Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d132c122-6bc9-3249-8de9-eb68b6a8e0aa.roa
File:                     d132c122-6bc9-3249-8de9-eb68b6a8e0aa.roa (raw, json)
Hash identifier:          MDCKmsm1jdt3bMnH/VIhBNyaqD+ZajYWEmiomCPo/oA=
Subject key identifier:   23:4F:25:1C:9F:75:B2:C5:FD:16:3A:A4:EE:C7:5A:9B:E9:7E:10:B5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1F385B75E672CCDDCAD10
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d132c122-6bc9-3249-8de9-eb68b6a8e0aa.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        2600:6c4a::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:f3:85:b7:5e:67:2c:cd:dc:ad:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=b34cb2f6-ec48-45a0-919c-256ad32128f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d8:51:ab:03:06:32:d5:71:dd:53:f9:23:0e:
                    27:62:42:82:b7:88:2a:c4:86:bb:00:e8:63:1f:80:
                    98:7f:cd:05:ed:da:81:b1:7a:9c:9c:10:9d:c1:0e:
                    50:d3:9a:83:ec:14:8b:49:2d:48:4f:8f:ab:00:a3:
                    a6:79:0a:c1:b3:1c:a0:e1:0c:91:1e:43:d5:c2:c6:
                    bb:38:cc:6d:57:b7:7b:af:e9:bf:7b:b3:f6:b1:0c:
                    6c:57:0f:25:4d:a2:f7:97:71:0c:75:f9:47:e6:ec:
                    ca:5d:a8:93:11:fc:fa:62:d3:21:f9:69:e8:bc:5c:
                    43:19:48:90:bf:2a:29:e7:1e:bc:63:32:5e:73:ac:
                    53:99:8a:b7:5f:1e:47:de:97:c5:6f:1b:02:5d:7a:
                    c1:aa:80:85:63:b7:26:25:47:a5:76:a5:5c:c2:f6:
                    2c:82:31:37:46:de:b5:cf:03:b8:e4:ec:93:14:93:
                    d1:6b:bc:74:f1:84:35:05:75:00:1b:f3:d9:95:a6:
                    6d:8d:13:fb:d9:a6:b3:6a:2a:f1:5e:4d:95:38:96:
                    d0:02:6d:21:2a:2a:ea:c1:1d:9b:d9:a0:bf:80:e9:
                    a2:a9:91:62:ed:d3:d8:d6:ce:8d:23:e4:c1:7e:2c:
                    aa:9b:96:69:b4:96:65:de:fb:4d:23:35:4b:3b:bb:
                    f5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4F:25:1C:9F:75:B2:C5:FD:16:3A:A4:EE:C7:5A:9B:E9:7E:10:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d132c122-6bc9-3249-8de9-eb68b6a8e0aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c4a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:93:d0:93:a8:7f:cb:c5:b3:e3:43:10:22:d6:b2:ff:53:6e:
         a1:a3:af:f5:01:4c:b3:d7:ea:71:e9:08:08:cf:47:db:bc:9e:
         ed:79:c8:38:8e:06:3b:b7:3b:27:82:f5:e4:95:ea:98:d9:ad:
         2d:22:2d:46:67:0e:4d:74:2f:99:7f:36:4c:59:bb:65:ce:06:
         d4:a4:95:fd:44:0b:90:3b:34:2b:6f:0a:c7:d5:49:ff:ba:7a:
         7d:f4:d8:ca:cc:65:34:13:5a:f4:e1:48:70:a1:1e:47:7b:1f:
         9c:60:ab:c1:f8:b3:ad:d7:01:15:74:88:63:43:2d:d2:67:1f:
         42:a6:a4:1f:02:02:84:9f:5c:8b:f7:ad:b9:e5:7a:bf:bb:36:
         d8:f6:8d:a5:6f:15:7a:aa:b4:15:07:cf:4d:c4:8a:85:fa:1b:
         04:28:6c:74:fc:6e:53:3c:71:d7:9a:7f:ae:f8:08:2d:2b:51:
         b6:85:47:41:3f:25:d1:d1:3c:2d:c7:ab:a3:b6:d5:4c:d3:ae:
         a1:6e:6b:51:85:1b:67:6e:17:56:b7:23:df:87:61:13:16:22:
         ed:12:11:2d:bf:ae:e6:a0:62:b9:d2:e2:33:f1:46:15:3e:86:
         a3:86:f3:23:97:66:e0:f5:da:2c:24:1a:f2:18:20:80:89:bf:
         60:e5:35:2b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEji0fOFt15nLM3crRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
YjM0Y2IyZjYtZWM0OC00NWEwLTkxOWMtMjU2YWQzMjEyOGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9hRqwMGMtVx3VP5Iw4nYkKCt4gqxIa7AOhj
H4CYf80F7dqBsXqcnBCdwQ5Q05qD7BSLSS1IT4+rAKOmeQrBsxyg4QyRHkPVwsa7
OMxtV7d7r+m/e7P2sQxsVw8lTaL3l3EMdflH5uzKXaiTEfz6YtMh+WnovFxDGUiQ
vyop5x68YzJec6xTmYq3Xx5H3pfFbxsCXXrBqoCFY7cmJUeldqVcwvYsgjE3Rt61
zwO45OyTFJPRa7x08YQ1BXUAG/PZlaZtjRP72aazairxXk2VOJbQAm0hKirqwR2b
2aC/gOmiqZFi7dPY1s6NI+TBfiyqm5ZptJZl3vtNIzVLO7v1WQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCNPJRyfdbLF/RY6pO7HWpvpfhC1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDEzMmMxMjItNmJjOS0z
MjQ5LThkZTktZWI2OGI2YThlMGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgBsSjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDPk9CTqH/LxbPjQxAi1rL/U26ho6/1AUyz1+px6QgIz0fbvJ7tecg4
jgY7tzsngvXkleqY2a0tIi1GZw5NdC+ZfzZMWbtlzgbUpJX9RAuQOzQrbwrH1Un/
unp99NjKzGU0E1r04UhwoR5Hex+cYKvB+LOt1wEVdIhjQy3SZx9CpqQfAgKEn1yL
96255Xq/uzbY9o2lbxV6qrQVB89NxIqF+hsEKGx0/G5TPHHXmn+u+AgtK1G2hUdB
PyXR0Twtx6ujttVM066hbmtRhRtnbhdWtyPfh2ETFiLtEhEtv67moGK50uIz8UYV
PoajhvMjl2bg9dosJBryGCCAib9g5TUr
-----END CERTIFICATE-----