Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/c8350e69-c682-3045-a668-12659de11f07.roa
File:                     c8350e69-c682-3045-a668-12659de11f07.roa (raw, json)
Hash identifier:          /c98AUjUCD0s0TLOvtcwfrVUgS7D6ez47xkEYkVPihE=
Subject key identifier:   CE:86:B3:A7:5E:F1:F9:F4:AD:03:AB:69:34:B8:1D:98:FE:95:55:36
Certificate issuer:       /CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
Certificate serial:       010D0C9F43285848EC96A1416097F555E9737380
Authority key identifier: 2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/c8350e69-c682-3045-a668-12659de11f07.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     400861
IP address blocks:        2602:2da::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:a1:41:60:97:f5:55:e9:73:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=651d191b-123f-45dc-a47c-9a6fc8cbae9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:89:bd:f4:0b:77:75:18:df:15:a1:d3:21:dd:
                    48:2f:b5:01:cd:97:b7:9e:31:f7:e4:cd:77:3d:96:
                    1e:2e:3e:b9:84:57:73:14:30:1b:6d:83:34:49:e8:
                    20:bd:c9:ce:c8:a5:22:df:fd:c4:95:53:f2:28:ad:
                    74:95:6a:17:f5:13:36:fd:58:68:ff:da:3b:ef:46:
                    b7:90:fa:64:5f:5f:41:b8:84:4e:61:96:ac:12:f2:
                    f3:7b:27:27:e7:b3:89:8b:1f:9d:24:cf:c4:08:d8:
                    b8:0e:38:83:64:4e:7c:2d:de:2d:74:d5:89:6d:c2:
                    99:8a:e4:05:3b:51:41:d9:62:32:cd:e7:5d:91:93:
                    42:d9:2b:f9:83:8e:49:c4:b1:91:e9:4b:22:af:c9:
                    7a:69:2b:e2:1e:b3:3d:a0:69:cf:dd:36:9d:29:8d:
                    1b:33:bf:a0:98:1b:e7:16:82:83:c2:fd:72:55:92:
                    dc:e3:28:cb:2f:a3:bf:d7:0b:ad:06:39:e8:b7:35:
                    de:79:f3:76:f8:d9:e8:1f:4f:b6:70:05:9c:31:5f:
                    1a:e4:d7:98:0b:12:fa:48:aa:8f:2e:70:ef:f3:9e:
                    7c:42:db:f9:a1:2f:c9:8d:84:0d:61:21:9c:42:86:
                    74:f9:0f:c1:70:4b:c4:5e:ff:6a:c6:fd:47:dc:90:
                    e6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:86:B3:A7:5E:F1:F9:F4:AD:03:AB:69:34:B8:1D:98:FE:95:55:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/c8350e69-c682-3045-a668-12659de11f07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2da::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:74:e1:c8:42:e9:d6:35:6f:28:57:38:a8:08:63:45:a6:bd:
         8c:bf:0a:8b:8b:9c:df:08:0a:2a:5d:36:18:c0:a4:5a:7a:9f:
         74:9c:42:7a:ed:f3:9f:d5:45:f7:1f:f8:d4:bb:40:1b:90:aa:
         51:06:dd:19:09:02:e6:80:9f:40:37:ae:1d:8a:c4:81:40:24:
         ee:a9:7f:56:73:92:60:f2:89:2a:e8:23:b0:51:c5:bd:37:ba:
         23:9f:30:e1:17:06:d1:81:92:b4:dd:81:b3:68:fa:43:dc:a7:
         6a:ec:1e:62:f3:e5:85:86:ee:74:50:48:0a:4d:5f:a1:61:26:
         e7:95:cb:51:0f:e9:44:f1:85:4c:ca:23:e5:96:a2:ce:83:d6:
         ca:9e:1e:89:ed:49:07:b3:54:9e:bd:a4:f5:c8:f3:75:b5:e2:
         b0:f6:23:b7:32:1e:d9:75:ec:a6:d3:d3:e1:5f:03:b2:f8:7b:
         5a:3a:bc:96:ef:2f:31:d0:7a:41:3f:db:de:f1:c3:9b:05:a0:
         ab:86:66:55:aa:0d:c3:83:ec:62:ec:81:94:79:19:30:2e:74:
         06:15:42:18:4a:7d:36:5d:4a:25:8a:a0:48:dc:b3:de:f0:08:
         f2:ab:b2:58:df:3a:c2:24:f2:65:43:cb:10:24:1f:f3:5f:b2:
         7b:54:ea:11
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjslqFBYJf1Velzc4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFiMTdiZWEtZTY2NS00ZWQxLWFiZTMtZDJhOWFjMzRl
MGVhMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
NjUxZDE5MWItMTIzZi00NWRjLWE0N2MtOWE2ZmM4Y2JhZTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4m99At3dRjfFaHTId1IL7UBzZe3njH35M13
PZYeLj65hFdzFDAbbYM0SeggvcnOyKUi3/3ElVPyKK10lWoX9RM2/Vho/9o770a3
kPpkX19BuIROYZasEvLzeycn57OJix+dJM/ECNi4DjiDZE58Ld4tdNWJbcKZiuQF
O1FB2WIyzeddkZNC2Sv5g45JxLGR6Usir8l6aSviHrM9oGnP3TadKY0bM7+gmBvn
FoKDwv1yVZLc4yjLL6O/1wutBjnotzXeefN2+NnoH0+2cAWcMV8a5NeYCxL6SKqP
LnDv8558Qtv5oS/JjYQNYSGcQoZ0+Q/BcEvEXv9qxv1H3JDm8wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFM6Gs6de8fn0rQOraTS4HZj+lVU2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYWIx
N2JlYS1lNjY1LTRlZDEtYWJlMy1kMmE5YWMzNGUwZWEvYzgzNTBlNjktYzY4Mi0z
MDQ1LWE2NjgtMTI2NTlkZTExZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWFiMTdiZWEtZTY2NS00ZWQxLWFi
ZTMtZDJhOWFjMzRlMGVhL2FhYjE3YmVhLWU2NjUtNGVkMS1hYmUzLWQyYTlhYzM0
ZTBlYS5jcmwwHwYDVR0jBBgwFoAULaiA1O+1z0U8T5SFN3XGDcEUFSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYWIxN2JlYS1lNjY1LTRlZDEtYWJlMy1kMmE5
YWMzNGUwZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIC2gAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAPXThyELp1jVvKFc4qAhjRaa9jL8Ki4uc3wgKKl02GMCkWnqfdJxC
eu3zn9VF9x/41LtAG5CqUQbdGQkC5oCfQDeuHYrEgUAk7ql/VnOSYPKJKugjsFHF
vTe6I58w4RcG0YGStN2Bs2j6Q9ynauweYvPlhYbudFBICk1foWEm55XLUQ/pRPGF
TMoj5ZaizoPWyp4eie1JB7NUnr2k9cjzdbXisPYjtzIe2XXsptPT4V8Dsvh7Wjq8
lu8vMdB6QT/b3vHDmwWgq4ZmVaoNw4PsYuyBlHkZMC50BhVCGEp9Nl1KJYqgSNyz
3vAI8quyWN86wiTyZUPLECQf81+ye1TqEQ==
-----END CERTIFICATE-----