Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74ab4167-5f81-399d-8834-0a1f835ead7f.roa
File:                     74ab4167-5f81-399d-8834-0a1f835ead7f.roa (raw, json)
Hash identifier:          KPxKYqJqLYPOaFd/pUV3BvqgjXMqgueJLkpzW9TDj9Q=
Subject key identifier:   A2:6E:87:91:87:00:6B:A7:8D:B4:EA:61:42:20:8B:C9:50:55:34:85
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849806F3BE2A29A13C7F77DD9C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74ab4167-5f81-399d-8834-0a1f835ead7f.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        2600:1416:5000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:3b:e2:a2:9a:13:c7:f7:7d:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=da442bc8-b891-4476-9a75-3ff72a971b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:34:02:a1:7d:cf:73:bf:ed:9a:e8:0c:8c:49:
                    f7:76:bd:58:ef:2c:34:04:ae:08:35:7f:49:80:04:
                    83:4c:ae:d9:91:27:f8:bf:62:b6:4b:78:b4:69:ef:
                    9d:64:1a:b9:96:89:1b:c7:15:b4:94:c8:44:ac:8f:
                    32:eb:4c:f6:c0:e8:57:1e:5f:77:fc:d0:50:7b:1c:
                    eb:2b:82:3c:31:61:ea:9f:4e:b5:62:a7:58:9f:bb:
                    b4:05:ed:f5:31:a7:12:e8:73:f2:de:8f:a4:0c:9a:
                    3a:22:53:ef:f4:fe:e4:f0:b2:91:ae:e9:e7:93:ef:
                    87:9e:b5:53:c9:66:62:4f:e0:08:88:b3:f5:60:56:
                    d3:19:05:a9:dc:7d:8a:60:01:f5:59:18:04:08:99:
                    fc:9f:a6:8b:34:fe:99:e8:f0:34:58:56:e0:3a:be:
                    50:a7:16:85:ca:5d:43:9a:29:02:17:ce:c7:01:92:
                    07:72:f5:6d:78:02:04:fb:f4:e0:b2:f1:bb:8e:26:
                    59:d7:00:f6:e2:85:6d:82:59:1c:0a:4c:cd:38:f1:
                    9e:57:16:ce:14:db:da:1c:f3:57:5f:9f:86:74:10:
                    d6:c7:fe:e1:6d:06:85:9e:7a:c4:ed:bb:67:25:9b:
                    a1:a1:e9:b7:32:4e:af:29:f3:d4:22:f8:6d:4f:c9:
                    89:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6E:87:91:87:00:6B:A7:8D:B4:EA:61:42:20:8B:C9:50:55:34:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74ab4167-5f81-399d-8834-0a1f835ead7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1416:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:94:ac:3e:f6:1b:f7:05:07:a1:0e:87:4b:45:13:72:fa:c2:
         98:59:a2:c2:cb:a3:bf:f4:2b:d2:2b:0b:0f:0e:e7:ef:4f:8e:
         80:85:80:82:2c:57:0b:85:31:5d:7a:79:90:75:be:8e:d0:11:
         6d:51:3c:a5:fd:2f:10:ce:fe:a4:17:bc:d6:f9:83:7e:41:ac:
         84:ed:e9:71:5c:c8:c5:37:82:8e:14:d1:a8:85:8d:b4:5a:b9:
         3c:f2:98:ee:de:ac:36:93:6d:55:25:e8:00:03:19:5c:79:74:
         40:20:e8:c1:c5:aa:97:f6:be:7f:61:9c:f0:fe:81:75:ff:28:
         56:68:0b:c6:4c:c6:e1:51:47:5a:49:24:e1:23:e7:38:70:a6:
         bd:5a:5b:58:69:8c:43:bb:9a:d5:16:cd:f8:6c:af:e7:47:3a:
         e0:55:be:db:11:82:be:6c:52:e4:fd:30:da:04:7f:be:fa:bd:
         7c:7a:77:7e:de:b9:8a:39:22:a5:25:27:52:e9:c7:5d:2b:41:
         69:f3:37:e2:3e:c0:8d:f3:5b:14:85:73:97:05:fa:4f:c1:38:
         17:b3:29:2e:05:94:72:37:d6:13:b2:7d:c1:4f:4c:c7:a2:df:
         f4:14:ac:4e:48:9e:61:29:f4:df:7d:d3:cc:e9:f2:7b:63:24:
         86:38:5a:1d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAbzviopoTx/d92cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk
ZGE0NDJiYzgtYjg5MS00NDc2LTlhNzUtM2ZmNzJhOTcxYjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DQCoX3Pc7/tmugMjEn3dr1Y7yw0BK4INX9J
gASDTK7ZkSf4v2K2S3i0ae+dZBq5lokbxxW0lMhErI8y60z2wOhXHl93/NBQexzr
K4I8MWHqn061YqdYn7u0Be31MacS6HPy3o+kDJo6IlPv9P7k8LKRrunnk++HnrVT
yWZiT+AIiLP1YFbTGQWp3H2KYAH1WRgECJn8n6aLNP6Z6PA0WFbgOr5QpxaFyl1D
mikCF87HAZIHcvVteAIE+/TgsvG7jiZZ1wD24oVtglkcCkzNOPGeVxbOFNvaHPNX
X5+GdBDWx/7hbQaFnnrE7btnJZuhoem3Mk6vKfPUIvhtT8mJ+wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKJuh5GHAGunjbTqYUIgi8lQVTSFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzRhYjQxNjctNWY4MS0z
OTlkLTg4MzQtMGExZjgzNWVhZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFlAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGCUrD72G/cFB6EOh0tFE3L6wphZosLLo7/0K9IrCw8O5+9PjoCF
gIIsVwuFMV16eZB1vo7QEW1RPKX9LxDO/qQXvNb5g35BrITt6XFcyMU3go4U0aiF
jbRauTzymO7erDaTbVUl6AADGVx5dEAg6MHFqpf2vn9hnPD+gXX/KFZoC8ZMxuFR
R1pJJOEj5zhwpr1aW1hpjEO7mtUWzfhsr+dHOuBVvtsRgr5sUuT9MNoEf776vXx6
d37euYo5IqUlJ1Lpx10rQWnzN+I+wI3zWxSFc5cF+k/BOBezKS4FlHI31hOyfcFP
TMei3/QUrE5InmEp9N9908zp8ntjJIY4Wh0=
-----END CERTIFICATE-----