Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52210bad-6957-3fc6-af06-5d711bf598ca.roa
File:                     52210bad-6957-3fc6-af06-5d711bf598ca.roa (raw, json)
Hash identifier:          B0RbX/MFM2mpap2BxSfd9NvA12zYmDkuwVoOkI8Sw5E=
Subject key identifier:   37:10:B4:66:BB:4D:1C:D1:AB:00:EA:BB:37:97:23:70:B1:42:BE:C5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00693E6A8A10DAE38AE8D30
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52210bad-6957-3fc6-af06-5d711bf598ca.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:803f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:93:e6:a8:a1:0d:ae:38:ae:8d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=5488fd9a-817f-467a-9353-4a391939e385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:24:3b:3a:4d:82:cd:88:b4:91:70:fa:e2:ed:
                    df:8b:46:5c:9e:e5:90:fb:2a:28:5a:73:29:b5:c3:
                    bf:56:76:f8:68:33:53:d4:a1:bf:f5:e7:51:44:54:
                    03:02:70:4a:93:3a:6e:f6:d6:52:ee:b2:65:26:73:
                    b7:bb:7d:c8:3d:8e:bb:bc:81:c1:01:d8:4c:ed:7c:
                    49:a0:df:7a:a1:af:e2:a5:f1:eb:33:5c:99:64:97:
                    d1:67:e2:85:fc:c4:fd:1d:ff:51:ad:2d:aa:a6:91:
                    7b:ea:6d:80:eb:d7:2b:13:76:78:dc:48:e7:bd:96:
                    fe:0c:e1:fa:00:45:d3:f9:32:65:58:0c:eb:7b:4b:
                    16:80:3e:4e:8e:84:88:29:b6:27:d2:e1:13:df:0d:
                    14:94:3e:98:19:36:74:f7:01:af:4c:8e:93:5e:be:
                    b8:a8:f0:d9:68:18:49:14:72:6b:d1:f5:b8:e9:72:
                    66:a5:6c:c3:78:5b:05:04:c9:f0:a3:a8:ea:be:ba:
                    e4:3e:ba:c5:34:49:45:a1:19:25:e8:4b:9a:7c:8d:
                    da:78:f4:6e:db:ea:af:c1:86:df:21:29:e1:df:5c:
                    68:5c:9e:b2:e2:d5:e8:14:3e:73:76:3b:4e:a5:98:
                    db:f7:f5:36:18:23:e2:9a:d1:5c:81:18:bd:1c:cb:
                    7e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:10:B4:66:BB:4D:1C:D1:AB:00:EA:BB:37:97:23:70:B1:42:BE:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52210bad-6957-3fc6-af06-5d711bf598ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:803f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b5:13:66:07:bd:de:df:c7:7e:47:ac:37:e6:b5:ac:55:02:
         e1:9b:1f:11:e8:68:4f:d5:87:2e:71:7b:a5:f5:03:33:c0:c1:
         ab:bc:86:dc:42:c7:34:43:c0:b2:d8:bd:1c:34:4b:41:99:11:
         96:3f:4b:b4:39:17:6f:81:3b:c1:7e:c7:1f:97:29:42:66:f9:
         ba:1f:ef:c2:7f:bc:09:3c:e0:71:b5:99:7d:5b:a9:65:33:85:
         a8:67:20:cb:11:75:f3:45:4b:6a:a6:fd:67:de:20:d3:7c:6c:
         85:a9:0d:6a:93:45:eb:10:98:df:9b:e2:eb:ed:82:85:23:58:
         5b:67:67:78:8f:9a:5c:43:3f:dc:b7:47:a3:e5:bf:00:3a:ba:
         ac:10:3f:78:9c:39:fc:e0:d7:7f:99:eb:f4:06:83:45:bf:53:
         19:c0:a0:e0:e1:a9:42:4a:25:12:5c:76:cc:7a:f1:14:14:6a:
         c6:1d:d2:e2:8b:65:f6:7e:fa:23:00:1f:88:fc:71:fe:65:fa:
         7f:ef:ee:20:5f:ee:14:b2:10:a6:0a:51:34:0a:52:2b:bf:e4:
         12:ea:28:30:ce:aa:20:23:1e:52:71:2c:0f:22:e8:90:d2:6c:
         2f:8c:bc:e9:ad:a0:30:e8:98:f9:45:16:f9:da:fe:1c:ba:08:
         27:b0:22:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----