Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/76ce52ab-20d6-3f14-abc2-59dc38ea13dd.roa
File:                     76ce52ab-20d6-3f14-abc2-59dc38ea13dd.roa (raw, json)
Hash identifier:          FsGgPjHYwsVDBlr15dfSV7P3xk2OgCQxjn4+XUEPU0A=
Subject key identifier:   18:41:08:0B:48:02:D9:2C:EF:1F:4F:36:7C:D7:95:96:3C:B8:15:5E
Certificate issuer:       /CN=1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd
Certificate serial:       010D0C9F43285846F5F5904D2EFF9B323108E640
Authority key identifier: 2D:D0:17:61:94:A0:D6:A1:48:A1:96:00:47:6D:B4:3F:9E:A7:B6:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/76ce52ab-20d6-3f14-abc2-59dc38ea13dd.roa
Signing time:             Thu 22 Aug 2024 13:00:40 +0000
ROA not before:           Thu 22 Aug 2024 13:00:40 +0000
ROA not after:            Wed 20 Nov 2024 14:00:40 +0000
asID:                     16509
IP address blocks:        2620:bb:a000:1000::/56 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f5:f5:90:4d:2e:ff:9b:32:31:08:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd
        Validity
            Not Before: Aug 22 13:00:40 2024 GMT
            Not After : Nov 20 14:00:40 2024 GMT
        Subject: CN=be2a9ee9-3019-4433-9688-6c3fd16a6c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:3e:bd:6f:35:21:85:cd:30:f3:ce:31:7b:
                    1b:e7:8d:e4:fa:00:1a:5f:c3:e3:00:7a:84:b8:db:
                    97:74:7e:0d:8c:7d:ce:99:2d:ed:57:c0:45:27:49:
                    1b:dc:7a:75:59:6d:2a:36:89:a7:77:03:a7:d4:98:
                    c9:f0:11:fa:d0:59:d9:10:89:1c:74:58:4b:7c:4c:
                    bf:28:9a:78:a5:14:f2:e6:90:9b:2e:63:af:c8:21:
                    f7:2e:8b:3f:e5:31:2e:93:f1:46:84:f8:93:0f:e3:
                    8c:a0:ac:9b:92:06:c5:a7:00:73:55:af:8a:07:aa:
                    f1:86:59:ef:63:48:19:e6:de:9c:32:61:13:e2:7a:
                    85:f6:1e:18:08:f7:1f:94:fe:41:f8:8e:44:3e:0d:
                    61:19:cd:ef:b3:03:1c:80:41:60:31:ba:95:24:9f:
                    3e:42:aa:b5:9c:67:b3:48:09:75:eb:4d:7d:31:12:
                    3c:8f:26:be:00:da:f9:04:a5:80:99:a0:7f:0f:f3:
                    80:46:3e:55:a0:27:78:d7:cc:9a:47:eb:fc:26:9c:
                    25:a2:34:6e:d6:4c:bd:b2:8f:3e:87:29:16:54:dc:
                    ff:37:c8:c3:3b:f8:35:07:38:1c:f5:9e:5a:2e:8e:
                    64:71:e8:8c:77:00:f0:33:eb:ab:dc:21:4c:97:78:
                    27:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:41:08:0B:48:02:D9:2C:EF:1F:4F:36:7C:D7:95:96:3C:B8:15:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/76ce52ab-20d6-3f14-abc2-59dc38ea13dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D0:17:61:94:A0:D6:A1:48:A1:96:00:47:6D:B4:3F:9E:A7:B6:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:bb:a000:1000::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:25:81:97:41:dc:43:fb:fa:13:6b:7d:2a:5b:3e:93:15:0d:
         9b:8a:b5:8a:4a:66:2a:f8:e3:e4:c9:cc:1f:71:63:4a:7d:7e:
         48:82:c3:ed:cc:35:e3:ee:ec:08:49:c6:56:08:85:03:e8:fb:
         b9:57:73:f4:37:bb:c6:f5:89:33:61:13:09:13:87:e3:74:a9:
         35:3b:dd:6c:8d:7f:96:48:30:e7:4f:0c:6b:9e:a2:a6:42:58:
         87:6f:81:08:76:b3:3b:80:5c:a8:36:d0:1b:e3:3c:2c:b3:a1:
         d9:6e:28:b9:00:b3:80:93:28:ac:b8:03:ed:af:76:8e:26:da:
         20:7d:2b:23:4b:d6:91:f3:45:29:58:e0:a1:3f:48:40:8a:bf:
         9a:04:40:34:87:1f:85:15:76:a5:a3:f4:c9:9b:79:be:17:10:
         e5:55:80:7b:a0:bc:25:0e:78:4c:b0:0d:8e:09:a5:0c:c7:1a:
         9e:f9:66:60:02:54:77:9d:43:8c:9a:85:2b:15:39:a1:1a:a5:
         02:ec:74:c2:98:84:ec:12:d5:72:ec:8c:bc:62:49:e4:a1:b5:
         73:91:5f:5f:66:57:5a:9d:91:76:aa:d3:2b:53:58:d9:09:b2:
         08:4c:c4:27:5e:d4:8c:3e:bd:1d:ee:81:12:ee:c7:c4:fb:69:
         1b:61:8d:28
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEb19ZBNLv+bMjEI5kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWYwMjQyZDktYTljMi00OGNhLWE2OGMtNWQyYzE1M2Ux
ZmJkMB4XDTI0MDgyMjEzMDA0MFoXDTI0MTEyMDE0MDA0MFowLzEtMCsGA1UEAxMk
YmUyYTllZTktMzAxOS00NDMzLTk2ODgtNmMzZmQxNmE2Yzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBE+vW81IYXNMPPOMXsb543k+gAaX8PjAHqE
uNuXdH4NjH3OmS3tV8BFJ0kb3Hp1WW0qNomndwOn1JjJ8BH60FnZEIkcdFhLfEy/
KJp4pRTy5pCbLmOvyCH3Los/5TEuk/FGhPiTD+OMoKybkgbFpwBzVa+KB6rxhlnv
Y0gZ5t6cMmET4nqF9h4YCPcflP5B+I5EPg1hGc3vswMcgEFgMbqVJJ8+Qqq1nGez
SAl16019MRI8jya+ANr5BKWAmaB/D/OARj5VoCd418yaR+v8JpwlojRu1ky9so8+
hykWVNz/N8jDO/g1Bzgc9Z5aLo5kceiMdwDwM+ur3CFMl3gndQIDAQABo4IDWTCC
A1UwHQYDVR0OBBYEFBhBCAtIAtks7x9PNnzXlZY8uBVeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZjAy
NDJkOS1hOWMyLTQ4Y2EtYTY4Yy01ZDJjMTUzZTFmYmQvNzZjZTUyYWItMjBkNi0z
ZjE0LWFiYzItNTlkYzM4ZWExM2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWYwMjQyZDktYTljMi00OGNhLWE2
OGMtNWQyYzE1M2UxZmJkLzFmMDI0MmQ5LWE5YzItNDhjYS1hNjhjLTVkMmMxNTNl
MWZiZC5jcmwwHwYDVR0jBBgwFoAULdAXYZSg1qFIoZYAR220P56ntk0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZjAyNDJkOS1hOWMyLTQ4Y2EtYTY4Yy01ZDJj
MTUzZTFmYmQuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAJiAAu6AA
EDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQCOJYGXQdxD+/oTa30qWz6TFQ2birWKSmYq+OPkycwfcWNKfX5I
gsPtzDXj7uwIScZWCIUD6Pu5V3P0N7vG9YkzYRMJE4fjdKk1O91sjX+WSDDnTwxr
nqKmQliHb4EIdrM7gFyoNtAb4zwss6HZbii5ALOAkyisuAPtr3aOJtogfSsjS9aR
80UpWOChP0hAir+aBEA0hx+FFXalo/TJm3m+FxDlVYB7oLwlDnhMsA2OCaUMxxqe
+WZgAlR3nUOMmoUrFTmhGqUC7HTCmITsEtVy7Iy8YknkobVzkV9fZldanZF2qtMr
U1jZCbIITMQnXtSMPr0d7oES7sfE+2kbYY0o
-----END CERTIFICATE-----