Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/839e2083-c5c2-3bed-adfe-e8e97bea6214.roa
File:                     839e2083-c5c2-3bed-adfe-e8e97bea6214.roa (raw, json)
Hash identifier:          pivOd0AE3ohE1LjKV1zgBznOtpUK7tLBIUIP/LDP37o=
Subject key identifier:   CB:83:AE:A0:9C:CA:D8:CD:1D:18:B3:65:9F:0C:3D:A1:05:A6:33:4B
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285848EC96AE4E5E3ED4CB42DC5080
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/839e2083-c5c2-3bed-adfe-e8e97bea6214.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        2604:ea80:1000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:ae:4e:5e:3e:d4:cb:42:dc:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=33a0fa8d-6d5d-455e-a4af-9924f6b6ba12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:31:64:df:54:bf:d9:14:f0:a1:6a:d4:c6:12:
                    73:f0:f4:db:ae:b5:dd:6b:fb:fa:ac:6e:72:9a:7b:
                    cb:0a:1b:72:31:46:e4:3b:85:6c:90:12:29:55:e5:
                    df:a4:ae:c0:6e:8a:56:f2:78:95:39:f5:de:2c:cc:
                    e2:ca:20:ca:c0:e5:0c:9e:fc:a9:86:98:8c:54:41:
                    03:c9:fd:38:6e:50:57:50:6a:25:48:38:03:68:84:
                    e4:25:cf:73:8a:c4:54:0f:c5:9b:91:fb:7b:7c:b9:
                    b5:21:9a:ec:83:b1:a8:28:36:93:8f:bb:f3:8f:79:
                    1f:cb:45:e7:90:fc:11:b8:e1:12:b9:1c:3e:ef:30:
                    2b:6c:74:ad:f6:d6:01:9d:2e:1f:19:85:01:78:32:
                    3d:2f:fa:62:2f:f0:26:22:1d:c9:8c:90:27:f6:38:
                    b2:f0:f8:04:04:ca:da:a1:5d:cc:b2:42:93:17:0b:
                    06:a0:b0:9e:da:ca:c4:60:78:c5:04:b6:21:37:e0:
                    ee:9a:67:2b:fa:80:eb:00:f3:49:26:b5:83:80:f5:
                    b8:c3:e7:16:53:b8:6f:4e:d5:1f:dc:47:2d:5f:ba:
                    c1:3d:7a:a9:f8:80:f6:99:ee:c9:80:ec:b6:f0:24:
                    98:a6:f9:4d:a6:42:82:1d:93:0b:91:76:cd:0d:bf:
                    24:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:83:AE:A0:9C:CA:D8:CD:1D:18:B3:65:9F:0C:3D:A1:05:A6:33:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/839e2083-c5c2-3bed-adfe-e8e97bea6214.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ea80:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ba:71:a1:24:ab:08:95:e1:03:51:ea:6c:06:e1:39:1c:3c:
         a5:60:2a:5b:1d:76:c2:b0:cf:e8:90:80:7e:0b:5f:4b:9c:60:
         0a:41:e4:c2:bd:aa:9b:06:5d:5f:14:42:52:1e:55:e4:5b:b4:
         6e:a3:d4:32:5a:73:24:d2:5c:cd:9b:04:80:74:a9:45:7e:31:
         1f:53:ee:f1:aa:6a:e8:26:1c:2c:4b:1f:c6:17:fd:c8:44:01:
         0f:55:55:5b:96:24:06:c2:28:bb:1c:50:ce:94:9f:3e:37:f6:
         72:48:e1:4b:18:07:1d:d3:e8:07:3f:8d:53:7e:ed:c3:e9:87:
         7b:ce:e4:af:e7:36:97:be:fe:f4:25:d6:75:6b:ba:8d:16:d4:
         07:70:6c:8d:e8:0a:0b:84:37:61:39:8e:34:9e:21:17:d0:09:
         3b:3f:92:04:46:f5:3d:a0:ba:bc:c7:4d:3d:c1:01:e0:25:59:
         7c:5e:7d:1d:c9:2b:3e:7c:53:82:8e:05:a1:fd:d5:39:11:43:
         23:ad:0a:81:59:29:0b:10:b9:2d:26:45:9f:da:96:22:db:17:
         cb:a3:da:d0:cb:a0:80:78:52:f4:28:2d:f7:9e:b7:cd:3f:c5:
         36:2d:a2:1c:79:eb:74:e0:89:e4:b2:91:90:81:43:42:34:c8:
         96:66:e5:b5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjslq5OXj7Uy0LcUIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
MzNhMGZhOGQtNmQ1ZC00NTVlLWE0YWYtOTkyNGY2YjZiYTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzFk31S/2RTwoWrUxhJz8PTbrrXda/v6rG5y
mnvLChtyMUbkO4VskBIpVeXfpK7AbopW8niVOfXeLMziyiDKwOUMnvyphpiMVEED
yf04blBXUGolSDgDaITkJc9zisRUD8Wbkft7fLm1IZrsg7GoKDaTj7vzj3kfy0Xn
kPwRuOESuRw+7zArbHSt9tYBnS4fGYUBeDI9L/piL/AmIh3JjJAn9jiy8PgEBMra
oV3MskKTFwsGoLCe2srEYHjFBLYhN+Dummcr+oDrAPNJJrWDgPW4w+cWU7hvTtUf
3EctX7rBPXqp+ID2me7JgOy28CSYpvlNpkKCHZMLkXbNDb8k3wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMuDrqCcytjNHRizZZ8MPaEFpjNLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvODM5ZTIwODMtYzVjMi0z
YmVkLWFkZmUtZThlOTdiZWE2MjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTqgBAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAS7pxoSSrCJXhA1HqbAbhORw8pWAqWx12wrDP6JCAfgtfS5xgCkHk
wr2qmwZdXxRCUh5V5Fu0bqPUMlpzJNJczZsEgHSpRX4xH1Pu8apq6CYcLEsfxhf9
yEQBD1VVW5YkBsIouxxQzpSfPjf2ckjhSxgHHdPoBz+NU37tw+mHe87kr+c2l77+
9CXWdWu6jRbUB3BsjegKC4Q3YTmONJ4hF9AJOz+SBEb1PaC6vMdNPcEB4CVZfF59
HckrPnxTgo4Fof3VORFDI60KgVkpCxC5LSZFn9qWItsXy6Pa0MuggHhS9Cgt9563
zT/FNi2iHHnrdOCJ5LKRkIFDQjTIlmbltQ==
-----END CERTIFICATE-----