Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71d79ed5-be79-3077-ad29-924a1444f206.roa
File:                     71d79ed5-be79-3077-ad29-924a1444f206.roa (raw, json)
Hash identifier:          +8+ks1mV1a/8pv9PbNq2uyVg/W0QPeeazjVy4TI1+Ok=
Subject key identifier:   7F:BE:01:43:2A:4F:DB:1E:22:ED:D4:DB:4F:7C:1F:C1:9E:AF:A8:07
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584902EC0C7CCFD6C774A13A2C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71d79ed5-be79-3077-ad29-924a1444f206.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     12222
IP address blocks:        2001:4878:c347::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:0c:7c:cf:d6:c7:74:a1:3a:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=cb0e2155-f136-4104-9f86-e181f18b35a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:64:fd:f7:36:73:26:5e:6f:8f:07:6a:5b:
                    dc:eb:d2:6f:e4:5d:2c:a8:b6:ca:d5:db:8c:7c:78:
                    67:f0:0b:2a:7c:77:b1:c3:6e:66:81:8d:50:e2:ba:
                    1d:a8:44:90:a5:b7:71:8b:b7:ba:32:84:55:70:85:
                    95:7f:40:4e:f8:25:ac:c0:71:c4:c4:6d:a2:e2:66:
                    c9:28:49:7f:77:65:94:dc:37:b9:ee:0b:4f:cd:14:
                    71:c8:09:2c:4b:24:4b:45:4c:5f:1d:50:4e:c7:45:
                    84:37:67:4b:ec:86:62:f4:b0:16:cb:e3:15:de:e5:
                    83:98:7c:c6:40:b5:f7:2c:35:24:d6:12:52:03:e5:
                    5c:1a:5e:01:88:ae:9e:a7:3c:97:92:9d:76:2e:81:
                    ae:23:43:61:b2:c8:ab:b6:d6:d3:e0:59:eb:e5:ab:
                    a3:2a:e3:69:f4:e9:2f:b3:ba:6a:80:2e:c0:ff:cd:
                    ae:e6:f8:73:2c:21:ee:f4:c3:1c:a2:c6:22:97:c3:
                    ce:0d:1f:84:d6:a4:1e:3a:86:63:77:12:9c:5b:e0:
                    59:da:10:37:3c:83:0b:16:79:a4:d9:de:6c:df:d8:
                    51:64:44:b2:aa:03:4d:63:3a:fb:2f:e1:c3:e7:64:
                    16:17:b1:56:54:7f:ff:4d:6b:81:fd:34:25:3b:ec:
                    08:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BE:01:43:2A:4F:DB:1E:22:ED:D4:DB:4F:7C:1F:C1:9E:AF:A8:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71d79ed5-be79-3077-ad29-924a1444f206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:c347::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:33:ce:22:d5:14:4b:ae:72:29:f9:b5:8e:9b:d7:5e:4a:f8:
         e8:bf:36:3c:28:69:7c:ea:af:9e:39:7d:63:97:ac:c1:30:8f:
         a4:d0:34:b9:80:89:81:a2:ac:20:72:92:d0:ba:f9:2f:48:4e:
         0a:18:33:30:27:46:73:f1:38:36:62:48:13:84:62:9a:3e:74:
         67:92:9c:24:4e:b9:ef:86:ab:2f:25:5e:f9:95:77:52:6d:79:
         73:fd:07:ea:fa:81:fa:d8:c8:b8:9c:68:74:13:17:fb:b2:ba:
         af:44:1b:74:e3:80:7e:98:c7:62:8d:3a:ac:22:21:57:3a:3b:
         2c:f0:3b:9d:8a:dd:a3:15:08:b8:89:53:e0:c9:ae:8d:0f:1a:
         76:49:93:9a:ec:49:94:39:d7:be:b9:8d:ea:75:d2:fc:fb:07:
         40:f9:18:f1:95:9c:b7:86:a1:65:79:2d:d3:38:28:78:45:23:
         dd:91:80:dc:aa:c2:8f:e9:d1:9f:c1:4d:ab:09:1c:5f:0e:1e:
         b1:c2:8c:bc:1c:00:1c:0e:9b:9f:94:84:8a:d0:f6:85:3c:31:
         d5:6c:46:3c:2b:ed:5a:20:e9:9e:b8:4a:76:ca:e7:b7:c0:3f:
         d0:62:13:30:1f:c8:65:12:9f:d4:1d:9e:0d:cc:a1:7b:e0:fa:
         82:9f:d5:63
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkC7Ax8z9bHdKE6LIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
Y2IwZTIxNTUtZjEzNi00MTA0LTlmODYtZTE4MWYxOGIzNWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH9k/fc2cyZeb48Halvc69Jv5F0sqLbK1duM
fHhn8AsqfHexw25mgY1Q4rodqESQpbdxi7e6MoRVcIWVf0BO+CWswHHExG2i4mbJ
KEl/d2WU3De57gtPzRRxyAksSyRLRUxfHVBOx0WEN2dL7IZi9LAWy+MV3uWDmHzG
QLX3LDUk1hJSA+VcGl4BiK6epzyXkp12LoGuI0NhssirttbT4Fnr5aujKuNp9Okv
s7pqgC7A/82u5vhzLCHu9MMcosYil8PODR+E1qQeOoZjdxKcW+BZ2hA3PIMLFnmk
2d5s39hRZESyqgNNYzr7L+HD52QWF7FWVH//TWuB/TQlO+wIGQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH++AUMqT9seIu3U2098H8Ger6gHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzFkNzllZDUtYmU3OS0z
MDc3LWFkMjktOTI0YTE0NDRmMjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeMNH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF4zziLVFEuucin5tY6b115K+Oi/NjwoaXzqr545fWOXrMEwj6TQ
NLmAiYGirCByktC6+S9ITgoYMzAnRnPxODZiSBOEYpo+dGeSnCROue+Gqy8lXvmV
d1JteXP9B+r6gfrYyLicaHQTF/uyuq9EG3TjgH6Yx2KNOqwiIVc6OyzwO52K3aMV
CLiJU+DJro0PGnZJk5rsSZQ51765jep10vz7B0D5GPGVnLeGoWV5LdM4KHhFI92R
gNyqwo/p0Z/BTasJHF8OHrHCjLwcABwOm5+UhIrQ9oU8MdVsRjwr7Vog6Z64SnbK
57fAP9BiEzAfyGUSn9Qdng3MoXvg+oKf1WM=
-----END CERTIFICATE-----