Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/174e44ab-cac0-3427-8ca2-4837cf5a07fe.roa
File:                     174e44ab-cac0-3427-8ca2-4837cf5a07fe.roa (raw, json)
Hash identifier:          7F0z6UJr8/H2/cMtMpjzKGSbiLPNbMdv6SkjFDtPwxY=
Subject key identifier:   EE:13:A2:C2:69:84:64:77:E1:89:42:BF:31:39:64:22:42:4C:A8:2E
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584950F9649A1341D34632FB2880
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/174e44ab-cac0-3427-8ca2-4837cf5a07fe.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     16509
IP address blocks:        2620:116:800e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:64:9a:13:41:d3:46:32:fb:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=e9633010-04cb-4d6d-96d4-6aba14f712a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:77:ad:8d:77:66:8d:1d:55:e0:a4:1d:ac:
                    fb:f1:03:80:37:68:55:1d:05:52:5e:01:04:7e:3c:
                    48:be:cf:ca:b6:71:ca:9d:c3:65:ad:12:44:1b:ca:
                    7c:5a:e7:19:7d:d4:a7:ef:82:08:b7:b4:9a:fa:1e:
                    ca:df:37:36:f7:eb:d1:53:25:03:c1:1f:4d:14:1e:
                    7d:cf:b0:4f:c5:72:75:62:d6:5f:a9:83:94:2c:6d:
                    29:c5:01:ff:c3:13:6d:8c:f3:d5:28:5e:51:0e:50:
                    e2:44:d2:cc:57:e5:18:9d:76:20:95:99:5e:47:02:
                    19:7e:d3:06:87:d8:46:1b:99:92:11:01:19:e5:77:
                    69:5c:ec:cc:f5:af:cd:76:cb:05:a8:79:3a:17:f2:
                    62:fd:51:b7:d0:ae:4e:fd:13:a2:f7:e9:93:04:d1:
                    b1:34:74:28:be:f4:83:97:07:c2:ce:c6:ce:f3:3b:
                    ec:29:bf:ef:2e:19:6b:fe:4a:35:98:ab:b3:5b:89:
                    86:f7:bd:e3:f5:3e:c3:93:26:9a:8c:57:f8:e9:a1:
                    c2:18:f4:ab:de:4b:34:02:bc:58:1b:64:c5:b7:91:
                    3e:78:05:58:44:bf:87:b1:12:55:dd:84:32:4b:f3:
                    45:ff:79:5f:60:93:d9:37:8e:0f:88:56:55:e2:f2:
                    50:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:13:A2:C2:69:84:64:77:E1:89:42:BF:31:39:64:22:42:4C:A8:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/174e44ab-cac0-3427-8ca2-4837cf5a07fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:1e:0b:25:71:60:0b:c9:a9:96:eb:23:35:9b:a4:78:b6:91:
         fc:fb:df:85:ca:cc:5a:b4:86:c7:e3:b0:4b:6d:d0:cd:97:ba:
         8e:a2:81:ee:19:cd:3b:7f:2c:3d:20:35:80:e2:7f:3f:16:da:
         7b:ce:fa:9c:66:6b:5c:8d:fc:5d:2e:a1:36:40:dd:22:83:cf:
         97:9c:16:ab:80:c0:fb:8a:6d:57:c0:c5:c8:78:e4:11:16:92:
         ad:38:66:b3:ff:65:54:a9:33:5c:3a:0b:3e:af:91:12:76:a4:
         46:51:7f:43:63:f6:7f:36:75:4f:b2:c2:6a:7d:23:d2:a4:50:
         70:14:a8:92:04:77:20:58:6e:93:4c:7b:73:60:77:66:f0:aa:
         ef:a8:c8:af:1c:42:10:01:93:18:4f:57:b2:a7:f1:c5:06:ae:
         e3:22:10:c2:57:bb:22:26:71:25:93:cc:9d:27:13:da:ce:54:
         db:47:d0:1f:c2:20:29:64:ca:22:97:cd:92:70:5d:88:3b:89:
         1b:c8:94:d4:08:f1:3a:17:97:75:ea:b7:73:f7:5d:a8:7e:72:
         fe:83:df:74:f5:e2:5a:cc:8d:cc:d9:42:50:3e:35:79:64:76:
         97:02:6f:3e:c3:c6:6d:ac:2e:72:7d:e8:9e:02:3c:90:d9:08:
         04:42:13:11
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElQ+WSaE0HTRjL7KIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5
Mzc4MB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk
ZTk2MzMwMTAtMDRjYi00ZDZkLTk2ZDQtNmFiYTE0ZjcxMmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWd3rY13Zo0dVeCkHaz78QOAN2hVHQVSXgEE
fjxIvs/KtnHKncNlrRJEG8p8WucZfdSn74IIt7Sa+h7K3zc29+vRUyUDwR9NFB59
z7BPxXJ1YtZfqYOULG0pxQH/wxNtjPPVKF5RDlDiRNLMV+UYnXYglZleRwIZftMG
h9hGG5mSEQEZ5XdpXOzM9a/NdssFqHk6F/Ji/VG30K5O/ROi9+mTBNGxNHQovvSD
lwfCzsbO8zvsKb/vLhlr/ko1mKuzW4mG973j9T7DkyaajFf46aHCGPSr3ks0ArxY
G2TFt5E+eAVYRL+HsRJV3YQyS/NF/3lfYJPZN44PiFZV4vJQtQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO4TosJphGR34YlCvzE5ZCJCTKguMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy
MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMTc0ZTQ0YWItY2FjMC0z
NDI3LThjYTItNDgzN2NmNWEwN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz
MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0
OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi
MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMUeCyVxYAvJqZbrIzWbpHi2kfz734XKzFq0hsfjsEtt0M2Xuo6i
ge4ZzTt/LD0gNYDifz8W2nvO+pxma1yN/F0uoTZA3SKDz5ecFquAwPuKbVfAxch4
5BEWkq04ZrP/ZVSpM1w6Cz6vkRJ2pEZRf0Nj9n82dU+ywmp9I9KkUHAUqJIEdyBY
bpNMe3Ngd2bwqu+oyK8cQhABkxhPV7Kn8cUGruMiEMJXuyImcSWTzJ0nE9rOVNtH
0B/CIClkyiKXzZJwXYg7iRvIlNQI8ToXl3Xqt3P3Xah+cv6D33T14lrMjczZQlA+
NXlkdpcCbz7Dxm2sLnJ96J4CPJDZCARCExE=
-----END CERTIFICATE-----