Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa
File:                     3021d954-9e02-3628-92f3-31f119119e7a.roa (raw, json)
Hash identifier:          I7OFrN6Mru8M4s9suk5UkTTUPTdG3V3RpF+1f758Swc=
Subject key identifier:   4A:DF:DE:A2:87:E5:25:4C:DE:B1:B3:E7:48:22:80:E2:F5:36:89:7C
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285849350EAB73D4D82EBA166E5E40
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2606:7bc0:1081::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:ab:73:d4:d8:2e:ba:16:6e:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=87c28cec-740e-4bbe-9226-e8efe3436976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:80:f1:8b:ca:c0:bf:dd:ef:3a:e6:46:50:
                    f8:f4:0e:68:80:55:17:6b:ed:83:02:00:47:ba:35:
                    0e:4d:52:ad:03:f6:28:d4:97:05:6b:f2:69:8e:fd:
                    47:3d:81:d1:b2:89:3b:d9:e7:7b:50:b3:da:34:4e:
                    21:b3:7b:48:3b:ff:57:d8:a4:80:ea:ce:59:a5:26:
                    4f:13:ca:70:cc:d5:02:a4:85:99:82:f9:23:18:eb:
                    7a:12:68:53:a4:d4:40:72:f0:1a:9e:e6:4c:dd:fc:
                    51:75:c2:ce:96:45:e9:b6:b8:a4:96:e6:a6:86:b0:
                    65:d1:79:cc:34:d7:f0:00:79:33:c6:8d:de:d7:28:
                    22:7f:7e:59:3b:60:46:0e:e0:95:76:f0:67:b4:8a:
                    2f:41:cc:60:df:03:a9:d1:d9:3d:8a:a0:c4:6c:5b:
                    c5:03:be:40:7c:e6:01:40:a4:ad:88:00:99:ee:3c:
                    3d:ca:62:57:2e:65:ac:01:05:d1:88:58:5a:f7:e0:
                    18:d8:02:e8:6c:71:5a:97:f2:70:77:66:7e:57:1a:
                    4e:65:d6:00:2f:26:3d:50:fb:c0:87:56:8f:7b:94:
                    1f:2b:7d:c3:5c:6e:07:81:85:ba:ac:f7:cd:8f:1a:
                    d5:2b:4a:a7:57:dd:07:c2:34:90:3b:ce:d1:39:96:
                    91:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DF:DE:A2:87:E5:25:4C:DE:B1:B3:E7:48:22:80:E2:F5:36:89:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1081::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:93:90:94:19:94:e8:56:8a:49:b3:c5:b7:31:d8:48:cf:38:
         67:a0:7f:f0:d4:f5:5c:0e:97:4d:85:82:4d:e8:22:3e:03:64:
         2d:82:ce:3c:58:10:e1:d1:e1:49:7e:5e:9a:4b:10:6a:cd:c8:
         ee:e2:33:2b:81:26:6c:a4:e4:61:73:5f:ab:42:12:7b:a3:3e:
         74:d5:71:01:10:f5:56:90:4e:05:e5:01:b4:be:9f:bc:14:e3:
         a4:12:21:71:ec:c4:c9:9f:a3:be:b2:54:dc:4e:4f:16:7e:cb:
         ba:c1:47:64:82:41:cc:ba:40:48:8e:99:ed:c3:5c:60:1b:eb:
         f8:cc:92:8d:6b:4d:82:25:85:e3:8c:20:29:7e:3f:3a:c5:fa:
         cc:41:d1:1e:78:83:95:e6:f5:42:09:6c:22:5a:1d:1e:b0:46:
         d7:61:1f:cd:31:02:ef:92:ee:2e:ec:8d:0a:60:88:10:b5:c7:
         14:66:2c:97:5f:34:e7:ea:a8:6e:c0:5f:ea:b1:63:cd:da:9e:
         2a:ca:14:9c:06:fb:b2:1c:c7:f6:bb:64:31:df:f0:69:c3:b9:
         1a:49:55:0e:93:22:95:c9:95:f6:a6:18:20:04:62:61:64:a8:
         23:50:5e:90:a1:5c:34:f4:9a:77:95:f3:10:5a:90:22:88:27:
         c5:ad:c7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----