Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/b801981e-8b4e-342a-a6f6-9042400af3fd.roa
File:                     b801981e-8b4e-342a-a6f6-9042400af3fd.roa (raw, json)
Hash identifier:          8Gf/DiJE9Rqdixs9moCoYrFX01jcZ+zRPQKzuHVNh7Y=
Subject key identifier:   1C:34:8D:6A:A1:F0:3C:41:05:A0:68:92:58:2B:57:A6:64:B5:2D:24
Certificate issuer:       /CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
Certificate serial:       010D0C9F432858495ABEBCCF05BC23CED5B35BB0
Authority key identifier: 8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/b801981e-8b4e-342a-a6f6-9042400af3fd.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     27580
IP address blocks:        2604:f1c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:bc:cf:05:bc:23:ce:d5:b3:5b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=4be83f7f-314a-49ad-93f1-003c21e08aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:24:1e:03:38:58:2f:42:5c:35:eb:c3:61:d1:
                    47:cf:f8:6c:73:7b:d0:de:ac:fc:8c:72:2f:b1:b5:
                    81:aa:e5:b1:34:31:cf:57:d8:f7:22:5c:bc:18:92:
                    1b:e7:de:95:9b:98:3e:8f:f5:c0:70:46:88:cb:c7:
                    2e:e0:10:b5:3d:23:d7:28:42:c2:9e:8a:ca:41:7f:
                    11:6c:ba:51:9a:62:1a:97:bb:17:54:cc:da:dd:e0:
                    97:ab:68:e7:29:83:7b:b7:40:19:3d:8c:f1:39:28:
                    fc:7e:8b:a1:c2:77:22:23:2b:1c:d6:b2:5d:17:0a:
                    6c:fa:1c:42:cb:d7:53:27:c4:ad:26:ec:70:11:f1:
                    ca:59:b4:2f:4f:5b:65:8d:d9:b4:35:1b:aa:73:4e:
                    d6:40:c7:b7:48:e9:32:86:04:31:f6:3d:c0:ad:cb:
                    e8:10:84:2d:38:6b:76:59:84:0a:81:bf:c2:85:08:
                    f0:ca:07:99:b4:55:0f:56:b1:77:db:b4:91:bb:26:
                    d4:65:fe:73:90:a7:8c:8e:90:30:c5:2c:39:79:40:
                    dc:93:f8:51:c2:35:c9:ab:06:c2:dd:24:95:d8:5f:
                    20:a5:99:e3:07:22:04:66:ef:cd:d7:7d:88:ab:14:
                    44:b1:d4:21:33:2c:79:7a:dd:6e:91:7e:00:e7:17:
                    0e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:34:8D:6A:A1:F0:3C:41:05:A0:68:92:58:2B:57:A6:64:B5:2D:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/b801981e-8b4e-342a-a6f6-9042400af3fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f1c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:50:74:02:51:56:af:e2:a2:c7:fe:d4:67:09:80:d3:9d:89:
         67:0f:04:c3:8b:37:34:c7:05:86:85:49:1e:35:d1:16:c8:86:
         bd:f5:5c:04:d0:13:f1:e7:58:7c:fb:87:40:f4:2e:f7:85:f0:
         48:c3:06:5c:28:a2:49:da:50:63:9c:9e:97:8c:bd:b9:34:db:
         52:1c:f0:47:19:57:9e:a7:f8:e7:fe:35:e5:49:10:1f:55:49:
         42:c7:17:44:0a:83:5a:17:33:3b:0c:c9:48:ec:4b:08:9e:ae:
         b4:33:fd:6d:8d:5c:9c:10:98:5a:b5:03:8d:e2:3a:ac:00:c3:
         37:00:b8:bb:07:af:0d:7c:fa:ec:68:a4:50:80:f2:73:46:e1:
         15:44:80:de:ce:43:a0:cd:2a:54:1e:d2:26:a8:9e:e4:54:eb:
         0f:a0:dc:ab:a2:5e:13:7f:4e:d7:47:23:82:88:4c:24:fd:dc:
         73:60:05:c2:c3:0c:55:5d:81:c8:b4:19:4d:58:29:62:0c:4f:
         06:d0:a0:bb:76:cb:cf:09:5b:44:f7:d1:68:da:5e:7e:a1:3d:
         eb:bb:3d:6b:a5:23:e5:25:36:ac:b9:22:0a:ea:91:5f:fc:89:
         31:48:89:b6:9f:d8:14:12:43:2b:32:ec:42:79:d3:99:43:f6:
         59:aa:4a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----