Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/e87f877b-6f56-3dad-bd7c-cacd9045cfbf.roa
File:                     e87f877b-6f56-3dad-bd7c-cacd9045cfbf.roa (raw, json)
Hash identifier:          loTVYpN9YH8yJtAsSn9QsVv+JKt1msZQpNTN1AGzHAU=
Subject key identifier:   5D:F8:F2:7D:95:3A:B0:BC:E0:E7:CE:D6:CE:B3:F4:C3:E8:60:18:78
Certificate issuer:       /CN=47c6d301-f2b8-4ca1-a0ee-de814409c55f
Certificate serial:       010D0C9F4328584930DE72DA7E0DA411C44BED80
Authority key identifier: B8:9A:36:FC:E5:12:9A:4A:E1:0A:DC:00:86:2C:AD:D5:DC:FF:6D:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/e87f877b-6f56-3dad-bd7c-cacd9045cfbf.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     394195
IP address blocks:        2606:b640::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:72:da:7e:0d:a4:11:c4:4b:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c6d301-f2b8-4ca1-a0ee-de814409c55f
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=bf7211b9-6ce6-4ca9-a00b-a73881e108f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bc:8b:21:c3:cc:85:76:ef:59:e6:4d:dc:b8:
                    3e:3c:20:b9:75:54:c0:f2:65:ba:ae:c7:01:3e:c2:
                    01:a0:6d:f0:3a:24:ea:8b:41:01:86:1b:91:52:ef:
                    4c:bf:48:12:d5:1c:0d:d2:9a:8f:f8:c9:c2:2f:35:
                    cb:1c:40:d6:82:48:83:29:b8:78:a4:7b:fb:e6:1b:
                    44:5a:56:43:a1:b9:18:5b:3e:e0:ea:29:53:45:44:
                    b9:28:96:f4:08:de:d4:71:62:e1:52:ec:ff:f4:74:
                    c9:f2:a2:9d:a1:21:14:6a:54:01:c4:b3:32:a3:c2:
                    f3:75:95:f0:f4:fb:54:20:c7:a0:18:d6:d0:c0:55:
                    19:73:f4:dc:97:c7:87:d6:d0:1e:6a:1e:c1:28:09:
                    56:4d:4b:b3:7d:6e:da:bb:ed:93:3a:e9:9a:3c:3f:
                    b0:53:a6:fd:e5:bd:95:03:a0:f3:4d:44:72:c7:62:
                    94:43:87:9b:91:64:c1:54:ec:d2:f4:fa:dd:86:09:
                    f6:22:90:f0:17:e1:67:0b:35:93:7a:dc:08:b3:2c:
                    07:4e:a7:f5:34:77:e1:cb:fb:c9:e1:fa:03:23:d9:
                    27:9e:8a:33:18:eb:cd:6e:a3:62:48:37:ce:ec:9f:
                    2d:59:7d:7d:a6:5e:30:09:b6:bf:00:73:9f:45:98:
                    f6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F8:F2:7D:95:3A:B0:BC:E0:E7:CE:D6:CE:B3:F4:C3:E8:60:18:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/e87f877b-6f56-3dad-bd7c-cacd9045cfbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/47c6d301-f2b8-4ca1-a0ee-de814409c55f.crl

            X509v3 Authority Key Identifier:
                keyid:B8:9A:36:FC:E5:12:9A:4A:E1:0A:DC:00:86:2C:AD:D5:DC:FF:6D:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:98:12:d8:7b:ab:f5:43:c1:1d:5d:56:5d:e8:2d:c0:b8:3e:
         2c:9a:37:3b:ef:a3:39:dd:d7:6d:69:5a:a9:f0:55:10:f2:57:
         3c:04:a7:5c:e7:f5:9e:c5:8d:83:76:16:c0:f5:2c:84:6b:a3:
         4d:72:23:46:66:f1:6a:f6:31:99:bb:6e:08:19:36:09:2b:04:
         29:f4:48:d9:5b:df:13:5d:68:3a:3f:2d:9c:a1:cb:4b:a1:84:
         c3:be:c1:21:65:cc:69:01:9d:6b:96:b2:f1:08:7e:14:13:e9:
         68:b3:58:2e:02:d5:bc:46:44:41:81:61:72:41:20:19:9e:c5:
         7f:34:35:c3:2f:c2:82:ab:15:d0:97:b1:cd:03:c7:56:3b:d1:
         e4:00:bd:b1:95:23:2f:30:3a:9a:6f:b1:22:b5:a3:51:49:dc:
         98:55:4c:91:6b:38:56:b0:88:9d:41:a5:da:2e:af:7b:8c:c0:
         bd:00:9c:d9:07:76:a4:ba:14:99:68:30:52:1a:f8:6d:26:f5:
         d0:ba:32:39:af:e0:3a:ad:33:03:8b:8e:83:ad:21:f1:a4:f1:
         37:04:24:21:a2:c8:9a:fc:cb:91:12:90:6c:49:0d:78:28:e0:
         f7:4e:75:22:c5:0b:45:b8:bb:28:59:4f:8d:b4:22:71:b1:0c:
         ab:da:e3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----