Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/2667bd6a-cd2b-3fb0-a5b0-3980b17c19e5.roa
File:                     2667bd6a-cd2b-3fb0-a5b0-3980b17c19e5.roa (raw, json)
Hash identifier:          wa/16TJn1bREZmlho80e4hFhOlUQj9hj4f1w9kaUFRU=
Subject key identifier:   8E:51:5F:92:12:1E:A2:48:03:6D:46:E0:C6:BE:58:BB:18:CA:F6:55
Certificate issuer:       /CN=492092dd-7457-4265-80ee-c447496a414c
Certificate serial:       010D0C9F432858494733EF22EE2F8ECCD7AD1380
Authority key identifier: E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/2667bd6a-cd2b-3fb0-a5b0-3980b17c19e5.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     213339
IP address blocks:        2602:fc26:cd::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:ef:22:ee:2f:8e:cc:d7:ad:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492092dd-7457-4265-80ee-c447496a414c
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=d6548a74-d53f-46d5-8e98-e1456a35d0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:9a:ba:31:14:74:fd:de:da:d2:c4:23:19:
                    21:4a:76:e6:d2:d9:90:1b:c4:9a:c6:a1:e7:d8:8c:
                    79:c5:70:6c:75:c0:8d:f0:90:98:af:65:e4:a4:74:
                    76:58:74:cb:bd:59:bb:95:c2:7a:7d:36:3d:af:70:
                    1b:77:0e:6e:b4:1e:0d:b6:fe:6c:b4:41:49:ce:68:
                    80:b7:e8:24:b4:8a:0e:db:23:4c:83:82:2d:55:a6:
                    55:66:a6:a8:3c:47:44:ce:c9:a3:b7:7f:1b:41:7d:
                    f1:1d:27:d4:fa:24:0a:dc:40:9d:31:79:c5:51:6a:
                    46:ca:a9:9d:9a:e3:36:d0:0a:e7:5d:f5:45:11:44:
                    e4:5a:9a:44:39:0d:08:eb:31:57:ca:78:ad:09:50:
                    c1:ca:83:c2:8d:84:de:23:95:0b:77:e4:d3:0e:4f:
                    a6:19:07:cb:95:18:8c:11:8a:50:9c:e8:9b:d8:cd:
                    78:3c:a5:e1:f5:5f:28:72:d8:c8:25:d8:76:d1:1e:
                    86:f9:0a:d8:34:c7:15:9d:ac:4e:7d:66:7f:2a:b0:
                    e0:be:b0:cc:6e:8e:f1:99:8e:c0:c1:9b:67:e1:58:
                    a5:cc:41:e4:77:10:8e:85:cb:57:74:f8:d7:90:9d:
                    02:f1:ee:92:7a:67:e3:18:74:a9:72:1e:96:b9:7e:
                    5b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:51:5F:92:12:1E:A2:48:03:6D:46:E0:C6:BE:58:BB:18:CA:F6:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/2667bd6a-cd2b-3fb0-a5b0-3980b17c19e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc26:cd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:76:7d:86:59:4c:f1:34:be:97:17:8a:99:1f:b4:33:71:a9:
         af:e2:e8:16:80:2e:66:9c:b3:fc:74:d7:87:29:1c:cb:24:27:
         91:1d:64:36:04:39:60:7d:52:5a:5a:50:86:2b:e6:9c:27:a0:
         59:8e:8a:50:86:0f:1f:78:fa:47:55:a1:25:33:34:d2:6a:8d:
         4a:72:45:0a:ca:b9:78:b8:3b:63:a6:3a:76:84:13:f9:89:c3:
         d9:df:9c:b0:f0:de:fd:d4:6c:41:ec:3e:c4:0e:3e:0d:78:b5:
         2a:65:99:37:17:86:39:73:02:9c:af:04:7c:b6:b3:5d:73:9e:
         6c:d3:2d:16:e5:13:fa:37:cd:a6:46:3c:43:d0:f6:53:9b:48:
         38:53:b1:da:0d:f8:2c:ed:ed:44:eb:12:f3:e3:a9:a0:e9:9d:
         ef:aa:93:4f:6c:64:6c:7e:c0:2a:7f:f9:68:93:e4:0b:96:d5:
         85:91:bb:d5:d6:16:92:91:aa:d6:79:09:fa:1b:01:ce:0d:79:
         28:ef:1a:45:8e:65:c3:f0:a7:2f:1c:01:3c:2d:52:7b:b3:72:
         07:27:b9:c8:50:25:f5:4b:ae:c3:28:7f:79:f4:aa:c0:a8:52:
         78:ba:8d:d6:3e:3d:ac:d6:71:84:ea:e4:b1:af:1d:a3:a1:c1:
         8d:d9:fc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----