Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42438101-5783-3d76-8640-30194541c9ab.roa
File:                     42438101-5783-3d76-8640-30194541c9ab.roa (raw, json)
Hash identifier:          DoDU56ajM+sgBiu+MTc5+sIJVR2EY7Ml6XEt9lshFZI=
Subject key identifier:   F9:C8:7E:19:DF:EC:A3:6E:BC:06:BF:41:E8:81:A3:DF:BA:66:74:6A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1B5380CF0CE6CF55BD500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42438101-5783-3d76-8640-30194541c9ab.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        2603:6010::/28 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:b5:38:0c:f0:ce:6c:f5:5b:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=f85660a0-4135-4739-b9c6-dd9498415af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:81:38:79:28:d3:1e:c1:c4:83:d1:89:ad:0d:
                    dc:44:0d:43:a7:ab:ba:2e:68:ab:10:fa:ee:9f:17:
                    e7:06:be:47:ad:61:de:6a:29:51:24:2f:c2:0a:91:
                    02:9f:c1:3a:5e:3b:79:b1:28:06:7f:6f:a0:f7:a7:
                    b9:00:1b:8e:80:a9:12:10:c0:25:70:fb:b1:ad:fe:
                    49:fb:a2:80:e4:5d:7f:37:ce:19:93:16:aa:c5:63:
                    5b:02:a4:9a:58:b7:53:58:ac:2f:96:72:bb:8d:95:
                    e0:d7:38:11:ed:b4:54:fd:a7:1c:23:9a:06:45:5a:
                    c9:19:49:21:e0:6b:97:fc:8c:58:b9:67:d6:06:82:
                    2a:2b:56:70:84:da:47:40:f1:2e:39:21:19:99:3c:
                    7d:e1:b1:f1:ef:ce:f3:18:7e:48:1c:dc:68:d6:74:
                    c1:e1:19:a4:a7:7f:6c:d0:1e:a5:0d:ac:39:be:b0:
                    2d:ea:fd:a5:19:be:d5:e9:3a:6e:3e:c2:5b:a3:a2:
                    c3:75:81:36:4e:fa:4c:3e:b6:a2:84:f7:28:24:fb:
                    f7:58:27:22:81:09:a9:9e:7e:0b:c1:97:c6:49:9b:
                    c6:16:d4:40:8d:d5:63:71:cd:d7:d7:5a:da:2e:e9:
                    f0:43:ec:52:c3:ba:03:6b:37:98:0a:7c:aa:b3:b4:
                    d1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C8:7E:19:DF:EC:A3:6E:BC:06:BF:41:E8:81:A3:DF:BA:66:74:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42438101-5783-3d76-8640-30194541c9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:6010::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:5a:eb:62:f3:26:ac:58:ce:f0:e4:d9:0f:ce:40:f8:8d:93:
         c9:ba:7c:79:f8:28:6c:67:dd:61:ee:b7:4b:b4:b3:b3:55:17:
         c3:7c:ac:72:0d:9b:a9:4c:db:41:2f:c4:77:07:93:28:3b:4b:
         04:bb:db:51:7e:89:84:a8:7a:3f:6c:6e:59:4f:e1:17:ad:11:
         f6:4c:4e:2e:33:84:f4:f9:cf:7f:fd:c8:75:e2:5c:eb:07:1e:
         24:2e:f0:0c:8a:98:f6:d8:b4:ec:75:61:a8:33:e5:c8:d6:47:
         8e:65:e1:97:6f:54:db:c6:59:33:fc:f9:74:96:32:1a:bc:af:
         6d:75:56:70:82:93:8a:66:f0:27:04:9b:d1:aa:d4:e7:de:b7:
         9e:51:57:84:be:33:85:7f:c2:4f:ca:84:3e:b8:a3:85:bb:c7:
         fa:68:c6:93:fa:92:a7:04:0e:18:35:03:dd:0f:35:75:b8:c7:
         99:e2:4c:fd:87:74:7f:c9:4a:a1:68:3e:87:90:c8:5f:49:23:
         63:49:3b:ef:0a:14:72:82:fe:45:38:e0:73:81:5d:cb:ee:91:
         8d:31:7b:88:d3:e0:8c:b0:1f:ae:b3:0c:94:0d:b7:e4:2f:d3:
         ab:63:3c:0c:b0:36:6b:04:07:81:51:0a:a4:ca:f9:01:ce:a2:
         bd:55:88:93
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEji0bU4DPDObPVb1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
Zjg1NjYwYTAtNDEzNS00NzM5LWI5YzYtZGQ5NDk4NDE1YWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIE4eSjTHsHEg9GJrQ3cRA1Dp6u6LmirEPru
nxfnBr5HrWHeailRJC/CCpECn8E6Xjt5sSgGf2+g96e5ABuOgKkSEMAlcPuxrf5J
+6KA5F1/N84ZkxaqxWNbAqSaWLdTWKwvlnK7jZXg1zgR7bRU/accI5oGRVrJGUkh
4GuX/IxYuWfWBoIqK1ZwhNpHQPEuOSEZmTx94bHx787zGH5IHNxo1nTB4Rmkp39s
0B6lDaw5vrAt6v2lGb7V6TpuPsJbo6LDdYE2TvpMPraihPcoJPv3WCcigQmpnn4L
wZfGSZvGFtRAjdVjcc3X11raLunwQ+xSw7oDazeYCnyqs7TRPQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPnIfhnf7KNuvAa/QeiBo9+6ZnRqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNDI0MzgxMDEtNTc4My0z
ZDc2LTg2NDAtMzAxOTQ1NDFjOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgNgEDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB8Wuti8yasWM7w5NkPzkD4jZPJunx5+ChsZ91h7rdLtLOzVRfDfKxy
DZupTNtBL8R3B5MoO0sEu9tRfomEqHo/bG5ZT+EXrRH2TE4uM4T0+c9//ch14lzr
Bx4kLvAMipj22LTsdWGoM+XI1keOZeGXb1Tbxlkz/Pl0ljIavK9tdVZwgpOKZvAn
BJvRqtTn3reeUVeEvjOFf8JPyoQ+uKOFu8f6aMaT+pKnBA4YNQPdDzV1uMeZ4kz9
h3R/yUqhaD6HkMhfSSNjSTvvChRygv5FOOBzgV3L7pGNMXuI0+CMsB+uswyUDbfk
L9OrYzwMsDZrBAeBUQqkyvkBzqK9VYiT
-----END CERTIFICATE-----