Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/419d5cfa-f22e-3661-88d8-34e49da63dab.roa
File:                     419d5cfa-f22e-3661-88d8-34e49da63dab.roa (raw, json)
Hash identifier:          hwmaS/hK68EVZlEe5bsrLKJnPzYb2z6iK+QRBQRi/9A=
Subject key identifier:   26:76:56:CA:E9:DE:8A:CE:81:F6:FA:0C:56:39:3F:0C:40:24:37:88
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E006601B6BB40EBC81348580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/419d5cfa-f22e-3661-88d8-34e49da63dab.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     11351
IP address blocks:        2603:90f5:7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:60:1b:6b:b4:0e:bc:81:34:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=cb071843-5d16-44d7-8288-3812707e66c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ac:a5:68:66:40:d3:eb:d2:5c:93:9a:f0:36:
                    d3:4a:7a:e7:53:51:8b:29:88:4e:fd:4f:c0:2c:d0:
                    4a:69:26:d9:7a:39:c3:4e:cc:cf:fb:02:a6:c7:1a:
                    75:47:e3:5e:1d:9f:10:ea:1c:2c:dd:18:7b:ad:cb:
                    f2:f1:b5:aa:86:52:4a:ec:24:8e:2b:c9:67:c9:d3:
                    8e:db:86:4f:ab:a9:15:78:84:3d:fd:e4:45:61:f9:
                    22:f9:f4:16:e9:75:eb:be:b3:a7:c0:f9:31:44:a6:
                    1f:3d:4f:f0:f8:74:85:ed:01:dc:5f:30:85:75:0f:
                    47:b1:d2:81:22:2a:3f:7e:69:d5:eb:b1:1a:9d:1b:
                    19:b8:cd:6c:fd:ec:df:d2:34:02:06:ec:48:ab:fa:
                    ec:09:98:f4:79:65:4b:9c:5a:d2:7e:99:ff:ca:70:
                    5e:f9:45:f1:e2:a1:a8:2f:ec:6e:d0:47:7a:ab:6f:
                    d7:0b:83:52:d9:ca:fe:c3:07:89:c9:8e:11:94:d5:
                    95:72:bc:77:f7:6e:c7:bd:c7:81:b5:5c:0a:5b:83:
                    72:9d:3a:95:5b:cd:e2:fa:a7:3c:3f:91:0e:3e:b2:
                    c7:e1:36:9e:60:23:1d:3b:23:2d:c2:4f:8e:20:16:
                    85:9e:21:00:c1:a3:e5:2a:96:dd:44:18:8e:37:58:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:76:56:CA:E9:DE:8A:CE:81:F6:FA:0C:56:39:3F:0C:40:24:37:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/419d5cfa-f22e-3661-88d8-34e49da63dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90f5:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f8:fe:c6:d5:20:b9:a2:c1:0d:28:fc:a9:06:f1:ec:e3:6a:
         fb:9f:cf:d2:44:b5:7a:3d:e6:5c:5a:4e:cf:55:5a:0b:12:5f:
         24:65:23:5c:54:4b:b4:25:37:e0:7a:73:89:b2:0c:59:38:b2:
         cf:1f:eb:83:e6:72:d9:cc:ab:26:8f:1c:e5:36:02:85:3f:11:
         f4:40:fd:4b:00:7a:43:57:93:29:76:4e:0d:19:cf:fa:12:78:
         4a:1c:cb:be:80:f7:71:b5:c7:ca:f2:1f:6c:81:a1:ca:d5:44:
         d9:86:37:21:e0:e4:2f:f6:d4:e9:8f:eb:64:f2:43:dd:3c:90:
         29:78:8e:84:e2:4b:71:57:2f:31:a4:22:fc:9f:5c:35:f8:9f:
         be:39:c0:00:55:2d:b0:3a:90:d9:fe:2e:11:27:dd:9e:a6:f2:
         a3:43:e4:cf:02:b3:d2:04:2c:5a:a1:af:71:f4:b3:2a:fb:e9:
         c4:20:45:be:3d:3f:29:a4:68:11:56:99:ea:6a:06:55:f8:d0:
         32:d3:a0:f1:19:9c:c1:28:ae:ac:02:bf:70:bc:2c:61:29:cd:
         44:fe:2a:67:b3:6c:1c:87:4a:86:6f:65:fb:f6:50:9b:7d:12:
         e2:6d:93:e4:43:e8:ef:4c:15:ca:11:6e:ef:c7:59:46:19:fb:
         c9:3d:d9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----