Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c9fa2a2-c317-317b-8712-f1e1b47c5a9f.roa
File:                     3c9fa2a2-c317-317b-8712-f1e1b47c5a9f.roa (raw, json)
Hash identifier:          CrxcVdQsNPs9w/ZdFuQi8OzKj8RghGe0H9uovI6p08Q=
Subject key identifier:   2C:4A:4A:DF:28:DD:75:AF:CE:2D:60:C5:13:8F:C7:7F:1E:AE:BA:BD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858496A19B509B85D34CA01904D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c9fa2a2-c317-317b-8712-f1e1b47c5a9f.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     20940
IP address blocks:        2600:1402:19::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:b5:09:b8:5d:34:ca:01:90:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=3767b752-b8ac-41c8-9584-7e96022bcb98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:db:11:65:25:22:7b:5f:6a:00:f1:a5:b7:82:
                    95:b7:4e:11:6a:e9:3c:d5:c3:64:f2:15:a3:d0:6a:
                    d4:21:b4:a4:e8:72:bc:8d:02:4f:4e:8f:3c:69:91:
                    62:e9:e5:4e:91:bd:28:ee:48:f0:de:ae:24:4b:2d:
                    23:5e:c2:44:e0:57:8b:db:8d:1c:75:df:ea:43:a1:
                    53:a8:fc:59:d6:b5:9e:4f:6f:6d:d0:3d:9c:dd:7c:
                    ca:56:f4:00:6e:e4:62:52:45:64:0d:46:0d:d4:ad:
                    60:99:7c:6b:0d:26:0e:8d:40:b9:59:f9:1f:b1:21:
                    c9:d3:8c:5b:68:6e:6e:07:6f:42:61:04:fd:4a:a9:
                    dd:ed:44:df:25:15:80:50:a1:40:3c:e6:c4:f5:16:
                    6a:85:7f:62:48:be:1b:4d:fb:fe:16:8f:6b:f4:d3:
                    50:ac:6f:0a:ab:0f:e9:a4:01:7c:6b:39:36:46:02:
                    32:a8:60:00:fd:4a:29:c6:7f:53:71:14:6d:75:41:
                    e2:eb:38:63:20:e2:9b:71:9e:f2:d4:d1:6b:db:34:
                    e5:ab:ee:d7:79:05:4a:ba:90:f5:ec:47:60:94:a1:
                    41:d9:55:b9:37:dd:3f:e5:91:5f:2b:c5:09:36:6e:
                    c5:18:88:73:c7:c7:59:a1:27:d4:1f:b3:8a:e5:d3:
                    34:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4A:4A:DF:28:DD:75:AF:CE:2D:60:C5:13:8F:C7:7F:1E:AE:BA:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c9fa2a2-c317-317b-8712-f1e1b47c5a9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1402:19::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:99:cf:bd:ae:30:4e:dd:38:95:4b:f0:ad:bf:28:1a:ee:28:
         1a:80:66:f9:18:13:4c:a3:82:6a:04:70:af:a1:be:9e:e1:e1:
         06:2f:c2:c9:87:99:8d:d2:c4:88:b2:ff:a3:ac:b2:7f:28:65:
         6c:2c:e8:df:05:d9:77:40:b5:2f:27:01:24:8b:1d:cf:c5:a0:
         ce:46:68:d8:91:e0:b1:fb:ca:1f:d0:9b:8f:ca:eb:ea:64:69:
         9c:97:2b:31:5f:22:4e:f4:5e:89:01:88:2e:68:98:6f:05:a5:
         3d:fc:04:1f:2a:d4:15:6a:14:f8:52:15:ba:0e:d7:e6:0e:03:
         89:c8:24:23:15:40:11:35:cd:c8:e3:42:86:e4:84:09:ca:43:
         e0:ef:99:26:df:0f:6b:1e:a1:46:89:3d:b4:c8:01:d3:5a:b5:
         79:67:4d:a5:7c:41:56:a3:e4:c1:60:7e:58:2e:e9:72:94:34:
         42:38:dc:01:2e:7a:b2:9a:18:96:42:e0:66:3f:89:8c:30:22:
         80:c2:63:a0:12:5c:d1:59:cc:73:f3:87:2f:5e:29:d7:58:5c:
         5f:e5:62:09:b8:fd:42:6d:56:25:64:d1:28:ba:dd:73:df:dd:
         4d:58:28:2a:8c:71:47:f8:c9:bb:58:47:d1:65:66:8b:2c:34:
         4a:61:89:5b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElqGbUJuF00ygGQTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk
Mzc2N2I3NTItYjhhYy00MWM4LTk1ODQtN2U5NjAyMmJjYjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09sRZSUie19qAPGlt4KVt04Rauk81cNk8hWj
0GrUIbSk6HK8jQJPTo88aZFi6eVOkb0o7kjw3q4kSy0jXsJE4FeL240cdd/qQ6FT
qPxZ1rWeT29t0D2c3XzKVvQAbuRiUkVkDUYN1K1gmXxrDSYOjUC5WfkfsSHJ04xb
aG5uB29CYQT9Sqnd7UTfJRWAUKFAPObE9RZqhX9iSL4bTfv+Fo9r9NNQrG8Kqw/p
pAF8azk2RgIyqGAA/Uopxn9TcRRtdUHi6zhjIOKbcZ7y1NFr2zTlq+7XeQVKupD1
7EdglKFB2VW5N90/5ZFfK8UJNm7FGIhzx8dZoSfUH7OK5dM0GQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCxKSt8o3XWvzi1gxROPx38errq9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2M5ZmEyYTItYzMxNy0z
MTdiLTg3MTItZjFlMWI0N2M1YTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUAgAZ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHOZz72uME7dOJVL8K2/KBruKBqAZvkYE0yjgmoEcK+hvp7h4QYv
wsmHmY3SxIiy/6Ossn8oZWws6N8F2XdAtS8nASSLHc/FoM5GaNiR4LH7yh/Qm4/K
6+pkaZyXKzFfIk70XokBiC5omG8FpT38BB8q1BVqFPhSFboO1+YOA4nIJCMVQBE1
zcjjQobkhAnKQ+DvmSbfD2seoUaJPbTIAdNatXlnTaV8QVaj5MFgflgu6XKUNEI4
3AEuerKaGJZC4GY/iYwwIoDCY6ASXNFZzHPzhy9eKddYXF/lYgm4/UJtViVk0Si6
3XPf3U1YKCqMcUf4ybtYR9FlZossNEphiVs=
-----END CERTIFICATE-----