Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3133303a3a2f34342d3434203d3e203130313033.roa
File:                     323630373a373463303a3133303a3a2f34342d3434203d3e203130313033.roa (raw, json)
Hash identifier:          +HGTJZ94LZH8EHm0s67KR8buclIjDjiuAx0hf3mZQfU=
Subject key identifier:   D2:C9:28:D9:1F:0E:BF:DF:C5:95:2D:29:2E:EE:7F:0D:64:8F:6F:02
Certificate issuer:       /CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
Certificate serial:       5C3BC63CA88301870118639E6B583E2AC4531B4C
Authority key identifier: CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3133303a3a2f34342d3434203d3e203130313033.roa
Signing time:             Thu 06 Mar 2025 17:58:53 +0000
ROA not before:           Thu 06 Mar 2025 17:53:53 +0000
ROA not after:            Thu 05 Mar 2026 17:58:53 +0000
asID:                     10103
IP address blocks:        2607:74c0:130::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3b:c6:3c:a8:83:01:87:01:18:63:9e:6b:58:3e:2a:c4:53:1b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
        Validity
            Not Before: Mar  6 17:53:53 2025 GMT
            Not After : Mar  5 17:58:53 2026 GMT
        Subject: CN=D2C928D91F0EBFDFC5952D292EEE7F0D648F6F02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:cb:56:1b:ed:b4:5c:4e:6f:f4:d0:c0:00:
                    6c:f8:91:2e:d1:11:8b:2d:69:64:b2:1e:0c:63:5f:
                    5a:1b:b3:50:4e:a6:db:6f:c8:ff:6a:97:91:5f:67:
                    1b:89:d8:00:2d:fb:2b:fb:2c:bb:01:d4:62:8d:58:
                    e8:6a:a6:cc:95:f5:ec:42:53:79:d9:27:30:de:9a:
                    02:44:9f:e6:a2:f2:e6:f4:82:a5:32:54:b4:f8:dc:
                    59:33:8b:9d:97:88:a2:fb:8d:db:54:89:6d:01:18:
                    6d:f6:06:94:0b:d5:1d:40:02:c1:df:fe:ef:87:15:
                    1f:58:ae:0a:fd:75:24:39:40:13:e7:d0:f0:a9:2b:
                    98:55:b9:7a:62:8c:a9:ac:0e:e0:93:75:65:c6:59:
                    b5:33:0e:d9:8b:6c:62:c5:5d:aa:bd:6c:a8:f9:1f:
                    2f:9d:cf:f3:f6:ad:4d:65:b8:3c:ad:ce:7f:e9:24:
                    83:ea:d9:80:c2:ac:89:b6:21:2b:38:b7:e2:0e:12:
                    fd:1a:8b:85:fe:6b:22:3d:01:2f:8d:3b:4a:ea:80:
                    55:60:dc:9f:29:b8:d2:c6:ef:39:66:c0:03:31:f7:
                    a7:ca:46:d9:32:f4:15:8b:d3:24:c9:07:da:b5:27:
                    9f:d9:71:ee:03:57:8e:43:ea:30:44:53:ba:de:5b:
                    60:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C9:28:D9:1F:0E:BF:DF:C5:95:2D:29:2E:EE:7F:0D:64:8F:6F:02
            X509v3 Authority Key Identifier:
                keyid:CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3133303a3a2f34342d3434203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0:130::/44

    Signature Algorithm: sha256WithRSAEncryption
         b0:1b:24:75:79:dc:f4:d3:d5:0d:8b:33:d2:23:81:84:4f:88:
         16:01:b1:a4:c1:3c:98:7b:b4:5c:7a:6f:28:da:99:83:7a:98:
         22:0b:77:89:f1:b5:9a:2d:b6:83:67:6f:19:e9:78:7d:ea:31:
         66:67:70:ea:d6:f6:47:dd:5c:d6:45:aa:f9:56:85:ac:0c:78:
         2a:f1:3b:9d:fe:ae:93:ab:c8:e8:93:d4:47:a9:40:ed:6e:2f:
         1c:3b:2b:01:c4:0c:05:77:33:a4:42:5f:7a:3a:e4:00:30:03:
         2d:ee:16:58:61:95:11:6f:9b:3f:9e:e3:d7:b1:0e:ea:dc:c6:
         d9:ac:2e:ea:c2:3f:20:78:99:46:73:8b:6b:fa:09:23:37:87:
         21:7f:6d:0b:e5:f4:c5:95:61:a0:05:e4:ef:f6:3d:19:35:1c:
         a9:2d:d3:83:02:d1:23:c9:29:20:a2:d6:10:3e:c5:f7:db:42:
         e5:f7:a2:80:69:cf:8b:d4:91:71:b1:28:96:87:d0:1e:89:48:
         2f:ee:bb:de:e9:27:87:38:df:62:af:9a:b0:9c:ea:ce:3d:c3:
         eb:fe:df:90:68:7b:31:ff:d1:8f:29:1e:d9:83:7a:80:4b:0d:
         76:ec:be:c9:68:c6:db:3d:6b:a1:37:03:f7:1c:8e:2a:93:a6:
         29:9a:56:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----