Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa
File:                     5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa (raw, json)
Hash identifier:          NIUaptRElAmfflU/sYBo0mGnnW3Df23BrChTS8aJR3s=
Subject key identifier:   70:99:3F:1C:92:EE:D3:C3:44:E1:A7:63:F4:20:AB:F4:01:2B:20:C6
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F432858494CC93EF96DC33F1B54848D80
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     21957
IP address blocks:        2605:f440:5652::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:3e:f9:6d:c3:3f:1b:54:84:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=46d345cb-0dd8-4140-9c96-c4526d5ad7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cf:59:35:ac:4b:fe:b9:4c:ec:66:42:05:d6:
                    d2:70:23:2a:3b:23:a5:bd:b6:2a:15:f9:a6:44:e7:
                    39:77:1d:62:4e:12:3d:97:6b:fc:64:6a:53:8c:6d:
                    85:14:89:20:c5:07:90:73:a1:76:d2:95:a8:f1:09:
                    64:d8:16:14:59:1f:2e:6a:71:7d:18:ca:28:f4:e3:
                    ef:64:74:ca:f3:9a:fc:a7:62:10:b4:e1:8c:52:68:
                    eb:47:cc:38:00:12:13:20:94:04:90:38:36:32:7d:
                    07:15:9b:ad:7e:57:c2:49:5c:d0:81:31:3f:2c:ec:
                    58:5f:02:07:9b:1d:dd:0d:f8:c9:19:81:be:2f:c8:
                    0b:aa:a2:4d:8a:b5:54:ff:02:ed:36:59:2a:5e:a6:
                    e1:66:80:46:c0:2e:5f:9d:48:25:24:c9:8b:72:57:
                    ed:35:8a:d7:b7:0a:0f:7a:f4:37:c8:15:9c:02:6c:
                    9b:b2:5e:11:41:e6:45:f0:af:4a:90:c6:4b:17:f2:
                    0f:58:a2:0f:e0:4a:f1:83:e7:b3:8c:e1:f3:d9:5e:
                    e8:e2:e5:e4:47:3f:54:15:fa:69:8c:0b:ab:1f:41:
                    8e:35:0a:d9:f0:a4:f0:d7:94:50:d5:89:6e:9b:d5:
                    51:2d:f2:7a:ba:82:31:05:b7:f9:ca:d1:d9:0b:02:
                    6d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:99:3F:1C:92:EE:D3:C3:44:E1:A7:63:F4:20:AB:F4:01:2B:20:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:5652::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:15:a3:f5:be:b5:14:8a:45:4d:d7:ec:fe:0a:d9:f9:7a:63:
         66:68:99:bb:76:aa:5a:ab:c5:c0:e0:a8:19:77:bd:f8:aa:0f:
         df:94:5f:55:78:de:a7:22:02:39:98:e4:c4:c3:4d:bd:05:69:
         11:ec:08:a7:49:75:67:47:54:31:1a:98:d2:e9:37:e0:17:03:
         03:db:26:3d:07:66:52:70:be:99:06:1a:ce:bb:80:b5:e4:8e:
         fc:e7:ed:37:26:0b:93:1a:d3:87:cf:26:0a:f5:00:c7:14:ab:
         1f:a2:ce:2c:41:9f:8f:35:dc:1f:99:6e:e5:a8:e2:44:ae:3c:
         08:85:bd:6b:df:ab:34:cd:8a:15:b1:d7:e9:ed:c3:71:29:c2:
         3c:6d:32:ec:9b:a4:cc:ab:e7:07:2b:2d:7f:ce:43:38:2b:71:
         27:e9:ef:07:7c:e3:72:1d:bd:72:c1:68:03:90:b7:18:6b:e9:
         94:03:33:9c:f2:77:8f:2c:24:9b:93:96:c8:21:d5:5c:a7:1c:
         c5:2d:c9:fb:d2:72:d7:15:7d:81:fe:37:6d:8a:79:3d:0d:f8:
         8a:81:a1:1f:84:43:8a:25:ca:4b:1b:86:30:f7:17:9e:50:ed:
         6f:bf:cf:f9:b0:1a:30:7b:a3:67:45:42:8a:6b:f1:00:3e:a5:
         32:74:35:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----