Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0eece25a-e3fa-3a83-981b-a18d4429a8ce.roa
File:                     0eece25a-e3fa-3a83-981b-a18d4429a8ce.roa (raw, json)
Hash identifier:          TEzNypZHLxd0XsKeChsty4+1OdFtDOTymYIje+FgLPg=
Subject key identifier:   7B:40:E2:F6:06:BD:9B:D0:90:77:3E:79:D9:4C:AA:74:93:6D:0E:27
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E006906DA90C25CEDF2E9880
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0eece25a-e3fa-3a83-981b-a18d4429a8ce.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2603:9000::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:90:6d:a9:0c:25:ce:df:2e:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=4a9cda8e-f01a-4429-b025-e64aa4a454c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a2:1f:ea:5d:70:dd:4a:f4:89:58:8d:a5:7b:
                    e6:8d:0f:a4:10:6f:16:17:47:93:47:d8:d4:c8:c1:
                    8b:37:db:a8:05:26:70:2b:2b:89:45:0a:97:40:f4:
                    f7:22:4c:3c:23:cd:6d:d0:83:a7:63:b4:cb:07:df:
                    32:d4:28:ea:77:ef:1c:bd:5f:b1:03:ce:f0:37:a0:
                    fd:76:b0:b2:7a:bb:01:48:97:a9:90:bc:c8:10:59:
                    e3:53:de:03:83:a6:91:ec:ba:ac:16:56:c4:3b:97:
                    30:07:41:3e:55:95:74:6f:23:d9:7a:fe:eb:d0:58:
                    91:49:fc:25:f0:ed:77:ae:22:ba:6f:4c:27:26:9b:
                    59:13:c1:df:0b:2a:fa:56:13:0c:35:1f:7a:1c:e7:
                    d3:65:14:20:4f:1a:95:27:84:b9:e9:ef:96:34:6f:
                    20:7b:0c:e7:e4:49:13:fa:c1:85:0c:a5:e3:53:f9:
                    e2:bd:97:41:d1:1f:34:c4:52:e8:0e:69:b2:96:8b:
                    8e:f3:93:33:1e:83:28:cd:d5:d7:43:73:ef:96:28:
                    12:70:da:32:65:7b:47:e0:d4:68:6c:48:3e:51:3d:
                    76:99:1d:21:b8:e2:d6:32:18:b5:a0:6f:d7:28:f4:
                    36:7a:ff:2b:a9:27:45:88:29:75:8b:bc:eb:35:91:
                    d8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:40:E2:F6:06:BD:9B:D0:90:77:3E:79:D9:4C:AA:74:93:6D:0E:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0eece25a-e3fa-3a83-981b-a18d4429a8ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:22:fc:27:3b:c7:d8:2c:c6:f4:02:4b:1e:58:22:5f:28:a7:
         ae:be:c6:1d:32:98:ed:15:6c:33:c6:df:e5:61:45:b7:0f:70:
         71:62:50:42:7f:d8:75:cb:31:3b:4b:f7:ad:ce:3d:a4:0c:1c:
         88:4d:b2:d2:e3:3f:7a:66:eb:d4:8d:4d:50:d1:a4:ee:bf:74:
         9a:8b:b9:42:b5:89:32:a6:20:9a:28:6b:0f:4e:39:d3:f0:fd:
         22:e6:ed:ff:88:32:89:2e:d7:c9:ce:e4:50:ab:ce:8b:db:ab:
         f2:e6:e8:61:79:3e:3c:d1:14:ce:19:15:05:65:51:bc:7f:59:
         e2:5d:c1:d1:cb:c4:4e:dc:3d:8e:87:6c:51:79:75:24:6e:88:
         ed:a7:e4:19:eb:5a:6b:4a:f9:c5:81:02:50:af:fe:c8:55:db:
         7d:4f:d6:14:e4:7f:54:84:98:e2:4a:84:e2:39:40:70:c9:22:
         5d:b2:1d:db:b3:7f:33:2c:1c:af:66:98:50:9f:77:42:81:d9:
         7c:00:12:47:6c:76:10:b0:3a:7f:a7:0e:40:33:bb:2e:29:a4:
         55:41:9f:a0:2d:3a:42:50:e2:16:44:bc:45:6d:dd:45:80:2e:
         7b:23:08:18:3f:53:c7:5c:82:21:62:0c:86:53:ed:97:92:af:
         c0:b5:68:5f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBpBtqQwlzt8umIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
NGE5Y2RhOGUtZjAxYS00NDI5LWIwMjUtZTY0YWE0YTQ1NGMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKIf6l1w3Ur0iViNpXvmjQ+kEG8WF0eTR9jU
yMGLN9uoBSZwKyuJRQqXQPT3Ikw8I81t0IOnY7TLB98y1Cjqd+8cvV+xA87wN6D9
drCyersBSJepkLzIEFnjU94Dg6aR7LqsFlbEO5cwB0E+VZV0byPZev7r0FiRSfwl
8O13riK6b0wnJptZE8HfCyr6VhMMNR96HOfTZRQgTxqVJ4S56e+WNG8gewzn5EkT
+sGFDKXjU/nivZdB0R80xFLoDmmylouO85MzHoMozdXXQ3PvligScNoyZXtH4NRo
bEg+UT12mR0huOLWMhi1oG/XKPQ2ev8rqSdFiCl1i7zrNZHY6QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHtA4vYGvZvQkHc+edlMqnSTbQ4nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMGVlY2UyNWEtZTNmYS0z
YTgzLTk4MWItYTE4ZDQ0MjlhOGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgOQADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBwIvwnO8fYLMb0AkseWCJfKKeuvsYdMpjtFWwzxt/lYUW3D3BxYlBC
f9h1yzE7S/etzj2kDByITbLS4z96ZuvUjU1Q0aTuv3Sai7lCtYkypiCaKGsPTjnT
8P0i5u3/iDKJLtfJzuRQq86L26vy5uhheT480RTOGRUFZVG8f1niXcHRy8RO3D2O
h2xReXUkbojtp+QZ61prSvnFgQJQr/7IVdt9T9YU5H9UhJjiSoTiOUBwySJdsh3b
s38zLByvZphQn3dCgdl8ABJHbHYQsDp/pw5AM7suKaRVQZ+gLTpCUOIWRLxFbd1F
gC57IwgYP1PHXIIhYgyGU+2Xkq/AtWhf
-----END CERTIFICATE-----