Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/4e50a587-28e3-33c4-93d2-06b5fce81567.roa
File:                     4e50a587-28e3-33c4-93d2-06b5fce81567.roa (raw, json)
Hash identifier:          q9OOSW2O1liHOaM2+Gk0My5+V/G5HFZzM3QC8ooIpxU=
Subject key identifier:   96:C7:45:37:DA:FD:E3:DC:E0:7B:03:BB:F8:8D:7B:0D:DC:4C:09:89
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F4328584961B99838A244981AA5407880
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/4e50a587-28e3-33c4-93d2-06b5fce81567.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     30041
IP address blocks:        2607:9b00::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:98:38:a2:44:98:1a:a5:40:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=67bd8ab1-fec1-4c46-b49e-61b44d81d3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:f2:33:c1:c6:c9:4e:35:b5:51:28:c9:0a:
                    38:1c:43:57:a3:90:20:7d:98:d5:aa:49:9f:a1:2a:
                    45:43:9c:e2:9b:01:3e:24:c7:67:4e:58:9d:c5:b9:
                    4d:ca:7c:a9:09:64:f3:b9:ed:0a:00:af:96:17:d0:
                    39:7f:b4:3c:5d:e5:64:9a:8a:2b:dc:5b:cb:45:38:
                    f9:5f:ed:9d:b1:ed:3a:f7:7f:c5:66:17:f9:70:8f:
                    fa:2c:96:0a:f5:d5:f5:e3:6a:db:38:c5:d3:36:00:
                    a3:69:0e:8d:1f:d7:b5:cd:f4:2c:23:42:60:24:17:
                    ef:29:99:48:4c:bb:57:ba:5f:75:82:55:74:90:4a:
                    1d:b7:b5:63:0c:23:dd:f4:9e:50:2e:7a:34:47:d1:
                    64:26:d8:35:d3:58:54:57:cb:f4:e3:1e:78:c9:f9:
                    5f:8c:6e:1a:87:2d:b3:e7:db:1a:a8:2d:d5:d9:3d:
                    c7:b7:56:97:60:06:b4:34:6b:8d:0d:86:37:a7:0a:
                    1b:c1:0c:dc:0a:4d:2c:df:24:47:34:68:04:d8:aa:
                    7e:c1:af:be:02:05:32:1c:de:cd:8b:7f:c2:59:c5:
                    68:01:99:cf:c5:dc:b8:3d:75:53:a3:1b:48:02:14:
                    31:3a:95:77:dd:bd:46:72:a7:45:cb:87:66:08:ec:
                    0e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C7:45:37:DA:FD:E3:DC:E0:7B:03:BB:F8:8D:7B:0D:DC:4C:09:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/4e50a587-28e3-33c4-93d2-06b5fce81567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9b00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:66:a2:70:46:3a:f0:c7:1a:86:02:1e:6b:ef:ca:cb:73:29:
         0f:8d:6a:5a:fc:ac:fb:dd:2b:2f:11:96:d6:f0:31:9b:7f:27:
         1c:0c:a9:be:65:8d:c0:7e:bf:95:56:a5:e6:5d:86:53:54:14:
         e9:07:f5:95:f8:37:de:1a:38:1c:ce:0f:3c:8f:bf:57:0b:ae:
         27:7f:65:f1:24:a0:63:64:17:58:dc:a7:64:bb:a7:dc:8f:9d:
         20:2d:cd:04:d0:a2:07:2c:e8:98:81:28:06:86:22:36:09:72:
         a9:eb:1b:85:11:67:f7:c3:79:6d:7f:be:7d:12:ba:76:c4:a6:
         81:6c:e2:0d:38:71:c0:02:69:76:20:1f:10:84:99:8f:ed:95:
         42:b1:63:19:a8:7b:7f:8a:db:77:8d:18:25:07:e6:0c:71:b5:
         81:a5:b2:7b:27:d5:42:bb:2a:99:97:29:70:69:0a:d3:f2:2a:
         56:60:f4:bf:51:3c:3c:06:8e:00:a0:03:e2:65:9f:c9:dd:29:
         74:9f:45:21:d3:2d:f2:fe:64:b1:45:1d:b4:14:e8:b7:ef:11:
         1c:5c:c7:d1:e0:29:3f:3c:84:b1:d4:0b:45:af:36:9c:e0:aa:
         4b:e6:e5:8b:50:cf:bf:5d:d0:ff:a9:92:87:a1:66:92:61:8f:
         f5:08:50:45
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElhuZg4okSYGqVAeIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWJhOGJkZDAtNmM3Zi00N2I3LWI0MjctNmUyYjQ1NGZh
MzQzMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk
NjdiZDhhYjEtZmVjMS00YzQ2LWI0OWUtNjFiNDRkODFkM2Y3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorXyM8HGyU41tVEoyQo4HENXo5AgfZjVqkmf
oSpFQ5zimwE+JMdnTlidxblNynypCWTzue0KAK+WF9A5f7Q8XeVkmoor3FvLRTj5
X+2dse0693/FZhf5cI/6LJYK9dX142rbOMXTNgCjaQ6NH9e1zfQsI0JgJBfvKZlI
TLtXul91glV0kEodt7VjDCPd9J5QLno0R9FkJtg101hUV8v04x54yflfjG4ahy2z
59saqC3V2T3Ht1aXYAa0NGuNDYY3pwobwQzcCk0s3yRHNGgE2Kp+wa++AgUyHN7N
i3/CWcVoAZnPxdy4PXVToxtIAhQxOpV33b1GcqdFy4dmCOwOaQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJbHRTfa/ePc4HsDu/iNew3cTAmJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4
YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJiNDU0ZmEzNDMvNGU1MGE1ODctMjhlMy0z
M2M0LTkzZDItMDZiNWZjZTgxNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWJhOGJkZDAtNmM3Zi00N2I3LWI0
MjctNmUyYjQ1NGZhMzQzLzliYThiZGQwLTZjN2YtNDdiNy1iNDI3LTZlMmI0NTRm
YTM0My5jcmwwHwYDVR0jBBgwFoAUsWj3t9BOo5ekclbjM5CgXUrxK0AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJi
NDU0ZmEzNDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgebADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBFZqJwRjrwxxqGAh5r78rLcykPjWpa/Kz73SsvEZbW8DGbfyccDKm+
ZY3Afr+VVqXmXYZTVBTpB/WV+DfeGjgczg88j79XC64nf2XxJKBjZBdY3Kdku6fc
j50gLc0E0KIHLOiYgSgGhiI2CXKp6xuFEWf3w3ltf759Erp2xKaBbOINOHHAAml2
IB8QhJmP7ZVCsWMZqHt/itt3jRglB+YMcbWBpbJ7J9VCuyqZlylwaQrT8ipWYPS/
UTw8Bo4AoAPiZZ/J3Sl0n0Uh0y3y/mSxRR20FOi37xEcXMfR4Ck/PISx1AtFrzac
4KpL5uWLUM+/XdD/qZKHoWaSYY/1CFBF
-----END CERTIFICATE-----