Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/7bd6da4e-0b36-374c-8030-ea7a3f82707e.roa
File:                     7bd6da4e-0b36-374c-8030-ea7a3f82707e.roa (raw, json)
Hash identifier:          WSRSoYBdAxTa4iqJj92T+l/mMrNjREq1b8CFE/Sh8HA=
Subject key identifier:   A1:DA:8C:70:93:E4:64:BE:3F:FB:7E:99:C2:D0:61:60:04:B4:76:D0
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350E90E21F96EE9154E60300
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/7bd6da4e-0b36-374c-8030-ea7a3f82707e.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:20a2::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:90:e2:1f:96:ee:91:54:e6:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=9c28066d-2c5a-4da9-a72d-8ec2f27a52b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:47:6c:3f:e4:8b:fa:68:f1:4a:b5:7d:fc:
                    7a:fb:2b:12:c7:cd:78:3e:0f:1d:91:06:1f:62:76:
                    9b:f4:b4:2e:61:e0:9d:70:a7:ec:8e:22:2d:8f:dc:
                    62:53:38:80:b8:1b:1c:d5:fe:7a:fd:8b:2a:05:ef:
                    0b:2a:79:a0:ab:be:fb:17:83:c8:bf:ed:fe:94:83:
                    e8:3a:03:55:5f:97:b3:dc:e9:20:16:45:76:f9:24:
                    b1:06:ff:07:97:16:58:d2:ed:21:f0:f7:f8:1a:c2:
                    07:6d:89:cc:3f:14:61:0f:bb:08:cc:82:55:19:f6:
                    dd:88:ac:03:45:96:45:bf:9a:1d:e0:c7:56:cf:1d:
                    7e:c1:fd:9b:6d:d5:c0:b8:e0:d3:f3:b3:74:63:df:
                    33:b7:ad:0b:48:ac:30:bf:d4:e8:12:4f:5c:81:8b:
                    40:72:c0:d5:af:44:da:38:9f:07:68:5d:74:1b:d6:
                    8d:bc:ee:92:0b:6f:55:c9:25:d2:90:f1:4a:c7:83:
                    f6:69:65:6e:5b:6e:de:19:95:b7:cd:5a:a4:dd:97:
                    9a:62:05:0e:a4:00:e5:ec:44:87:03:e6:0f:b8:0b:
                    ea:58:af:cd:bb:7b:74:08:b2:8e:08:29:ac:f7:4b:
                    f8:2e:bc:19:65:b1:42:8b:81:89:7e:e1:0e:d4:b3:
                    99:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DA:8C:70:93:E4:64:BE:3F:FB:7E:99:C2:D0:61:60:04:B4:76:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/7bd6da4e-0b36-374c-8030-ea7a3f82707e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20a2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:de:3b:dd:01:5b:5a:a0:37:2e:ab:e8:e4:e4:90:1e:36:b5:
         c1:de:8c:eb:23:28:f8:17:77:9c:78:c6:5d:f9:a0:e2:43:47:
         50:fe:ba:70:48:94:be:ac:f4:4a:04:61:5a:ae:73:b1:2f:e0:
         24:9a:d9:c1:1d:2b:ce:40:3f:66:bb:80:5c:67:82:ec:75:ff:
         91:5a:b4:36:90:aa:cc:09:77:eb:48:bb:dd:a5:a4:a8:cc:7a:
         4d:e3:28:77:3c:2e:ca:6a:09:1a:f2:f0:68:ea:3b:b4:0d:cf:
         84:7b:ca:02:43:8f:83:ab:c5:e4:bc:f6:b0:30:b7:04:21:61:
         a1:01:63:0d:eb:70:c1:d9:e8:13:53:58:60:c1:71:e7:25:72:
         6a:ab:20:92:d0:4c:b3:89:68:0e:a2:7e:ee:0c:e0:18:e0:16:
         1b:5f:4b:36:7a:17:37:79:6f:8f:5d:ff:76:2b:0f:f9:0a:53:
         74:2b:9a:d8:a8:21:27:e9:51:2e:43:31:11:f9:b0:0a:8e:4d:
         25:48:83:9c:26:91:de:8c:2f:77:a7:a4:05:a0:d8:f4:1b:13:
         d9:d2:69:fc:de:e4:08:f1:bc:cc:9f:a8:48:d1:00:1d:14:b8:
         fa:75:7c:da:e4:1d:7e:85:2a:50:b3:89:e9:48:f9:01:ca:90:
         5c:45:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----