Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/244878e0-1aaa-3f0d-ae99-b7a9d9c41963.roa
File:                     244878e0-1aaa-3f0d-ae99-b7a9d9c41963.roa (raw, json)
Hash identifier:          y73eNfCzp2uEyX9L1WqTd3WA5eH30iyKc/Frc4woNFQ=
Subject key identifier:   28:0F:67:E0:1C:E7:9C:FE:BA:E7:8F:78:C8:D9:31:90:E7:E2:E9:0A
Certificate issuer:       /CN=7e61fabb-95c6-4ab3-a1ec-b077e850f010
Certificate serial:       010D0C9F432858494039479B5685C3686611C080
Authority key identifier: E8:97:9D:55:E3:53:AB:EF:00:F2:13:00:A9:2D:D2:DA:F3:14:93:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/244878e0-1aaa-3f0d-ae99-b7a9d9c41963.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     1638
IP address blocks:        2620:114:5000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:47:9b:56:85:c3:68:66:11:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e61fabb-95c6-4ab3-a1ec-b077e850f010
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=811db621-b50b-4e6d-83bc-78d85bcb8c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:29:4f:24:1d:e0:07:07:63:b5:6d:f1:5c:
                    69:09:df:43:1b:2c:dd:06:80:56:13:c2:7d:a1:8a:
                    c0:c4:48:71:a9:90:6b:0b:b1:61:14:fa:a6:da:2a:
                    61:9e:f1:c0:f4:9b:8f:f3:10:fd:39:3b:a2:f5:68:
                    38:de:11:24:19:15:c3:80:86:2a:eb:6b:7a:5f:f5:
                    7d:9a:41:01:6f:a8:cf:64:7e:ad:07:3d:58:b5:f5:
                    73:58:ed:6e:a4:8b:58:44:79:e0:a8:ed:fa:a2:7c:
                    26:d7:88:3e:f0:6a:87:ac:2d:93:47:0a:b5:5d:93:
                    db:1d:54:17:0e:2d:d5:6c:47:a1:57:43:73:06:01:
                    cd:6a:da:16:1e:45:05:73:94:78:69:fb:b9:df:32:
                    7d:77:23:9a:aa:35:5f:3b:75:30:56:e0:5d:97:25:
                    f8:87:de:ce:8a:8a:b4:05:ab:49:8d:58:3c:c5:2a:
                    9c:96:72:6c:0f:60:d8:a1:0a:47:58:ac:2b:07:d3:
                    8f:f7:f9:b3:1d:1f:9e:d2:fa:f3:b4:12:a4:c0:a2:
                    f6:b4:82:ea:3c:24:d7:72:21:85:30:f7:0a:2f:78:
                    b5:e2:9a:fc:53:07:0e:3d:a5:2b:40:9c:3d:d2:6a:
                    42:51:5a:00:aa:17:2f:d5:c0:6b:6b:40:37:83:f4:
                    22:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0F:67:E0:1C:E7:9C:FE:BA:E7:8F:78:C8:D9:31:90:E7:E2:E9:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/244878e0-1aaa-3f0d-ae99-b7a9d9c41963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/7e61fabb-95c6-4ab3-a1ec-b077e850f010.crl

            X509v3 Authority Key Identifier:
                keyid:E8:97:9D:55:E3:53:AB:EF:00:F2:13:00:A9:2D:D2:DA:F3:14:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:114:5000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:72:b1:a8:3c:84:a0:25:7a:a8:ea:bf:a5:50:63:82:64:bc:
         1e:d2:11:38:ec:f3:7e:83:11:51:9b:da:64:51:f7:f2:80:13:
         bb:8a:bc:a7:7a:4b:d5:30:60:1b:f0:57:c8:e2:0a:a2:c2:b9:
         94:d2:d8:3a:29:65:21:29:94:2f:8b:68:10:9d:79:c2:1d:9b:
         07:ac:0f:8b:bf:4d:e1:fb:d9:ac:e7:4a:ce:18:67:29:f0:e3:
         f8:a4:87:14:7f:1b:53:0e:5f:a6:bf:bd:7b:fa:05:9c:58:84:
         4a:4a:c7:eb:5b:80:29:27:1f:22:95:99:bd:45:d0:62:e3:41:
         37:2e:98:52:4d:d6:1f:63:7f:ce:32:bb:05:39:fe:b1:9e:49:
         7e:d5:bc:32:9a:41:6b:b7:ac:bd:cf:fb:b3:eb:4b:c9:29:89:
         8a:5c:8e:33:7b:c2:44:e3:95:73:94:ac:dd:9e:be:40:fa:6e:
         9a:7b:33:9b:d4:47:cf:71:d9:ba:4b:c1:30:be:4a:e5:c7:05:
         de:5a:67:4b:ea:fe:72:db:dd:98:85:7f:c6:0d:d2:0b:f8:69:
         cf:6e:1a:3b:52:4d:fc:50:ca:09:ed:39:85:92:98:ba:9e:c1:
         b1:36:4e:52:ed:41:5e:48:a4:d4:a3:31:26:d5:4b:b9:58:9c:
         bf:28:e2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----