Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/60e513f5-2e31-3b9e-9bce-f9c5096861b1.roa
File:                     60e513f5-2e31-3b9e-9bce-f9c5096861b1.roa (raw, json)
Hash identifier:          yFbfDwijlKwv+YUgQWCICERPYvBHAX+vQhBuh5t4NcI=
Subject key identifier:   61:49:FE:D9:6C:E1:87:8F:0C:F1:27:69:23:A3:C2:09:FA:6A:E1:ED
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F43285847AB6C1CA542A5C0C368038400
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/60e513f5-2e31-3b9e-9bce-f9c5096861b1.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     401
IP address blocks:        2602:fa2e:c00::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:1c:a5:42:a5:c0:c3:68:03:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=c1b8a033-0cc0-4e5c-bea0-3bd2d0bb9b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:1d:6f:74:2c:0a:20:5a:ec:2b:5f:03:ec:
                    71:9a:27:f3:7a:a2:a1:28:3b:cb:91:76:18:8c:86:
                    d4:65:e3:f8:13:21:d5:8c:89:76:da:dc:13:ca:e0:
                    1d:36:4d:98:8f:27:22:a7:98:37:54:c4:d2:98:24:
                    64:f8:89:03:cd:14:2e:f0:ea:e0:d8:72:f4:70:2f:
                    6c:dd:d8:b9:53:e3:53:30:c9:8b:cb:e1:fc:ac:45:
                    34:5e:90:f3:37:fd:9a:56:d3:f6:33:dc:cc:a9:f6:
                    3f:07:b9:55:3c:62:7e:10:d8:6b:eb:d3:79:a4:dc:
                    39:2d:8d:1c:26:62:0d:54:01:6f:8a:8e:a9:94:f9:
                    f4:a4:28:3f:c0:9f:90:e5:ab:ef:79:db:d0:62:60:
                    1a:f2:62:2d:45:52:6d:00:6b:f6:9a:3b:f2:6d:d3:
                    50:f0:7d:6b:9f:32:99:04:c8:e9:ad:05:e4:4a:ef:
                    02:29:1f:90:93:0d:f9:aa:65:12:46:70:a6:0c:fb:
                    e8:ab:3f:8d:56:93:2e:51:41:dd:1c:76:e5:06:94:
                    67:ea:0e:50:49:06:d3:df:ed:84:a3:38:f6:d4:39:
                    75:61:cd:bf:48:96:cd:e0:e4:bd:ec:a4:22:76:96:
                    fe:a2:f0:c0:6c:90:07:52:40:b5:c0:9d:fe:65:69:
                    12:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:49:FE:D9:6C:E1:87:8F:0C:F1:27:69:23:A3:C2:09:FA:6A:E1:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/60e513f5-2e31-3b9e-9bce-f9c5096861b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:4a:ad:fe:b7:96:e0:00:85:43:9a:d5:92:82:64:00:a8:ca:
         c2:a5:ed:0c:2f:8d:82:01:55:3f:18:47:be:9c:92:b4:79:ae:
         e5:04:b0:4d:54:8b:43:43:8e:32:d4:6d:e0:ca:31:ae:2f:8c:
         31:96:10:9b:2c:2d:55:6e:27:e9:b9:87:d3:38:43:0f:06:67:
         38:f9:ec:3c:92:4e:eb:f6:fe:58:1a:5c:69:3a:20:52:b9:e5:
         07:e6:5e:d2:fa:ab:78:7d:e2:8c:71:5b:e2:88:78:9d:ad:0c:
         a3:b9:91:52:2d:41:0d:e6:bd:3d:d9:23:dd:c9:3e:05:f3:39:
         0f:21:ed:ce:9a:4a:93:ec:c2:82:e5:36:dc:fd:68:ef:04:e8:
         bf:e1:bb:f1:34:62:af:89:22:12:86:cb:de:15:0c:9b:44:a8:
         e6:21:42:08:e7:da:e0:8e:dd:71:9f:f7:87:70:67:f4:f1:3e:
         60:f0:c9:19:f2:fe:b0:8b:9c:f2:7b:96:b6:9d:59:cd:6e:23:
         65:01:7b:71:7f:dc:93:d9:d7:c4:d2:0f:9f:4e:d8:fa:1c:6a:
         43:ab:df:5a:a5:87:1e:4f:07:a2:17:03:a3:bf:6c:58:91:af:
         66:f3:bd:e1:fa:04:d8:24:c8:dd:74:5e:72:73:78:57:99:3d:
         bb:5d:1e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----