Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/5bf59422-9c00-3481-861d-059d811cd279.roa
File:                     5bf59422-9c00-3481-861d-059d811cd279.roa (raw, json)
Hash identifier:          LjLB7PsXOpeuuvZ9rRRqjkqkPsvmb7AHA+QTy/iPyeI=
Subject key identifier:   F8:23:68:F8:49:2D:C9:A9:BC:28:DF:2A:CA:C5:70:EC:CA:61:11:29
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350E91B9E2BC2D48072C9F80
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/5bf59422-9c00-3481-861d-059d811cd279.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:20ae::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:91:b9:e2:bc:2d:48:07:2c:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=fb5e179f-eec4-4685-80b2-bd4d0ff68376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:47:cb:db:4e:c3:17:78:af:b4:ec:00:c0:86:
                    a5:e3:b0:a7:5f:0a:31:c7:c0:9c:3e:6a:22:9d:86:
                    f7:27:23:98:41:b9:13:b0:64:f3:39:5a:5e:e9:b5:
                    34:82:45:72:69:66:23:6b:f4:3b:38:25:7a:9c:47:
                    36:93:18:7a:7f:c1:41:40:78:fa:a5:8d:25:5e:e5:
                    69:07:fe:4e:0d:58:df:27:d4:56:27:fa:91:2d:32:
                    b2:95:7e:80:98:13:84:ec:82:44:13:60:1b:65:3c:
                    53:1b:6f:34:8e:3a:df:b5:9a:2c:ce:a1:b7:fa:b9:
                    3a:3e:ef:09:fa:27:1c:f5:05:a3:f0:ee:fc:6b:43:
                    42:44:29:34:c8:32:f6:87:d0:68:05:a0:5c:d3:8c:
                    40:3c:48:bf:15:a6:07:e3:23:7e:f2:92:b8:96:c4:
                    6f:be:8b:0a:c2:3e:55:be:f4:5f:a4:67:c5:19:6e:
                    ae:32:4a:b4:eb:38:1c:e6:82:05:49:08:01:c4:b5:
                    ff:6c:65:f4:ed:25:e3:ba:3b:a8:af:ae:cb:ac:bb:
                    ef:27:81:f1:0b:37:f1:a1:a9:b2:31:5b:fe:9e:3d:
                    ea:f6:14:6a:b9:d4:c4:18:5e:92:e1:37:83:22:f4:
                    14:d9:c2:3f:1c:16:51:90:6a:17:e6:a0:18:b6:ad:
                    c7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:23:68:F8:49:2D:C9:A9:BC:28:DF:2A:CA:C5:70:EC:CA:61:11:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/5bf59422-9c00-3481-861d-059d811cd279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20ae::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:70:4a:16:ca:a1:91:1a:6d:2b:c9:45:e2:7e:3e:e1:ef:25:
         74:24:52:a0:dd:52:d6:1b:8e:77:47:f2:8e:66:47:c4:db:fa:
         8a:a0:89:73:50:60:d9:79:30:1a:a0:48:f9:9d:60:35:7e:33:
         1a:14:9d:c0:91:c0:75:b1:f7:4b:be:19:58:b8:f1:45:68:d1:
         56:ca:e5:0a:a0:cd:63:e9:ee:77:ac:32:90:c7:e6:bc:1e:de:
         e7:6f:d6:6b:1c:41:4c:58:1f:71:3e:ae:5c:f1:90:d9:bb:59:
         7c:80:26:de:5e:b3:94:55:79:f4:1e:94:87:84:04:e4:bb:6c:
         72:03:85:92:cd:1e:2a:3c:b0:56:d4:59:2d:cd:9a:0c:8d:81:
         0b:96:71:07:29:83:cd:f9:96:f9:bf:57:24:5a:13:03:27:b8:
         6a:4b:af:f2:30:4a:cd:e1:e3:a0:32:86:40:a2:e8:d7:09:f1:
         b5:2a:de:5c:82:5d:e1:98:bd:19:44:a7:a2:18:1f:f2:13:a8:
         6e:70:9f:20:cc:a7:51:27:97:21:a6:94:d2:6e:96:bf:69:0a:
         78:40:ed:50:8a:1e:2b:20:20:3b:c2:4c:e6:53:4f:92:79:31:
         01:b3:fc:1d:e5:61:a8:e4:b0:d5:11:60:ca:36:a0:d1:a9:8b:
         30:c1:61:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----