Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/413dd93f-e137-317c-ae13-55956a58fd0f.roa
File:                     413dd93f-e137-317c-ae13-55956a58fd0f.roa (raw, json)
Hash identifier:          MzHO7XbN5e/VqYQlphVSI0rHyxCVHoqL3u+rmJ/GHw8=
Subject key identifier:   AE:53:44:28:3C:04:4C:9B:61:32:2A:35:91:4A:1E:39:37:80:6B:67
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D216D4BAB9DF3F07B5DF00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/413dd93f-e137-317c-ae13-55956a58fd0f.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        2600:6c0c:809::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d2:16:d4:ba:b9:df:3f:07:b5:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=68776a32-c10f-4a94-b256-126ab088acdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:27:de:5c:4d:e7:69:aa:9f:6e:ab:37:ee:
                    63:69:f9:19:5a:58:2a:ca:04:59:b9:2c:c7:72:03:
                    9b:50:52:20:f3:c0:7c:cc:3b:bc:f1:c5:37:c7:ea:
                    cf:b5:cf:63:07:28:62:1c:e7:75:36:4d:6c:85:6f:
                    20:c2:1a:96:8f:e2:58:7d:57:89:37:ef:df:3f:b2:
                    7e:23:00:7d:c2:54:2c:ae:6a:78:63:84:e4:c1:fb:
                    86:9d:69:75:d0:3c:60:90:d7:c3:6c:16:92:5c:4f:
                    6e:59:c6:24:a7:8b:9f:cf:a9:a9:c4:89:07:62:19:
                    9d:ee:78:c8:74:74:eb:e3:fc:ab:4a:79:7f:cb:88:
                    a2:f1:7a:d6:be:47:ce:62:09:ac:72:18:ba:c1:5c:
                    8f:29:5e:d4:dd:f8:93:ef:eb:2f:91:49:b7:7a:8d:
                    fb:a5:a0:f4:95:e8:78:ee:07:95:91:33:ab:9f:37:
                    28:31:4f:05:17:89:86:40:fc:5d:84:d7:a2:bd:bc:
                    a8:ef:f0:0a:c6:be:ad:7f:13:fa:68:c2:6e:61:a0:
                    47:79:4f:db:c4:c3:bc:42:42:c7:9a:a1:ed:2e:a6:
                    10:ca:e2:72:bd:31:6b:be:a0:03:53:b8:26:1e:05:
                    ef:2e:46:30:b1:53:33:1b:dd:d0:04:c2:54:04:00:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:53:44:28:3C:04:4C:9B:61:32:2A:35:91:4A:1E:39:37:80:6B:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/413dd93f-e137-317c-ae13-55956a58fd0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0c:809::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:71:bc:33:96:6b:5a:3b:92:16:f1:b1:6a:67:cd:3e:17:8a:
         c8:ba:42:04:bb:ae:04:e9:46:10:03:ad:22:76:de:dc:a7:a4:
         2a:f9:48:2c:a8:0d:64:5f:76:f7:de:ad:fa:bb:af:25:3e:24:
         aa:17:97:87:9a:99:65:bf:f8:4e:84:49:e0:af:02:a7:54:55:
         8d:60:08:34:88:b0:e8:2e:92:e2:9e:a1:c8:05:17:2b:6a:81:
         2e:bd:7a:fd:8b:8c:07:be:24:67:cc:00:e2:e9:5e:0a:d7:10:
         95:d3:9e:b6:d9:70:4e:9b:f1:4a:e8:31:79:b4:e1:22:5a:a8:
         83:b8:b7:6e:9b:2f:82:bf:c3:64:7e:ec:95:3e:94:8a:48:83:
         d6:fb:2c:e4:50:22:d8:07:70:55:15:12:8b:73:44:82:1f:e7:
         31:b6:43:6d:9b:5e:04:98:a5:b8:25:05:38:97:af:70:b6:12:
         5e:5f:6c:4f:8f:e3:3d:7b:b8:cd:0b:2d:41:35:91:aa:98:26:
         5e:b9:05:55:a3:74:06:99:38:b9:92:f6:8c:b9:ad:ff:18:d9:
         ae:8a:2f:14:94:68:5a:ef:61:27:66:7a:4a:3c:dd:58:58:df:
         79:b7:87:4a:d9:d3:8d:62:4c:ff:25:55:a9:a9:79:3e:15:33:
         c4:08:12:9f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEji0hbUurnfPwe13wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
Njg3NzZhMzItYzEwZi00YTk0LWIyNTYtMTI2YWIwODhhY2RmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmkn3lxN52mqn26rN+5jafkZWlgqygRZuSzH
cgObUFIg88B8zDu88cU3x+rPtc9jByhiHOd1Nk1shW8gwhqWj+JYfVeJN+/fP7J+
IwB9wlQsrmp4Y4TkwfuGnWl10DxgkNfDbBaSXE9uWcYkp4ufz6mpxIkHYhmd7njI
dHTr4/yrSnl/y4ii8XrWvkfOYgmschi6wVyPKV7U3fiT7+svkUm3eo37paD0leh4
7geVkTOrnzcoMU8FF4mGQPxdhNeivbyo7/AKxr6tfxP6aMJuYaBHeU/bxMO8QkLH
mqHtLqYQyuJyvTFrvqADU7gmHgXvLkYwsVMzG93QBMJUBAB23QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK5TRCg8BEybYTIqNZFKHjk3gGtnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNDEzZGQ5M2YtZTEzNy0z
MTdjLWFlMTMtNTU5NTZhNThmZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgBsDAgJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAM5xvDOWa1o7khbxsWpnzT4Xisi6QgS7rgTpRhADrSJ23tynpCr5
SCyoDWRfdvferfq7ryU+JKoXl4eamWW/+E6ESeCvAqdUVY1gCDSIsOgukuKeocgF
FytqgS69ev2LjAe+JGfMAOLpXgrXEJXTnrbZcE6b8UroMXm04SJaqIO4t26bL4K/
w2R+7JU+lIpIg9b7LORQItgHcFUVEotzRIIf5zG2Q22bXgSYpbglBTiXr3C2El5f
bE+P4z17uM0LLUE1kaqYJl65BVWjdAaZOLmS9oy5rf8Y2a6KLxSUaFrvYSdmeko8
3VhY33m3h0rZ041iTP8lVampeT4VM8QIEp8=
-----END CERTIFICATE-----