Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa
File:                     7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa (raw, json)
Hash identifier:          x/USclGhoRChjQxIq3JNmZnZG5CHQNuEJXbAVY1JNbA=
Subject key identifier:   51:48:68:56:B6:CD:3D:F2:E2:D1:FA:51:22:1F:66:70:FE:50:BA:81
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F432858495ABEC449B8042A46D7201488
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     21949
IP address blocks:        2606:880::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:c4:49:b8:04:2a:46:d7:20:14:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=4cc6785d-da2d-40ae-a158-8f27fd7c965f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8b:1b:5f:5d:e6:2b:ef:6e:3d:92:ef:c0:d3:
                    8f:08:24:c3:8b:70:e0:9e:2d:dd:09:40:cd:f7:9e:
                    51:13:a2:69:eb:a1:99:0c:58:f9:b3:98:20:83:99:
                    13:72:11:a2:25:0c:8d:7f:24:1d:c3:bb:a4:ef:08:
                    9a:2e:43:fc:1c:6a:f8:b7:49:53:ef:06:06:81:be:
                    48:d9:60:bb:aa:66:f8:29:3a:31:a6:f5:a5:f1:ad:
                    d6:92:8e:72:49:5d:f0:87:d9:9c:ad:f0:d8:72:4c:
                    36:74:d3:20:88:14:f6:5c:b4:fe:12:ae:7b:cb:e5:
                    d9:7b:f8:18:c3:02:89:ef:d7:28:ca:6e:26:04:db:
                    9c:e8:9e:8c:e1:ec:de:b6:93:6a:74:cd:c1:0d:af:
                    70:73:a6:50:f8:75:67:ad:03:e2:af:d2:97:eb:86:
                    51:71:90:f3:b7:15:ae:56:f4:73:90:3d:78:a9:a9:
                    6f:8f:9a:fa:38:d6:54:3e:46:3e:b7:25:80:74:ee:
                    87:08:7e:07:a3:a1:a5:92:a6:a7:96:09:16:27:f1:
                    93:94:e9:51:72:8a:c3:62:d4:86:f6:1f:df:98:b9:
                    1d:62:44:6f:d1:91:a5:12:98:36:21:1a:5d:a4:9d:
                    1b:0f:70:2c:af:b8:67:44:1b:60:c5:fc:14:c9:1b:
                    0a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:48:68:56:B6:CD:3D:F2:E2:D1:FA:51:22:1F:66:70:FE:50:BA:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:1a:70:ba:4c:f7:8d:cf:d2:41:22:4e:8e:46:6a:b0:3c:5d:
         e8:69:50:c5:c4:32:eb:40:7b:7e:39:b1:57:57:1b:06:55:a7:
         4f:d2:1a:7c:88:9e:d3:5a:b1:50:3d:c4:b1:da:8a:36:15:99:
         ca:7f:6d:80:ed:6d:f8:0e:69:d1:ff:2a:57:05:b7:cc:92:f8:
         2e:7e:54:e5:4b:0d:0f:83:2f:62:e1:a9:95:d3:90:90:39:17:
         46:a8:1e:d4:6d:1a:41:10:69:ce:73:3f:e2:3c:ce:68:a6:15:
         df:61:a9:53:7f:e9:8b:98:a5:8a:d7:22:7c:ce:18:61:ef:61:
         19:fb:18:10:11:15:fa:46:7b:f2:d3:9f:aa:fe:4a:71:e9:30:
         a5:5f:61:4e:de:3a:e7:ba:39:2a:ca:dd:82:d6:99:b5:a2:d1:
         91:6e:68:ad:a2:e8:a0:bc:1e:db:3d:e1:d5:66:a3:0b:f8:13:
         01:db:bb:37:2d:f0:fd:ea:43:3d:7e:0c:45:8b:10:f5:99:58:
         43:06:cf:41:a3:cc:ee:b6:b4:9b:42:ad:2d:4f:89:b5:d9:7c:
         2a:3f:01:21:66:f4:02:81:f4:d0:7e:5f:fb:aa:77:97:95:ae:
         be:14:8b:05:f8:cc:e2:8a:4c:09:8e:7f:08:48:e3:c0:ae:91:
         bd:2d:40:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----