Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a14fb65f-37cb-3374-a579-914407428f05.roa
File:                     a14fb65f-37cb-3374-a579-914407428f05.roa (raw, json)
Hash identifier:          /oBorS2QVgnl2gm4kB2MsSBhq70WrUbcRJ2Xv7JRKQA=
Subject key identifier:   3F:84:89:6E:3D:CC:BE:F9:36:88:48:75:63:C7:75:75:01:27:8A:7D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858497F09A92B0EF2B7D58F6DEB80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a14fb65f-37cb-3374-a579-914407428f05.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     20940
IP address blocks:        2600:141c:9800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:a9:2b:0e:f2:b7:d5:8f:6d:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=7ff10f41-3366-49fc-92bd-1299df8cd139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:85:37:11:6a:d0:2a:7c:bf:82:d3:5e:6b:18:
                    89:ce:5e:1c:46:f4:70:65:22:63:68:8f:30:49:cb:
                    34:4f:a7:7b:cd:7b:da:34:f9:23:0e:99:e6:37:86:
                    0b:89:b0:ee:a4:62:d2:27:fb:52:72:50:06:18:1a:
                    eb:9c:94:cd:b3:33:d8:be:b6:f8:cf:f4:6b:a4:50:
                    08:a9:8f:81:a0:0b:c1:12:12:70:4a:e0:71:00:b2:
                    09:5b:59:60:51:96:2e:47:bb:64:5e:c6:ed:95:81:
                    5e:bb:a0:a8:36:e5:aa:56:1e:fe:d0:76:f9:da:99:
                    2e:da:e8:3c:00:cd:11:07:f5:b3:5f:9f:ca:1e:6e:
                    5a:2a:24:2c:07:d9:59:e1:b7:dd:23:b2:3e:7a:b5:
                    60:61:db:37:8f:57:38:63:ab:77:8b:42:4a:a9:ae:
                    69:59:31:19:48:94:f0:a5:93:ce:48:01:c7:68:5c:
                    9c:a1:c0:31:84:6d:3f:a4:f5:c1:ee:46:dd:27:23:
                    97:70:41:13:6a:f2:86:c6:fb:19:3f:c4:f1:62:8a:
                    a8:88:31:fd:28:2a:0f:75:ed:58:f8:72:4e:f2:c7:
                    11:ee:19:da:c1:63:1c:f0:a2:5d:e5:aa:dd:34:4c:
                    93:3b:88:79:4c:17:df:29:31:c7:48:b6:c9:6d:7b:
                    fe:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:84:89:6E:3D:CC:BE:F9:36:88:48:75:63:C7:75:75:01:27:8A:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a14fb65f-37cb-3374-a579-914407428f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141c:9800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:4f:6e:fe:39:7c:93:1a:e5:b7:30:16:09:14:48:56:2f:b2:
         88:e0:e6:a5:b7:6b:67:5d:79:b8:29:4c:49:39:2d:04:ca:3d:
         c9:98:3d:ef:d9:87:fc:66:c5:fb:b3:fb:9c:35:5b:bf:71:d9:
         aa:41:2f:5b:90:33:c7:ba:0c:9f:00:c4:1b:e3:c9:6c:c3:b3:
         4e:ed:47:18:cb:72:63:1f:35:0c:ca:dd:9a:81:4f:ac:92:5d:
         3d:07:34:25:03:c2:24:d8:a3:1b:1d:7f:58:c7:04:e2:c8:a1:
         a4:76:51:1f:94:e2:ac:db:90:b6:ae:92:d7:65:5b:37:e3:c4:
         c0:e5:96:66:36:15:b5:99:02:23:52:72:2b:09:31:69:6d:37:
         e0:12:17:cc:08:ed:1a:8d:be:3a:95:82:47:68:02:18:b7:32:
         b0:bc:c3:cc:3a:39:87:2a:30:79:4f:93:69:2d:c4:ca:24:dd:
         20:71:fd:eb:66:ef:11:60:27:31:84:b4:ae:09:ae:e6:c1:c4:
         68:f9:be:97:1a:01:4f:1d:49:1e:06:0b:d9:72:3d:51:cf:11:
         63:6e:d7:cf:21:1a:dc:c8:26:56:dc:54:e1:2c:6e:be:5f:f1:
         11:0a:c4:62:7b:66:e2:e8:45:d9:ff:d9:c1:51:22:a3:1e:58:
         96:f5:a4:40
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl/CakrDvK31Y9t64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk
N2ZmMTBmNDEtMzM2Ni00OWZjLTkyYmQtMTI5OWRmOGNkMTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44U3EWrQKny/gtNeaxiJzl4cRvRwZSJjaI8w
Scs0T6d7zXvaNPkjDpnmN4YLibDupGLSJ/tSclAGGBrrnJTNszPYvrb4z/RrpFAI
qY+BoAvBEhJwSuBxALIJW1lgUZYuR7tkXsbtlYFeu6CoNuWqVh7+0Hb52pku2ug8
AM0RB/WzX5/KHm5aKiQsB9lZ4bfdI7I+erVgYds3j1c4Y6t3i0JKqa5pWTEZSJTw
pZPOSAHHaFycocAxhG0/pPXB7kbdJyOXcEETavKGxvsZP8TxYoqoiDH9KCoPde1Y
+HJO8scR7hnawWMc8KJd5ardNEyTO4h5TBffKTHHSLbJbXv+3QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD+EiW49zL75NohIdWPHdXUBJ4p9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTE0ZmI2NWYtMzdjYi0z
Mzc0LWE1NzktOTE0NDA3NDI4ZjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUHJgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFxPbv45fJMa5bcwFgkUSFYvsojg5qW3a2ddebgpTEk5LQTKPcmY
Pe/Zh/xmxfuz+5w1W79x2apBL1uQM8e6DJ8AxBvjyWzDs07tRxjLcmMfNQzK3ZqB
T6ySXT0HNCUDwiTYoxsdf1jHBOLIoaR2UR+U4qzbkLauktdlWzfjxMDllmY2FbWZ
AiNScisJMWltN+ASF8wI7RqNvjqVgkdoAhi3MrC8w8w6OYcqMHlPk2ktxMok3SBx
/etm7xFgJzGEtK4JrubBxGj5vpcaAU8dSR4GC9lyPVHPEWNu188hGtzIJlbcVOEs
br5f8REKxGJ7ZuLoRdn/2cFRIqMeWJb1pEA=
-----END CERTIFICATE-----