Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/d676238e-417d-384e-9a31-32a2efd3c5be.roa
File:                     d676238e-417d-384e-9a31-32a2efd3c5be.roa (raw, json)
Hash identifier:          dRuC9MiDtx2iQtB5SLpMCo2KnxQmgiNuo09DvEFPa5s=
Subject key identifier:   A4:CD:7D:55:22:E4:43:CF:73:CE:27:9C:39:3F:B6:16:59:FE:CD:25
Certificate issuer:       /CN=090cf75b-f998-45e2-a8ea-c4d882201d24
Certificate serial:       010D0C9F4328584957F3F318677607EFD00A9F80
Authority key identifier: 14:9C:C7:07:9A:90:D7:69:1D:47:04:E9:AD:6D:E7:D7:CE:2C:7D:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/d676238e-417d-384e-9a31-32a2efd3c5be.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     11805
IP address blocks:        2602:fd63::/36 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:f3:18:67:76:07:ef:d0:0a:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090cf75b-f998-45e2-a8ea-c4d882201d24
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=efbc2727-d64f-4c09-a223-10a578e58324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:92:e8:8f:e4:34:28:a7:f1:59:a1:f6:dd:12:
                    1b:ed:a2:78:e1:fa:fd:b6:fb:9f:a9:05:cb:d1:94:
                    64:16:96:e5:61:33:91:5b:dc:7d:77:75:c4:05:25:
                    65:03:3c:f1:cc:8f:8c:b0:85:6b:29:f0:34:51:a4:
                    b8:17:61:29:9b:9f:ce:7e:0d:19:07:b0:7d:ec:e0:
                    63:24:d0:e4:8f:33:85:0f:d2:d6:ef:07:6f:c1:1e:
                    f5:71:c5:40:22:9e:eb:ef:40:c4:4f:a4:1b:ad:04:
                    96:94:ed:ce:01:19:3a:71:31:97:dc:5e:08:b2:ca:
                    5c:ac:b1:1d:12:f3:82:57:2f:df:d5:18:7e:57:38:
                    b2:da:3d:fa:69:2c:59:28:e6:86:6a:16:d2:50:f7:
                    c6:53:20:99:8d:7e:41:77:9b:ac:90:8a:df:33:25:
                    d1:28:8d:2c:6a:dc:4f:da:dc:ac:89:5d:60:a8:ab:
                    d7:ce:cb:4e:55:06:23:36:97:f9:dd:6f:0e:d8:23:
                    0e:76:71:d3:49:6f:6a:ca:49:91:bf:b8:f7:fd:e4:
                    ba:ae:a3:6c:d6:4a:ef:f1:91:8e:16:e6:80:50:4c:
                    b8:e1:1d:ae:4f:27:97:b3:2f:3e:4d:10:fe:0f:6e:
                    04:22:a6:26:45:f5:e9:26:23:95:7b:01:00:c6:78:
                    1c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CD:7D:55:22:E4:43:CF:73:CE:27:9C:39:3F:B6:16:59:FE:CD:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/d676238e-417d-384e-9a31-32a2efd3c5be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/090cf75b-f998-45e2-a8ea-c4d882201d24.crl

            X509v3 Authority Key Identifier:
                keyid:14:9C:C7:07:9A:90:D7:69:1D:47:04:E9:AD:6D:E7:D7:CE:2C:7D:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd63::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:8d:3f:5e:e3:04:c4:9a:62:0e:ef:d7:5b:47:40:d4:e9:46:
         37:10:a7:ff:a5:2e:7d:cc:33:68:9f:f1:d9:d2:de:6a:23:b6:
         ec:10:48:51:d9:f4:53:4e:c2:02:2e:4d:c3:7c:a0:11:14:7f:
         73:95:c8:09:e8:00:67:90:4f:76:b8:41:24:94:b8:72:b4:3f:
         16:14:d0:1e:56:cf:75:0c:ac:fe:49:77:67:2a:89:a8:31:85:
         88:b9:41:a1:f5:2b:88:28:a8:a3:8d:33:6e:12:3b:26:41:5f:
         9d:6e:88:54:f7:d3:1e:d3:7c:68:cc:67:5f:92:87:f8:97:34:
         e9:c2:e5:90:fb:d8:8d:57:fd:8c:c1:81:a2:2d:1d:7c:6c:77:
         89:d5:94:c9:c1:1f:ed:b7:ce:bf:6a:26:40:c8:9a:77:7a:16:
         f4:40:d4:6d:db:43:f6:00:34:18:77:36:1c:f9:03:11:3c:bc:
         9b:85:86:f3:66:dc:47:4e:d5:1b:e3:ae:43:8b:dd:23:27:84:
         b6:dd:46:58:95:81:74:b7:84:72:4d:6a:be:e5:d4:8e:9d:e8:
         2d:0e:31:b0:73:1d:19:5d:a9:bf:12:52:40:c7:6f:f6:e7:cc:
         90:f1:47:b9:6d:69:da:e2:24:09:11:5b:af:77:c2:3d:73:e5:
         04:c7:50:59
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElX8/MYZ3YH79AKn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDkwY2Y3NWItZjk5OC00NWUyLWE4ZWEtYzRkODgyMjAx
ZDI0MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk
ZWZiYzI3MjctZDY0Zi00YzA5LWEyMjMtMTBhNTc4ZTU4MzI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZLoj+Q0KKfxWaH23RIb7aJ44fr9tvufqQXL
0ZRkFpblYTORW9x9d3XEBSVlAzzxzI+MsIVrKfA0UaS4F2Epm5/Ofg0ZB7B97OBj
JNDkjzOFD9LW7wdvwR71ccVAIp7r70DET6QbrQSWlO3OARk6cTGX3F4IsspcrLEd
EvOCVy/f1Rh+Vziy2j36aSxZKOaGahbSUPfGUyCZjX5Bd5uskIrfMyXRKI0satxP
2tysiV1gqKvXzstOVQYjNpf53W8O2CMOdnHTSW9qykmRv7j3/eS6rqNs1krv8ZGO
FuaAUEy44R2uTyeXsy8+TRD+D24EIqYmRfXpJiOVewEAxngcPwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKTNfVUi5EPPc84nnDk/thZZ/s0lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOTBj
Zjc1Yi1mOTk4LTQ1ZTItYThlYS1jNGQ4ODIyMDFkMjQvZDY3NjIzOGUtNDE3ZC0z
ODRlLTlhMzEtMzJhMmVmZDNjNWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDkwY2Y3NWItZjk5OC00NWUyLWE4
ZWEtYzRkODgyMjAxZDI0LzA5MGNmNzViLWY5OTgtNDVlMi1hOGVhLWM0ZDg4MjIw
MWQyNC5jcmwwHwYDVR0jBBgwFoAUFJzHB5qQ12kdRwTprW3n184sfQEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wOTBjZjc1Yi1mOTk4LTQ1ZTItYThlYS1jNGQ4
ODIyMDFkMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL9YwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASY0/XuMExJpiDu/XW0dA1OlGNxCn/6UufcwzaJ/x2dLeaiO27BBI
Udn0U07CAi5Nw3ygERR/c5XICegAZ5BPdrhBJJS4crQ/FhTQHlbPdQys/kl3ZyqJ
qDGFiLlBofUriCioo40zbhI7JkFfnW6IVPfTHtN8aMxnX5KH+Jc06cLlkPvYjVf9
jMGBoi0dfGx3idWUycEf7bfOv2omQMiad3oW9EDUbdtD9gA0GHc2HPkDETy8m4WG
82bcR07VG+OuQ4vdIyeEtt1GWJWBdLeEck1qvuXUjp3oLQ4xsHMdGV2pvxJSQMdv
9ufMkPFHuW1p2uIkCRFbr3fCPXPlBMdQWQ==
-----END CERTIFICATE-----