Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c58e8d7b-a305-313b-b4cc-297f1831546b.roa
File:                     c58e8d7b-a305-313b-b4cc-297f1831546b.roa (raw, json)
Hash identifier:          w74N2YqAczszFSVof+6URqE4hrvea+drd8EDQffTsSo=
Subject key identifier:   24:ED:91:BB:2D:5C:08:EB:0D:7B:38:FB:89:20:5F:C3:42:AB:2C:51
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858497F09AB759BB607C07A2E7C40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c58e8d7b-a305-313b-b4cc-297f1831546b.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     20940
IP address blocks:        2600:141b:1c00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:ab:75:9b:b6:07:c0:7a:2e:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=09a71216-2801-4b25-a6a9-3900e8cc5d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e0:1e:b5:10:a5:cd:85:a1:07:2d:a8:c7:ee:
                    ff:07:76:37:bc:74:7c:19:79:51:1b:79:bc:20:be:
                    38:8f:3c:35:51:83:bd:15:5b:61:de:cf:58:a5:25:
                    03:51:fc:6e:3b:0d:f8:7a:28:16:4c:2e:2e:80:60:
                    aa:a5:01:1c:c5:e6:66:99:f6:e8:ea:de:87:e2:13:
                    a3:3c:c4:0f:09:4b:47:52:22:61:2a:cb:2d:48:ac:
                    9a:98:11:97:50:c1:62:7c:bb:a0:fa:54:41:ed:b9:
                    df:e7:9b:f1:d8:a7:87:15:4b:0e:15:73:c9:d2:c9:
                    22:f4:08:4b:eb:06:6f:2a:ee:70:c3:b1:04:da:f2:
                    6d:2f:23:88:4a:ae:18:92:47:b0:20:32:32:54:22:
                    96:44:b7:17:be:69:8b:22:8d:28:e0:a1:b8:09:fd:
                    fc:9f:02:cd:e6:c1:90:fe:72:af:ea:08:cc:4d:85:
                    dc:a5:08:5d:d5:0e:0f:66:a2:0d:51:d6:a4:18:82:
                    37:88:e8:9a:b9:ab:e2:e5:27:0a:b9:e3:82:10:35:
                    a3:d8:f1:6c:d0:62:7d:e3:a4:dd:60:fe:ba:0a:6c:
                    9b:4e:8d:b5:2e:da:56:07:26:f9:66:b7:9e:82:cf:
                    5a:6a:6c:34:57:d1:2a:3c:f9:01:4e:0f:ed:de:ce:
                    76:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:ED:91:BB:2D:5C:08:EB:0D:7B:38:FB:89:20:5F:C3:42:AB:2C:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c58e8d7b-a305-313b-b4cc-297f1831546b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:1c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:38:b3:da:39:d0:ff:4f:fa:80:70:b4:54:66:6f:b0:3e:bb:
         0e:6f:c5:6a:da:92:39:c9:82:7f:67:cd:ac:3d:9f:bd:a2:8f:
         4a:7e:0c:6c:45:9e:31:ad:dc:f8:1c:6b:47:60:d6:5c:9a:46:
         4a:69:52:b9:fe:35:a8:6d:41:e8:c6:37:d7:bd:d0:90:8e:8b:
         d3:9a:a2:94:b4:46:09:38:9f:f9:3a:b4:b9:80:16:6c:d5:f8:
         ff:d5:05:0c:14:61:6f:63:5c:6e:8d:99:09:e0:af:b7:13:76:
         d0:c2:37:f4:83:7c:7a:0f:e2:19:6d:cc:e9:87:28:c2:31:03:
         52:70:67:bb:31:66:2f:02:eb:5e:03:1d:3e:85:2c:39:f7:ce:
         ba:55:d0:90:1a:57:a0:26:fc:66:e7:60:62:92:e3:9a:0b:54:
         14:43:b6:cd:3b:26:75:07:c3:78:8c:f4:ea:c3:a4:0a:e2:b5:
         82:58:6c:42:81:9a:2c:48:b6:24:a1:ea:51:a1:69:ad:1b:43:
         91:18:b8:92:e8:78:a1:4d:4a:a4:c8:a0:49:c5:d6:08:bb:18:
         11:3f:f3:0e:74:68:be:83:56:8a:ce:0a:5e:83:2b:51:68:a9:
         00:98:f1:18:2b:4e:7a:4a:54:f0:4e:4c:f0:6c:a6:08:a6:01:
         06:b4:51:05
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl/Cat1m7YHwHoufEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk
MDlhNzEyMTYtMjgwMS00YjI1LWE2YTktMzkwMGU4Y2M1ZDFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+AetRClzYWhBy2ox+7/B3Y3vHR8GXlRG3m8
IL44jzw1UYO9FVth3s9YpSUDUfxuOw34eigWTC4ugGCqpQEcxeZmmfbo6t6H4hOj
PMQPCUtHUiJhKsstSKyamBGXUMFifLug+lRB7bnf55vx2KeHFUsOFXPJ0ski9AhL
6wZvKu5ww7EE2vJtLyOISq4YkkewIDIyVCKWRLcXvmmLIo0o4KG4Cf38nwLN5sGQ
/nKv6gjMTYXcpQhd1Q4PZqINUdakGII3iOiauavi5ScKueOCEDWj2PFs0GJ946Td
YP66CmybTo21LtpWByb5Zreegs9aamw0V9EqPPkBTg/t3s522wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCTtkbstXAjrDXs4+4kgX8NCqyxRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzU4ZThkN2ItYTMwNS0z
MTNiLWI0Y2MtMjk3ZjE4MzE1NDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGxwA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACQ4s9o50P9P+oBwtFRmb7A+uw5vxWrakjnJgn9nzaw9n72ij0p+
DGxFnjGt3Pgca0dg1lyaRkppUrn+NahtQejGN9e90JCOi9OaopS0Rgk4n/k6tLmA
FmzV+P/VBQwUYW9jXG6NmQngr7cTdtDCN/SDfHoP4hltzOmHKMIxA1JwZ7sxZi8C
614DHT6FLDn3zrpV0JAaV6Am/GbnYGKS45oLVBRDts07JnUHw3iM9OrDpAritYJY
bEKBmixItiSh6lGhaa0bQ5EYuJLoeKFNSqTIoEnF1gi7GBE/8w50aL6DVorOCl6D
K1FoqQCY8RgrTnpKVPBOTPBspgimAQa0UQU=
-----END CERTIFICATE-----