Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/323630373a326563303a3a2f33322d3438203d3e203430383530.roa
File:                     323630373a326563303a3a2f33322d3438203d3e203430383530.roa (raw, json)
Hash identifier:          6phQFYLpZUUkJeQ6DOLPZog2G1ozIk6AYZ9O6Yr6kuE=
Subject key identifier:   0E:9C:9A:2D:33:2F:6B:65:E0:D8:42:54:7E:21:CE:B3:ED:6F:B7:BA
Certificate issuer:       /CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738
Certificate serial:       24A7CF90F66ABC90EAA9716C8BC00B325ED16B16
Authority key identifier: 54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/323630373a326563303a3a2f33322d3438203d3e203430383530.roa
Signing time:             Thu 22 Aug 2024 20:25:51 +0000
ROA not before:           Thu 22 Aug 2024 20:20:51 +0000
ROA not after:            Thu 21 Aug 2025 20:25:51 +0000
asID:                     40850
IP address blocks:        2607:2ec0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a7:cf:90:f6:6a:bc:90:ea:a9:71:6c:8b:c0:0b:32:5e:d1:6b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738
        Validity
            Not Before: Aug 22 20:20:51 2024 GMT
            Not After : Aug 21 20:25:51 2025 GMT
        Subject: CN=0E9C9A2D332F6B65E0D842547E21CEB3ED6FB7BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:0f:95:d6:45:a8:05:47:4d:19:c3:5a:1c:
                    2c:d3:cb:c4:d8:ea:05:24:76:d0:ea:41:4f:98:d1:
                    f5:ea:c7:e9:3f:bb:2d:20:9a:3a:c5:e1:d2:b3:8d:
                    b6:09:9c:4c:91:f9:85:e4:9c:81:f8:7b:4a:84:62:
                    25:34:25:43:d5:a3:d9:ac:fa:51:d0:58:1d:93:fd:
                    89:74:1a:af:5b:8d:14:b5:62:02:a8:c1:c8:7a:ae:
                    e6:87:f9:89:40:b4:42:01:e8:67:7f:9f:1a:56:00:
                    cd:98:b4:85:4a:9a:28:64:de:7b:9a:16:1f:87:73:
                    0c:71:d3:d6:3e:ef:50:9b:6a:63:65:f4:fa:8d:69:
                    ee:61:a6:d8:bc:51:a9:d0:c7:a8:3a:54:75:62:2f:
                    22:6a:bb:41:e4:b2:db:e2:5c:5e:2e:fe:4f:85:ee:
                    08:d6:44:a8:99:c4:31:6a:80:aa:61:4d:f7:41:ed:
                    1f:51:cd:2a:61:9e:1b:e5:69:4c:7f:34:ef:0d:0f:
                    a5:df:89:46:5d:9c:42:45:27:ba:9f:6e:af:b8:a0:
                    a0:f3:0a:0b:62:43:d3:b6:f7:fb:7d:67:2d:1b:70:
                    a7:ee:f9:3e:b6:30:3d:97:f8:f4:cd:46:ff:59:54:
                    43:f1:11:11:aa:38:04:a2:59:3c:0b:fb:7a:d8:28:
                    1c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9C:9A:2D:33:2F:6B:65:E0:D8:42:54:7E:21:CE:B3:ED:6F:B7:BA
            X509v3 Authority Key Identifier:
                keyid:54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/323630373a326563303a3a2f33322d3438203d3e203430383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:80:b3:e5:04:3b:ae:5f:25:6e:72:4b:f7:01:e0:f7:cb:2b:
         7f:3b:bc:31:8b:38:ee:f3:af:a6:a8:d8:d2:3e:44:41:ad:6a:
         bb:cb:60:11:a9:0e:6a:37:dc:dd:4a:71:45:0a:37:9f:63:c6:
         a0:b9:12:ed:db:8b:93:93:c7:9d:bc:b3:c4:fe:da:44:f9:d5:
         ad:03:76:73:41:cb:fa:86:9b:e3:c9:6a:43:d0:28:fc:b3:cc:
         e1:c1:66:7b:7a:aa:23:0b:e5:0a:c5:a6:22:6d:ec:72:e0:23:
         39:4a:f6:ac:d0:78:da:3b:65:3e:75:9a:6d:14:bf:df:45:64:
         20:a0:cd:e6:e7:7d:13:ac:77:50:d5:17:44:ac:88:2c:bd:60:
         1f:b1:72:0c:00:65:6d:07:30:e2:8d:ce:a1:04:6c:31:af:bd:
         38:21:63:b0:ba:cb:8d:df:67:6c:1c:5d:91:6d:2f:26:f9:b3:
         71:c4:6c:b4:69:82:d8:a9:df:9c:8b:41:fc:60:db:f8:74:01:
         6c:de:bb:dd:f6:e1:6c:4b:ae:fb:5e:c2:3c:1f:f0:ae:b2:a6:
         15:5f:6e:0d:77:87:e8:fd:1f:02:8b:d2:70:d4:0f:8d:35:87:
         94:f7:7b:cf:08:9b:65:52:a9:7e:f0:44:7b:ac:74:4e:e9:3f:
         15:48:82:2e
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIUJKfPkPZqvJDqqXFsi8ALMl7RaxYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMGI3NWViMzQwNzA5Yzg2M2I1ZWUyMTMyODQxZjg2NDRk
ZDI2ZmFkNGEyMDRhZjc3MzgwHhcNMjQwODIyMjAyMDUxWhcNMjUwODIxMjAyNTUx
WjAzMTEwLwYDVQQDEygwRTlDOUEyRDMzMkY2QjY1RTBEODQyNTQ3RTIxQ0VCM0VE
NkZCN0JBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn0PldZFqAVH
TRnDWhws08vE2OoFJHbQ6kFPmNH16sfpP7stIJo6xeHSs422CZxMkfmF5JyB+HtK
hGIlNCVD1aPZrPpR0Fgdk/2JdBqvW40UtWICqMHIeq7mh/mJQLRCAehnf58aVgDN
mLSFSpooZN57mhYfh3MMcdPWPu9Qm2pjZfT6jWnuYabYvFGp0MeoOlR1Yi8iartB
5LLb4lxeLv5Phe4I1kSomcQxaoCqYU33Qe0fUc0qYZ4b5WlMfzTvDQ+l34lGXZxC
RSe6n26vuKCg8woLYkPTtvf7fWctG3Cn7vk+tjA9l/j0zUb/WVRD8RERqjgEolk8
C/t62CgcfQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFA6cmi0zL2tl4NhCVH4hzrPt
b7e6MB8GA1UdIwQYMBaAFFQLU2rBoruP0SAWYrQwSFveT6bQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODllMDJlOGIwMThhYjk1ZDFjZWM3YTQxLzAv
NTQwQjUzNkFDMUEyQkI4RkQxMjAxNjYyQjQzMDQ4NUJERTRGQTZEMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiLzFhNGI2ODM2LTRlMjgtNDM5Yy05ZWEyLTUwNDgyYWExNWI2OC8wYjc1
ZWIzNDA3MDljODYzYjVlZTIxMzI4NDFmODY0NGRkMjZmYWQ0YTIwNGFmNzczOC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg5ZTAyZThiMDE4YWI5
NWQxY2VjN2E0MS8wLzMyMzYzMDM3M2EzMjY1NjMzMDNhM2EyZjMzMzIyZDM0Mzgy
MDNkM2UyMDM0MzAzODM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBy7AMA0GCSqGSIb3DQEBCwUA
A4IBAQCZgLPlBDuuXyVuckv3AeD3yyt/O7wxizju86+mqNjSPkRBrWq7y2ARqQ5q
N9zdSnFFCjefY8aguRLt24uTk8edvLPE/tpE+dWtA3ZzQcv6hpvjyWpD0Cj8s8zh
wWZ7eqojC+UKxaYibexy4CM5Svas0HjaO2U+dZptFL/fRWQgoM3m530TrHdQ1RdE
rIgsvWAfsXIMAGVtBzDijc6hBGwxr704IWOwusuN32dsHF2RbS8m+bNxxGy0aYLY
qd+ci0H8YNv4dAFs3rvd9uFsS677XsI8H/CusqYVX24Nd4fo/R8Ci9Jw1A+NNYeU
93vPCJtlUql+8ER7rHRO6T8VSIIu
-----END CERTIFICATE-----