Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ea195aaf-0f4f-35a6-ac60-6c5f3d5ffc32.roa
File:                     ea195aaf-0f4f-35a6-ac60-6c5f3d5ffc32.roa (raw, json)
Hash identifier:          hRM1xa2JAh6JTcF7KyI3O1UW4lgfw0LGQOen8iqTYOM=
Subject key identifier:   D1:2C:ED:5B:6C:03:40:9A:85:85:CD:0C:BA:50:86:F8:D9:30:10:D6
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E006930E5B758A3D3EA13088
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ea195aaf-0f4f-35a6-ac60-6c5f3d5ffc32.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:93:0e:5b:75:8a:3d:3e:a1:30:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=24d24125-a2ff-4ad9-bab5-2d60b96d0c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:99:69:6a:89:8e:70:ec:aa:0b:75:e3:8c:
                    b7:b2:59:18:01:50:f9:c9:6a:03:a8:6c:9e:53:69:
                    27:dd:57:94:9b:bc:14:a4:7d:34:ec:95:95:3b:cc:
                    54:59:75:aa:63:41:9d:63:8c:0d:21:65:3d:2e:f8:
                    20:5c:9b:ed:ed:1d:06:da:38:c8:ae:66:4a:3c:c0:
                    e1:bf:50:53:37:d2:0e:03:a0:2c:97:9e:21:cb:92:
                    54:bf:be:a9:26:b7:24:cb:1d:2b:6f:8d:cf:e1:0e:
                    25:3e:a9:9c:bd:19:58:67:a2:c2:51:d9:5f:80:1d:
                    ec:b6:cc:43:49:9b:31:1e:69:86:7e:5f:7b:44:db:
                    1c:c7:57:13:d3:d0:db:23:2a:7d:5d:f9:50:ab:8e:
                    57:f7:60:f8:5f:ed:d1:6c:3e:6a:0f:6d:e0:1e:d5:
                    24:dc:d3:0b:ba:ad:3c:af:b3:98:cf:35:cc:0b:6a:
                    3f:ad:9e:0f:51:2c:42:93:7c:87:e1:79:0a:4c:f8:
                    bb:8c:84:dd:65:93:2d:74:84:b9:a5:4e:46:d2:a9:
                    6a:47:3a:78:18:f6:99:8d:a4:bf:48:27:ac:bc:f7:
                    01:b7:a7:65:96:72:eb:65:58:6f:a9:39:5a:17:65:
                    a3:9a:13:b2:ed:35:31:ad:62:e1:7a:86:49:8d:c3:
                    2f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2C:ED:5B:6C:03:40:9A:85:85:CD:0C:BA:50:86:F8:D9:30:10:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ea195aaf-0f4f-35a6-ac60-6c5f3d5ffc32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:63:d8:4c:b3:fa:bb:be:0e:c2:a5:22:e2:3e:48:b6:51:85:
         99:51:e3:7b:d1:a7:74:0a:62:96:1c:ec:89:7d:4f:b1:76:bf:
         4b:55:72:33:a7:9c:34:f3:cd:4d:50:e5:15:1e:41:73:06:64:
         46:83:8e:ee:52:57:08:32:96:fa:66:98:c3:d8:31:da:de:47:
         49:03:63:df:ad:1f:46:c4:e9:eb:66:a5:d8:bd:58:b1:af:c4:
         ac:cd:fc:0e:cd:f7:29:85:d0:3b:7c:fe:29:28:4c:79:b8:79:
         b6:b7:05:3c:b5:c8:3c:ae:f6:c3:d0:7c:4e:09:d2:02:0f:44:
         01:ca:87:19:d1:92:cd:40:21:d2:31:3c:a5:ea:43:dc:36:73:
         6e:59:c2:29:4b:78:9d:bf:2c:d2:d4:eb:81:31:0e:18:ff:5d:
         9e:02:ed:11:80:50:8a:07:ee:30:de:b7:f0:c1:62:ff:4d:c7:
         43:57:a6:5c:10:22:41:75:3f:12:74:9b:b9:03:1d:ad:8d:6f:
         b6:d5:21:68:b1:19:13:f2:a5:43:24:50:57:99:c6:ae:30:8e:
         bb:97:af:92:8e:eb:ea:5d:ac:7c:29:6b:c1:39:0a:33:13:99:
         b7:13:14:d5:d5:28:57:63:a8:e4:05:f5:84:94:9d:cc:41:0a:
         70:ab:8e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----