c:8a:bf:95:06:02:1b:04:d9:3f:28:3c:49:1c:56:
         3c:bb:9f:e8:e1:1a:62:b0:f1:be:4e:61:c1:1f:24:db:a4:6e:
         ac:ad:b7:db:43:8b:3d:41:c9:e4:63:4b:f0:73:31:8d:74:ea:
         fa:09:1f:f4:00:ae:ce:df:3a:04:76:4d:8e:59:59:cb:70:d8:
         8f:c0:a8:a6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjMe4p20+GOIaEia8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjFmYTA2MjAtYzgwZi00YTk0LTllOTUtZWFkNDRmYjc5
OTc4MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk
YmViOTdkODItMDEwNS00YmUxLWJlZWQtNTllNGRmYmY0ZGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UGE3/kXEKERDvosqFtx0ptrxeAuTyeYr3Ap
SZt6cqSVL/QhSjoqVtB4JhG/XFXYeqigCLWZI82jYyu8iyDqww2ZdNJbYpGgxaA8
+XghjSCVGYFA9lyttzHUb2J2EspcxhXTGAQFsucLkmFZRWNIbNwU5g9bzxuI/cKJ
F0kYUhzz7WA4DK/4AQgGdA/7jh1JydswFOdZ3MtpGn0zHF4wJ5wVhLwyWMcTscVl
4YJC34y6dIiSfmb2gL9YbkHSTcWdssOIO3b74rQ2Cn+hF8khBQ3Cqfe6W25u1jQ8
QPtUhBjYwRrCKeZiwE1W4byNc51Q/9FOF9lfnaVz79ZpTnTMyQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHKE7ZtBUF7W0lZPXaYFM0+UBKb3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZh
MDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0NGZiNzk5NzgvZDIwNzc1YzMtZThjNi0z
NjcwLWJjYWEtN2Y3ZTY4Y2ViZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjFmYTA2MjAtYzgwZi00YTk0LTll
OTUtZWFkNDRmYjc5OTc4L2YxZmEwNjIwLWM4MGYtNGE5NC05ZTk1LWVhZDQ0ZmI3
OTk3OC5jcmwwHwYDVR0jBBgwFoAUphG/cQGHxBw5AaKqJrnTgQz+K3QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZhMDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0
NGZiNzk5NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdrwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA3567RMg6/ykgPSVMmf8L6o9i155pV1015YbIc7tCNXPZdJGrnCr3K
Nh+nGbqjUn4ElXoMPRBidZxvXma5xuHAY6iVYpBC/idaZJtdwNDoDeoZMHqxu7dR
mQs9I1pFe2MK+uaWf19zg+ewJlPKU9Dz9cBOHSAcFniCZ0wxKKqAPZpM29VIYWRC
B4SEQXHKBi6tu0gPvyA7UJfJkonsOL96gqWbz0ysuHSPYbzWVA0/ZVApPxNqDIZM
ir+VBgIbBNk/KDxJHFY8u5/o4RpisPG+TmHBHyTbpG6srbfbQ4s9QcnkY0vwczGN
dOr6CR/0AK7O3zoEdk2OWVnLcNiPwKim
-----END CERTIFICATE-----