Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/5df2f2dc-f00c-33b4-a473-55bf6827f226.roa
File:                     5df2f2dc-f00c-33b4-a473-55bf6827f226.roa (raw, json)
Hash identifier:          Oj/kKZ98fRhqsx9BUtUvXOyHQK7pFfrNkrFQntjCZ1Q=
Subject key identifier:   E7:FF:03:31:4D:90:C4:BE:9C:D1:B9:59:96:C2:A4:1E:C4:14:91:4D
Certificate issuer:       /CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48
Certificate serial:       010D0C9F4328584973DEDCE9BF52A913F89F0880
Authority key identifier: 23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/5df2f2dc-f00c-33b4-a473-55bf6827f226.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     401612
IP address blocks:        2602:fb87::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:dc:e9:bf:52:a9:13:f8:9f:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=bd298875-fbc2-432f-9b6d-f3389f976b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ae:2c:d2:d2:d8:68:8a:b7:86:98:d3:8b:fa:
                    9f:71:e4:c6:50:41:05:54:28:c6:6a:1b:ed:b4:12:
                    20:26:32:39:70:7b:45:82:ad:2d:a3:63:4c:13:28:
                    e7:2c:52:d8:e8:d5:52:88:ad:56:3f:79:1b:b4:4a:
                    1b:14:d1:f6:8f:09:eb:eb:3e:44:6f:f8:9c:29:6e:
                    e9:75:2c:94:e0:09:f4:d6:90:e2:41:b5:6c:6e:f5:
                    7e:25:86:43:0a:d1:99:7d:16:82:d1:bb:8e:30:36:
                    96:38:1d:cd:67:92:11:49:7a:f0:a7:59:6c:6c:bd:
                    8e:02:2e:cc:bf:e2:d7:87:a6:13:a3:ff:94:44:d5:
                    e9:22:11:de:69:4e:4e:d4:01:96:e7:54:46:2e:e6:
                    46:f4:68:56:52:ad:d9:56:2c:8f:a1:c5:76:3f:9a:
                    e8:0b:c4:39:e3:cb:62:74:14:fe:b3:80:c8:89:bf:
                    74:d8:5f:33:e0:96:1a:9f:fe:16:e5:21:9d:6b:ae:
                    22:57:6c:28:49:0f:a3:dc:90:69:fd:9a:4a:92:fd:
                    9b:c8:73:39:89:11:3e:df:e1:0b:63:cd:b2:c9:b3:
                    30:65:9b:d6:16:b3:0b:9c:53:c6:8a:c4:8b:e7:7b:
                    e1:ca:40:77:9e:a7:1f:f9:61:0c:08:ef:d0:0f:c9:
                    3a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FF:03:31:4D:90:C4:BE:9C:D1:B9:59:96:C2:A4:1E:C4:14:91:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/5df2f2dc-f00c-33b4-a473-55bf6827f226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.crl

            X509v3 Authority Key Identifier:
                keyid:23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb87::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:40:14:9c:5a:d2:e6:10:7d:f2:32:df:ac:15:5e:b2:46:19:
         eb:a2:9d:00:07:7d:16:ce:18:78:3c:8b:a9:eb:71:8e:ca:33:
         a4:42:55:3e:97:db:b0:ef:d9:f3:27:3b:b7:3c:5a:64:03:5d:
         1d:c7:7f:58:b8:61:90:30:16:4d:a5:1b:e5:54:c4:3d:7f:13:
         c9:4c:42:94:19:77:80:85:eb:d2:07:01:0e:14:bd:3c:f2:d6:
         e8:09:d6:92:a7:f2:44:b1:e8:86:f7:43:02:ec:72:e4:fc:ef:
         fa:08:75:52:dc:b4:c6:eb:c8:d2:4e:d1:31:3b:3a:d3:8b:2f:
         8e:e8:79:7e:ae:15:c2:7b:b6:a9:19:7d:69:cc:59:5d:63:30:
         45:d2:aa:f2:71:9a:66:99:03:c4:e9:7a:c0:93:58:68:16:18:
         cd:3c:cc:05:6a:8a:cf:bf:9c:c5:9a:66:29:14:92:91:d5:66:
         95:d0:fc:bd:74:46:58:ac:17:74:08:45:92:4c:55:ee:46:68:
         a1:db:47:93:85:d0:a7:69:57:21:8d:c4:79:f9:1c:32:98:3f:
         e1:94:38:11:19:e6:22:77:98:e9:c4:ba:06:c9:87:54:bb:a6:
         ca:2b:f2:50:48:19:ea:53:a3:da:fc:e1:ab:08:8c:7e:1d:2e:
         58:88:b9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----