Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/7933fd8a-a3a1-3f7b-aa5a-a78d1115d50f.roa
File:                     7933fd8a-a3a1-3f7b-aa5a-a78d1115d50f.roa (raw, json)
Hash identifier:          zcq4gL7hcTnSHi3jwRa3YbWIZBIYCi+YpLyycxkzWJM=
Subject key identifier:   D3:06:A1:97:4B:0B:BB:88:59:FA:26:B1:3E:31:69:6D:FA:36:5E:E5
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584944692DEB2CA63A5E868A2240
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/7933fd8a-a3a1-3f7b-aa5a-a78d1115d50f.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        2602:fdeb:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:2d:eb:2c:a6:3a:5e:86:8a:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=d7b02d1b-5e62-42b4-a923-71c943961e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b4:9d:bc:58:53:5f:b4:78:18:a1:55:bd:49:
                    1c:0e:2e:8a:87:13:84:1a:dc:2a:07:8e:b4:30:9d:
                    33:35:17:d1:a7:be:f8:ae:71:a0:45:a5:04:4d:e4:
                    0b:d0:81:9f:c3:39:69:42:21:ed:47:51:5c:d9:33:
                    02:df:48:2f:77:0f:c7:8d:26:f0:dd:04:47:7b:69:
                    c0:65:0e:35:e3:13:66:b8:94:6e:e8:3d:21:3b:39:
                    00:bc:3e:ab:0f:ae:60:e2:2e:8a:8a:d4:37:c9:c3:
                    24:00:d7:28:17:ee:1e:af:3b:60:28:e8:9a:df:b6:
                    75:c4:2a:ee:76:57:dc:56:71:49:be:18:c6:08:2e:
                    19:b9:81:7e:88:d0:c2:db:88:54:df:ea:f8:7c:3f:
                    b6:f5:bb:7b:a9:d8:ce:88:fe:f8:4c:fb:cb:b0:1c:
                    ba:ef:56:6c:27:6a:66:bf:ff:ca:b0:41:57:2b:b1:
                    b4:18:fc:9c:58:ca:ff:37:4f:01:02:1d:37:4a:17:
                    38:a7:6b:98:d7:92:5b:6c:2b:8f:a4:38:03:e5:d0:
                    8c:af:68:15:11:83:3a:91:e2:e4:02:17:c1:9e:b7:
                    1f:00:b8:05:69:74:b3:23:cf:9c:3e:ca:e0:b6:26:
                    aa:f3:85:5c:88:0e:56:5f:39:32:6f:a9:68:99:4d:
                    d8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:06:A1:97:4B:0B:BB:88:59:FA:26:B1:3E:31:69:6D:FA:36:5E:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/7933fd8a-a3a1-3f7b-aa5a-a78d1115d50f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdeb:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:8c:ce:4d:75:71:a8:06:0c:eb:6e:42:00:cc:6e:45:41:29:
         ab:de:e4:25:ac:0a:61:53:5e:8a:46:80:e5:d3:54:d7:a5:24:
         52:e7:ba:3b:06:14:8f:ab:7b:33:02:fc:9e:e0:9d:2e:d7:6e:
         04:d9:9a:72:71:24:c5:ee:24:83:91:b5:12:93:2b:eb:a3:ca:
         33:48:56:d8:04:99:d9:8c:b4:6e:5f:65:d4:eb:89:2d:8c:5b:
         68:21:d1:4c:ba:54:88:24:1a:cd:87:a2:e1:c7:ef:c5:4c:11:
         ff:e1:24:e6:5b:db:c1:b5:e0:e7:e1:bb:7e:9f:8a:67:3a:c5:
         0e:4a:75:14:ce:1e:28:f9:7e:9c:06:97:76:5d:ff:4c:b4:0f:
         18:12:7f:71:10:a8:8a:bc:e6:58:ef:d5:87:46:20:f0:76:f0:
         06:e9:6f:d8:e9:c0:46:41:ed:11:be:01:89:51:5c:16:62:1c:
         88:d8:0a:c5:5c:72:1d:8c:3a:2d:30:b0:eb:4a:d9:ef:b3:5e:
         f5:3e:18:ac:cf:63:59:89:48:1d:77:33:ae:04:57:2c:f3:a7:
         9f:7f:33:bc:fb:9e:8b:97:2c:8d:0c:53:9b:86:c5:fb:59:bd:
         4e:05:e6:96:58:8d:d0:ad:a3:4e:2c:00:64:e1:f6:bf:57:a5:
         20:b4:79:21
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElEaS3rLKY6XoaKIkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ1OTIzOTYtYWMzZC00YTQ4LTk3ZjEtY2FlZDY1NDM2
NTI1MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk
ZDdiMDJkMWItNWU2Mi00MmI0LWE5MjMtNzFjOTQzOTYxZTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLSdvFhTX7R4GKFVvUkcDi6KhxOEGtwqB460
MJ0zNRfRp774rnGgRaUETeQL0IGfwzlpQiHtR1Fc2TMC30gvdw/HjSbw3QRHe2nA
ZQ414xNmuJRu6D0hOzkAvD6rD65g4i6KitQ3ycMkANcoF+4erztgKOia37Z1xCru
dlfcVnFJvhjGCC4ZuYF+iNDC24hU3+r4fD+29bt7qdjOiP74TPvLsBy671ZsJ2pm
v//KsEFXK7G0GPycWMr/N08BAh03Shc4p2uY15JbbCuPpDgD5dCMr2gVEYM6keLk
AhfBnrcfALgFaXSzI8+cPsrgtiaq84VciA5WXzkyb6lomU3YPwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNMGoZdLC7uIWfomsT4xaW36Nl7lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5
MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVkNjU0MzY1MjUvNzkzM2ZkOGEtYTNhMS0z
ZjdiLWFhNWEtYTc4ZDExMTVkNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQ1OTIzOTYtYWMzZC00YTQ4LTk3
ZjEtY2FlZDY1NDM2NTI1LzM0NTkyMzk2LWFjM2QtNGE0OC05N2YxLWNhZWQ2NTQz
NjUyNS5jcmwwHwYDVR0jBBgwFoAU4Pkf4Q9Z7oe8umGKzul0yYPhQUEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVk
NjU0MzY1MjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL96wAF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF6Mzk11cagGDOtuQgDMbkVBKave5CWsCmFTXopGgOXTVNelJFLn
ujsGFI+rezMC/J7gnS7XbgTZmnJxJMXuJIORtRKTK+ujyjNIVtgEmdmMtG5fZdTr
iS2MW2gh0Uy6VIgkGs2HouHH78VMEf/hJOZb28G14Ofhu36fimc6xQ5KdRTOHij5
fpwGl3Zd/0y0DxgSf3EQqIq85ljv1YdGIPB28Abpb9jpwEZB7RG+AYlRXBZiHIjY
CsVcch2MOi0wsOtK2e+zXvU+GKzPY1mJSB13M64EVyzzp59/M7z7nouXLI0MU5uG
xftZvU4F5pZYjdCto04sAGTh9r9XpSC0eSE=
-----END CERTIFICATE-----