Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/8d29cc79-0418-3685-a36b-52ea43d6efc2.roa
File:                     8d29cc79-0418-3685-a36b-52ea43d6efc2.roa (raw, json)
Hash identifier:          eB6WSig8Pp43BE3bb/YlsV/e40yJqEZmXpEYKGNsvNY=
Subject key identifier:   57:98:77:BF:B8:93:3F:6A:17:89:AB:B5:2D:DA:94:74:8F:B5:5E:85
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584937D93B48242FE9648DE05E90
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/8d29cc79-0418-3685-a36b-52ea43d6efc2.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     10835
IP address blocks:        2607:f498::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:3b:48:24:2f:e9:64:8d:e0:5e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=7fa7315f-2868-4533-aea2-27bf6b9ca377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b5:97:28:be:83:87:14:cd:6f:ff:b2:ec:d7:
                    82:69:3b:f8:52:12:0f:66:1f:33:94:f0:ee:ac:54:
                    a5:d4:6f:05:77:a8:96:a4:1f:25:bf:b2:ac:c9:ca:
                    b7:ae:fe:c7:11:8d:75:58:97:a6:8f:96:fe:4f:a9:
                    10:21:8d:9a:d7:d4:a6:ea:7e:06:ec:a8:23:63:be:
                    fa:90:cc:c3:14:e5:a7:08:2d:07:c8:03:84:20:d8:
                    19:18:90:c0:5c:81:4b:60:42:94:d0:14:e1:f1:7d:
                    ca:23:56:92:b1:29:6b:7d:c3:e4:dd:ec:24:29:90:
                    7c:b6:20:1d:28:bb:0e:5a:84:1b:53:b8:8e:d4:14:
                    98:7d:dc:b5:2e:b4:11:e4:7a:52:ff:5c:05:47:82:
                    ba:ec:cd:10:b7:14:e3:07:f2:1c:ad:45:ff:65:c6:
                    bf:48:55:da:b3:01:1e:d1:48:0f:8d:5c:70:60:c1:
                    03:ad:45:df:b5:4b:3a:50:94:cf:d4:2c:00:e8:b5:
                    11:c6:dc:c0:54:3c:72:46:cf:f3:cf:64:77:80:76:
                    e9:a9:2e:b2:06:e3:d0:7e:a7:ea:5d:bb:9f:6e:ec:
                    a4:8f:b0:50:dc:25:45:79:04:13:de:ca:8d:9d:29:
                    34:b4:b6:c2:16:e1:05:65:95:5d:82:54:4f:f4:6c:
                    6c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:98:77:BF:B8:93:3F:6A:17:89:AB:B5:2D:DA:94:74:8F:B5:5E:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/8d29cc79-0418-3685-a36b-52ea43d6efc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f498::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:0f:d1:6a:b0:7c:57:1e:e6:78:41:7a:06:99:f1:43:93:39:
         67:76:f5:2a:8b:bd:a8:09:8a:66:61:63:1a:93:1e:7c:ca:1b:
         32:99:48:2c:27:67:2a:37:e6:b1:b7:55:e6:95:ec:82:78:37:
         a7:4b:19:fa:21:b5:34:56:4f:ce:f3:63:08:91:b6:66:4f:ca:
         00:53:58:44:71:40:6f:3f:4e:af:e5:b6:2c:b2:01:94:49:04:
         88:ce:d2:a8:0f:21:39:44:22:aa:63:58:e3:ad:ae:a7:e7:25:
         f0:7e:e5:64:df:ca:20:bc:8c:c1:5f:29:a5:32:23:05:b2:2e:
         0c:b8:da:0d:8b:d9:96:d2:98:0d:2f:5e:09:ff:af:64:ac:41:
         13:39:aa:8f:ee:07:56:5d:28:65:35:a4:1b:71:44:0c:ef:0b:
         c0:98:75:47:d1:0b:c2:34:07:c6:d0:0c:aa:49:1d:0a:d1:14:
         62:78:d3:94:ef:0f:fd:c0:d4:71:b0:9d:5d:60:38:89:8c:ce:
         a5:7e:46:4b:77:ed:33:b5:45:eb:64:28:cb:27:c7:92:9a:22:
         e4:33:44:e1:5d:11:f0:22:ac:5d:ae:c6:81:04:fc:b4:70:de:
         97:29:72:50:25:1f:93:55:8d:ba:7e:ba:4e:d7:81:62:70:cb:
         9a:7c:e8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----