Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/699733e3-c5a0-3029-8386-1ae847e92a86.roa
File:                     699733e3-c5a0-3029-8386-1ae847e92a86.roa (raw, json)
Hash identifier:          +bivOh5wnTKxI7DvQ/V6pnyy9oHzdKOQzyLnbaTLJTQ=
Subject key identifier:   6B:5D:13:67:B3:84:E8:EC:77:CF:F6:F1:16:CA:3F:6A:6D:A1:68:7D
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F432858497974389467F17CA689F07E20
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/699733e3-c5a0-3029-8386-1ae847e92a86.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     400097
IP address blocks:        2606:3d40:1b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:38:94:67:f1:7c:a6:89:f0:7e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=66935599-3237-4e5d-a02f-224bf7aab380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:df:60:7a:81:74:24:c1:a5:6d:9d:8c:1d:1f:
                    57:25:5b:95:93:48:ea:b2:1d:79:13:25:9d:ae:d2:
                    f9:4b:63:bd:76:42:b1:00:22:3e:b5:d6:84:d0:d2:
                    1c:95:c7:65:a6:16:64:db:b0:cf:97:b4:fd:c0:75:
                    53:e7:04:d4:62:14:16:6d:2e:63:32:bf:b5:0f:89:
                    22:07:17:31:9e:0a:b3:ac:e5:15:60:fa:6d:03:2c:
                    ec:4a:01:a0:c3:ef:53:bf:72:f3:ff:a6:63:8b:1f:
                    99:76:09:a2:4e:63:bc:2b:f0:5e:33:fe:8b:50:57:
                    84:45:b7:87:72:08:79:02:3a:32:46:88:84:33:8a:
                    dc:c7:87:bb:ac:98:50:a1:e3:a6:6d:1f:6e:67:03:
                    8e:33:d2:7b:3d:95:3f:6e:5e:84:3d:65:ee:8d:35:
                    53:c4:1b:86:69:b8:b8:29:64:aa:68:d1:39:1b:e1:
                    e7:0f:19:22:75:df:57:41:92:41:8b:91:d6:c0:1c:
                    ee:25:23:28:cb:7e:5e:0f:41:07:17:49:39:20:96:
                    1e:96:d0:4e:e5:f6:ca:15:ea:b3:7c:50:af:8b:c6:
                    45:73:6f:b6:60:57:61:99:c4:56:ce:64:66:e4:75:
                    14:13:9f:8d:6e:3e:3d:85:e4:7a:ed:4c:6b:6c:a6:
                    5b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5D:13:67:B3:84:E8:EC:77:CF:F6:F1:16:CA:3F:6A:6D:A1:68:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/699733e3-c5a0-3029-8386-1ae847e92a86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:b2:4a:d5:59:41:6c:bb:66:67:13:ca:82:f8:c3:37:6c:05:
         2d:3e:b1:52:7f:f6:fd:80:a6:31:d6:56:58:ab:47:42:78:8c:
         df:15:96:f4:d9:31:21:6e:fa:5a:16:de:09:12:00:d7:48:28:
         8b:d9:4d:17:ac:73:2a:e3:90:ac:06:e7:66:fa:6a:11:63:c3:
         f0:28:c9:70:02:a5:61:ee:fc:d5:ed:5a:aa:13:ad:ae:44:8c:
         6f:88:cd:87:5d:64:47:92:aa:fe:e0:42:e8:f9:45:61:9a:fa:
         91:7a:05:58:95:28:6e:b2:53:b2:84:84:d7:8b:61:f6:ae:92:
         f4:e8:97:cb:4f:5f:44:a6:fb:c9:a9:9c:9a:8a:92:ba:8e:75:
         b3:eb:4b:dc:60:83:78:a0:75:ff:bc:47:18:c7:f1:1b:3b:72:
         ae:93:98:2c:f9:de:d2:19:40:63:62:4f:92:43:27:eb:7e:17:
         16:e5:15:87:2b:e4:12:bf:38:03:a3:a8:87:09:79:6c:63:0b:
         cb:fe:c2:fa:8e:fb:31:45:8a:1c:e3:f1:7d:17:2c:17:d1:74:
         df:68:23:9b:a4:00:15:a3:8d:87:bf:8d:a8:5e:44:80:44:79:
         4b:4b:c1:59:e6:96:f3:bb:74:86:b6:60:cb:e2:73:bf:2f:dd:
         0d:3f:f7:90
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl5dDiUZ/F8ponwfiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy
NDVkMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk
NjY5MzU1OTktMzIzNy00ZTVkLWEwMmYtMjI0YmY3YWFiMzgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod9geoF0JMGlbZ2MHR9XJVuVk0jqsh15EyWd
rtL5S2O9dkKxACI+tdaE0NIclcdlphZk27DPl7T9wHVT5wTUYhQWbS5jMr+1D4ki
BxcxngqzrOUVYPptAyzsSgGgw+9Tv3Lz/6Zjix+ZdgmiTmO8K/BeM/6LUFeERbeH
cgh5AjoyRoiEM4rcx4e7rJhQoeOmbR9uZwOOM9J7PZU/bl6EPWXujTVTxBuGabi4
KWSqaNE5G+HnDxkidd9XQZJBi5HWwBzuJSMoy35eD0EHF0k5IJYeltBO5fbKFeqz
fFCvi8ZFc2+2YFdhmcRWzmRm5HUUE5+Nbj49heR67UxrbKZbrQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGtdE2ezhOjsd8/28RbKP2ptoWh9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi
NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvNjk5NzMzZTMtYzVhMC0z
MDI5LTgzODYtMWFlODQ3ZTkyYTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl
YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi
MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx
MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAb
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABiyStVZQWy7ZmcTyoL4wzdsBS0+sVJ/9v2ApjHWVlirR0J4jN8V
lvTZMSFu+loW3gkSANdIKIvZTRescyrjkKwG52b6ahFjw/AoyXACpWHu/NXtWqoT
ra5EjG+IzYddZEeSqv7gQuj5RWGa+pF6BViVKG6yU7KEhNeLYfaukvTol8tPX0Sm
+8mpnJqKkrqOdbPrS9xgg3igdf+8RxjH8Rs7cq6TmCz53tIZQGNiT5JDJ+t+Fxbl
FYcr5BK/OAOjqIcJeWxjC8v+wvqO+zFFihzj8X0XLBfRdN9oI5ukABWjjYe/jahe
RIBEeUtLwVnmlvO7dIa2YMvic78v3Q0/95A=
-----END CERTIFICATE-----