Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/0e9c5621-a2f6-3823-bb1b-21cd71c0a846.roa
File:                     0e9c5621-a2f6-3823-bb1b-21cd71c0a846.roa (raw, json)
Hash identifier:          oUO4j2lz3arNiT4n3F04TFrWn+9+CIl6KPGcA433u2A=
Subject key identifier:   A5:91:87:F8:71:1D:51:A6:D7:9F:9E:83:D0:72:6D:AE:56:C4:53:01
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350E8FEE2E33460D3503DF80
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/0e9c5621-a2f6-3823-bb1b-21cd71c0a846.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:2035::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:8f:ee:2e:33:46:0d:35:03:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=2575d977-8906-48b6-9372-2fc6aca51484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:35:a7:d2:7b:c0:11:31:fe:a9:0b:9c:bc:08:
                    c2:a6:7e:b4:fb:44:82:c4:b0:c8:fb:1a:29:b9:93:
                    03:e8:f0:fc:49:fa:5f:c4:b0:ed:d7:a8:95:8b:76:
                    a0:b1:a7:1d:e6:77:44:b4:ca:69:12:ad:39:a5:1c:
                    fd:10:b1:b5:08:fe:37:54:5b:92:1c:c6:49:d0:04:
                    d8:ef:d7:36:b1:12:af:19:b6:6d:66:9c:ee:6b:d9:
                    e6:6d:f2:07:60:a6:5f:c9:10:3b:21:18:48:86:e1:
                    9c:70:ff:0b:db:0b:20:5b:16:07:a7:12:15:5e:4a:
                    6a:ed:07:ae:ab:c7:3c:7f:af:61:e2:16:82:80:f8:
                    27:b8:7a:25:95:fe:06:4e:af:1c:c2:e0:23:9e:ec:
                    1a:72:48:bb:a5:db:3e:af:c9:ba:02:d9:92:09:26:
                    82:ff:d2:06:1e:46:f2:bf:3a:a6:d5:06:4d:f0:46:
                    da:c6:d1:41:d5:c9:bb:a1:51:65:91:10:ef:a5:55:
                    95:6c:0d:10:4c:7e:d4:be:91:37:51:a2:20:fe:46:
                    7f:1b:52:4c:80:4f:0c:87:55:dc:a7:e1:db:af:08:
                    5a:b4:bc:ad:69:7f:c6:c2:90:db:a2:e4:7b:96:e7:
                    78:5f:c1:41:dc:f4:f3:74:c1:ed:0c:a9:8b:37:45:
                    ef:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:91:87:F8:71:1D:51:A6:D7:9F:9E:83:D0:72:6D:AE:56:C4:53:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/0e9c5621-a2f6-3823-bb1b-21cd71c0a846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2035::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:db:d8:ac:37:d4:da:8c:e3:8b:22:2a:da:25:5f:e4:dc:fa:
         85:10:be:e0:6e:94:89:bb:6a:27:06:42:11:8d:e6:50:2e:53:
         85:5f:d7:e4:0f:61:4e:14:19:73:f0:aa:cb:10:c0:a0:3f:18:
         f0:c3:0e:4d:d2:8f:30:50:bc:9f:84:79:01:18:e9:5c:d3:ec:
         e2:03:85:bf:35:5a:22:8a:71:15:b8:fe:e8:f8:68:fb:f2:1d:
         26:9a:61:a9:a9:43:15:f4:9e:d1:e3:23:58:60:37:d1:76:8a:
         df:e6:ec:4e:56:49:27:3a:a0:7f:03:c0:05:ed:50:22:16:43:
         5b:2a:8e:69:0a:a5:44:4b:5e:d3:5f:64:12:03:33:4a:5e:c3:
         92:2e:62:ec:4f:41:f6:2d:0f:29:b7:89:29:f1:4b:17:90:48:
         1e:c6:9f:38:ed:20:c6:a8:cb:bd:61:96:76:72:68:70:95:01:
         88:7e:37:d1:65:d3:66:cc:8e:1c:a4:9f:bc:b7:d3:88:37:5e:
         e1:c1:9a:f4:f7:73:a3:4d:c8:96:e4:e5:dd:d1:3a:58:9a:d4:
         ac:64:c8:3e:6a:d9:60:d8:48:1b:1e:ec:28:b0:18:3a:0a:0c:
         54:fb:c4:49:20:3e:0a:fa:81:de:45:3c:5b:28:14:cf:8b:f8:
         5a:f9:70:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----