Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efc1f38d-4169-3ecc-a893-762a98b0221f.roa
File:                     efc1f38d-4169-3ecc-a893-762a98b0221f.roa (raw, json)
Hash identifier:          +9y0d7L3qe9yw1rF+LkXj9fu9zBxKAI3vboBzOM4HZo=
Subject key identifier:   7E:81:AF:7D:6D:02:72:4B:77:EF:D4:DC:D7:FC:6C:BA:A9:1B:9B:46
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA698D9F3F5A7E6E7667900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efc1f38d-4169-3ecc-a893-762a98b0221f.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        2601:446:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:98:d9:f3:f5:a7:e6:e7:66:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=e4b90c42-4424-486b-b994-51ea61d5a321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8a:e1:28:1f:16:68:29:2f:f9:f4:f5:98:13:
                    9b:ea:48:13:6e:04:d9:3c:84:a3:60:f5:23:84:9d:
                    c4:31:fe:63:ce:76:9c:58:ad:5b:10:13:c2:fd:ca:
                    1f:13:da:97:2f:09:84:62:2d:86:0f:05:b9:d1:b9:
                    30:f2:2b:1f:e5:fa:31:35:e5:e6:a6:65:c9:c1:1f:
                    83:51:5f:b8:ae:9d:21:72:3c:0d:f7:af:91:16:17:
                    6d:76:b6:09:ce:89:0b:94:14:36:77:1f:6b:da:a2:
                    3f:ad:fd:49:88:61:02:a5:d8:42:63:bb:08:81:0c:
                    3a:d8:9b:88:08:66:a6:99:a7:b3:5c:aa:26:24:39:
                    5c:53:8e:5c:f8:6c:55:aa:41:75:76:98:0c:75:1b:
                    b1:a2:21:c7:6f:e4:79:94:3b:c9:bc:3b:02:ce:98:
                    ce:bf:49:94:4f:2d:40:eb:fe:51:93:32:82:94:03:
                    e1:0e:55:bf:c5:8c:54:a8:9a:08:04:72:90:0d:2e:
                    28:8c:9b:48:66:27:c7:8f:32:a9:3f:10:98:4e:97:
                    8a:57:ec:d2:c4:f9:ef:38:b7:47:b4:71:01:39:fd:
                    b5:59:9e:5c:c4:ae:86:4b:5f:e0:7b:b6:cf:90:24:
                    4f:51:e2:90:e1:9c:f5:ba:03:61:62:fc:e9:7b:73:
                    aa:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:81:AF:7D:6D:02:72:4B:77:EF:D4:DC:D7:FC:6C:BA:A9:1B:9B:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efc1f38d-4169-3ecc-a893-762a98b0221f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:446:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:2f:c5:10:a7:29:63:2f:26:1f:e5:d6:1e:ee:6f:f7:85:3b:
         6c:71:53:fe:f3:cb:6c:02:c8:55:de:9f:fa:a5:b7:a4:5b:9d:
         76:5f:66:eb:5d:86:ee:22:2d:89:31:44:3d:4c:b3:44:4d:bc:
         78:cf:c0:55:8d:08:28:7e:41:9b:e3:c1:dd:fb:4c:5d:6e:b0:
         e1:ae:ef:4e:2b:84:14:b9:af:d0:7b:c5:8d:ac:f1:a1:94:44:
         c5:9c:37:43:7a:18:0a:fc:28:3c:fd:06:68:a9:cc:52:c4:e1:
         e8:69:88:ab:9f:46:97:ae:99:d2:f1:88:8f:88:77:74:2a:ee:
         da:4b:ac:be:91:7b:5e:39:75:61:9a:57:d9:49:ca:03:9b:fc:
         fb:09:1b:4a:5b:cb:5f:2b:10:f2:2c:94:07:08:45:8e:5c:9b:
         12:a6:5c:33:0e:c1:2e:96:12:61:f1:99:af:82:e0:b3:c2:e9:
         84:c6:4a:ac:82:44:b6:58:0d:63:5a:cc:c1:35:3c:bf:b0:af:
         4d:78:71:34:44:db:37:c0:8d:79:d3:2a:f6:f1:ee:34:f0:f0:
         44:62:b0:60:74:48:bf:46:22:0a:50:38:93:22:0e:96:99:46:
         c2:3e:69:ce:e3:e8:6c:c5:0f:8d:4d:4b:43:de:51:d3:59:ff:
         c9:27:9d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----