Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/c013796d-198b-32a0-afe4-57bfa2aa193b.roa
File:                     c013796d-198b-32a0-afe4-57bfa2aa193b.roa (raw, json)
Hash identifier:          9kJtjSLMDBL2LSKNTopJjL8U8CpvDR9CswDQ0xFSQgQ=
Subject key identifier:   F3:85:D9:24:39:9F:67:2C:DD:DF:1B:BE:F9:E5:3B:D0:AC:C2:A5:90
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350E8D28938D536FF9336480
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/c013796d-198b-32a0-afe4-57bfa2aa193b.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:2010::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:8d:28:93:8d:53:6f:f9:33:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=c06b7521-385b-464b-9b83-5d6d02a93c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:38:a9:20:e7:72:ad:51:4c:bf:73:10:56:
                    a5:e1:79:b1:6a:00:47:50:d7:dd:d4:fe:4b:ff:8b:
                    70:45:3d:70:c8:a4:b7:e1:58:6a:fe:12:75:26:c7:
                    36:60:08:91:f2:a5:a6:1d:01:75:22:5e:04:f6:62:
                    5d:0d:ca:55:a7:00:c4:13:71:11:c3:62:62:fd:0a:
                    8f:7e:12:06:66:4f:c3:3f:69:33:cb:92:74:23:6f:
                    88:4f:ad:9f:d9:de:fd:b7:2f:92:e6:84:23:38:ab:
                    38:91:cf:77:a2:70:81:90:52:21:9c:59:7f:b1:ce:
                    02:5a:2c:b4:c2:f7:22:4b:89:b3:2e:75:fb:a5:ce:
                    5b:ca:d7:a9:f0:58:2c:cd:f0:46:5d:f4:22:ea:13:
                    a1:b7:89:9f:82:21:67:c6:22:9a:f2:f8:43:70:b2:
                    73:43:b4:6c:6e:a1:42:0a:62:e8:d1:33:80:7a:c7:
                    b3:a0:36:f0:46:52:c4:e3:22:c0:a7:3d:e8:03:85:
                    98:86:31:de:b0:40:42:6a:c0:2c:16:de:67:cd:c7:
                    71:4a:4f:cd:0a:80:87:0d:49:83:f8:dc:13:e3:b8:
                    1d:21:47:e0:1e:6e:9b:4b:e0:98:77:df:ca:8d:01:
                    6f:11:f7:11:52:85:9a:27:0f:10:2b:ac:66:a1:08:
                    2d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:85:D9:24:39:9F:67:2C:DD:DF:1B:BE:F9:E5:3B:D0:AC:C2:A5:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/c013796d-198b-32a0-afe4-57bfa2aa193b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:27:4d:76:05:8b:89:d7:44:c4:02:1a:ed:74:f7:89:86:7c:
         4e:7a:b3:b9:9e:dd:19:6a:2c:37:cb:3a:56:78:8b:60:a2:43:
         d3:78:58:f2:f0:aa:46:a1:4c:ea:33:ad:88:82:a5:4c:2c:1d:
         76:2b:0e:6e:f5:ff:1c:3b:8c:18:0e:d5:4e:f6:7e:44:08:d8:
         ad:7b:61:d8:76:0f:33:91:49:52:bd:7d:8a:c7:b9:4d:67:3c:
         d7:92:f0:81:2a:c7:5d:8b:3f:90:03:aa:10:40:a3:fe:a2:28:
         99:a8:d9:86:e4:d8:5f:cb:56:77:d5:4a:49:76:52:29:74:cf:
         5e:00:1d:56:f2:22:9f:c4:19:21:0f:59:dd:d4:1f:df:90:c7:
         88:61:5d:03:ac:7e:f5:45:17:07:91:d1:4e:c6:b5:2d:c9:db:
         1a:46:c6:e3:c5:81:ef:4d:8e:fe:5b:0c:bd:39:75:d7:a5:9c:
         68:e8:da:41:d9:4f:e8:c0:e1:e1:80:d1:e8:e0:f5:f2:d8:d3:
         90:58:78:4c:aa:32:19:35:2b:cb:82:da:c9:9d:93:f5:68:43:
         f6:1d:7c:90:bb:26:3f:63:11:db:cd:41:f2:7b:7d:24:a4:24:
         d7:50:bf:0f:9e:33:b7:db:9d:b6:49:58:2b:3f:2b:ed:e5:ce:
         d6:5c:b4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----