Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/206a6c78-95a4-3e58-8974-0fb73c0c5bf1.roa
File:                     206a6c78-95a4-3e58-8974-0fb73c0c5bf1.roa (raw, json)
Hash identifier:          sCQXMyAu+P3TlDgm92M0nL3CoNs0+yl77CQ36Sm3jVM=
Subject key identifier:   6A:82:6B:F4:35:29:C6:01:0E:3C:8E:35:39:A8:1B:25:7A:0B:0E:F0
Certificate issuer:       /CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
Certificate serial:       010D0C9F4328584944692B261FA4B9B577255D80
Authority key identifier: 54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/206a6c78-95a4-3e58-8974-0fb73c0c5bf1.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     19281
IP address blocks:        2602:807:e000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:2b:26:1f:a4:b9:b5:77:25:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=a7fc5804-6ec2-472e-987b-c311f6b52c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a4:88:96:d9:0e:f2:8c:d6:3f:a5:fe:d4:63:
                    e3:6a:be:3f:89:6a:8f:0c:94:8b:a6:c2:65:64:eb:
                    d7:d2:09:68:65:7a:f7:e0:37:98:27:cf:a9:e7:4e:
                    59:56:d9:60:eb:a6:f3:34:0a:d2:64:82:c8:52:c9:
                    68:49:70:74:ae:33:ea:6f:01:62:25:06:4d:32:c1:
                    a0:44:7a:e1:ba:f7:4e:c9:e2:7c:43:98:c0:fe:96:
                    b3:42:c1:54:99:b0:12:aa:6c:76:31:96:f0:b6:f2:
                    ec:9f:31:b6:4a:4d:6f:e6:40:22:b1:f0:8b:64:df:
                    cf:f2:be:f8:f0:7f:07:78:53:30:81:14:31:c0:97:
                    5d:91:e9:0a:96:76:e7:aa:fd:b2:13:74:21:86:f0:
                    0e:4e:44:37:74:f5:eb:62:c8:98:46:c6:c6:6d:01:
                    46:a9:1f:13:b2:8d:d4:bf:19:f3:3b:75:dc:08:22:
                    80:3e:71:6f:82:26:1e:9c:04:ad:26:ce:dd:6f:70:
                    9d:b1:9d:6f:f4:25:a0:de:e5:24:6e:3f:5c:fc:68:
                    d0:b6:95:e8:fd:1f:be:a8:a9:08:d8:5c:fa:d9:7b:
                    10:56:54:72:11:7e:3b:db:e9:f6:25:d0:2f:ff:f0:
                    85:8b:ea:41:2c:7e:b3:09:4c:db:34:61:a3:3e:0d:
                    31:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:82:6B:F4:35:29:C6:01:0E:3C:8E:35:39:A8:1B:25:7A:0B:0E:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/206a6c78-95a4-3e58-8974-0fb73c0c5bf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl

            X509v3 Authority Key Identifier:
                keyid:54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:807:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:a6:cd:a4:7b:34:1e:4c:2c:45:a7:10:0d:a0:7a:7c:f2:59:
         bf:0e:00:7a:58:1e:13:0b:76:f7:7b:5b:d8:97:a0:fc:76:1d:
         87:34:b0:91:4d:91:ea:d4:f8:e2:88:b6:bf:c2:0c:9c:f3:44:
         c4:63:d7:66:9d:6a:a5:fc:b8:4e:18:40:45:61:1a:b6:67:f5:
         d3:b2:03:d3:5f:20:7e:e5:db:85:18:17:8c:66:28:7e:a8:dc:
         dc:a0:66:2d:60:8b:6a:8a:a9:1f:bd:51:27:9f:22:99:a9:47:
         b6:91:05:09:ac:17:85:67:c9:c8:00:b3:0d:a7:ca:19:c4:a9:
         e0:5c:c0:19:5e:80:43:1d:b0:49:66:b0:b5:2d:be:7c:17:7e:
         61:37:22:4a:bd:22:ac:e8:2b:02:f9:71:3e:71:da:37:7c:f4:
         0c:84:94:c6:24:33:d2:de:be:ec:a0:cf:8d:31:b9:15:da:0d:
         96:d3:98:f0:97:70:d4:b5:c1:14:e0:2a:4e:ca:6f:83:59:38:
         48:71:00:09:19:1d:93:bd:66:fc:5b:6c:1e:36:ec:2b:39:91:
         fb:0d:6e:10:f6:a8:2d:1a:4b:bd:2d:bd:f4:37:34:70:8a:32:
         4a:89:15:d2:5b:06:63:95:19:ae:95:b8:5a:61:03:5a:07:12:
         3f:8d:12:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----