Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa
File:                     e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa (raw, json)
Hash identifier:          aKE+laQ/+Ks4Pd70nuifX0/ftUW4OIqIaPl8zWXn2TQ=
Subject key identifier:   7B:6E:0A:DF:E8:68:9B:F8:B1:6B:00:5C:66:36:13:E7:41:22:56:89
Certificate issuer:       /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial:       010D0C9F43285848B4C0D38B7C8D365CF3081154
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     55116
IP address blocks:        2602:2c9:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:d3:8b:7c:8d:36:5c:f3:08:11:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=f0b569e7-97f9-4b68-bfe9-385ea334e10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:29:56:13:0c:97:4c:6f:2d:b5:e6:ed:6d:f3:
                    14:1c:07:46:bd:cf:a4:fc:6c:ed:8f:46:14:de:8d:
                    bb:c0:af:f1:09:cc:11:d1:34:0c:84:d8:72:98:5c:
                    e6:33:0f:ee:3f:3c:8e:58:e2:9a:07:f5:45:03:6c:
                    16:d3:d0:e5:b5:8e:17:e7:21:18:f2:dd:ff:fc:41:
                    22:d1:ca:9b:00:a1:44:6c:24:da:68:4d:28:c4:30:
                    49:6c:b7:66:22:42:dd:94:30:e9:f9:29:00:98:75:
                    52:57:98:b9:5a:9b:2a:95:c2:95:ec:da:bb:55:f4:
                    49:a0:85:6f:48:19:a0:8c:12:8f:59:c6:95:8a:8b:
                    dd:a1:79:6d:e7:79:f6:b4:79:01:c9:1a:55:e8:f4:
                    d0:bc:31:b4:a5:e3:f4:39:0d:ed:2c:ca:09:a5:9a:
                    ab:2a:60:12:e7:61:3e:35:57:74:fd:9f:05:ff:b5:
                    88:50:c0:df:ca:44:85:47:27:7c:3c:4e:8e:4d:dd:
                    04:0f:d6:24:2a:63:9b:85:6e:c0:b9:f6:e1:6f:36:
                    0e:0a:98:60:d4:89:ec:ad:e3:f9:9e:7c:a9:63:41:
                    e1:24:97:d9:9a:2a:e8:99:b9:91:41:cc:c4:c8:4d:
                    5b:26:b7:fb:ea:5a:d8:3e:f4:a3:74:68:45:02:dd:
                    6a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6E:0A:DF:E8:68:9B:F8:B1:6B:00:5C:66:36:13:E7:41:22:56:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl

            X509v3 Authority Key Identifier:
                keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c9:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:48:11:93:e9:87:c0:be:7d:ba:d0:39:e4:e9:67:ce:b5:81:
         bd:82:8a:77:e6:40:30:25:a7:d8:08:f9:19:66:64:ba:24:46:
         48:2b:56:07:81:21:4c:68:0b:6b:3c:a7:d7:73:1c:f1:95:3e:
         8c:a0:c8:be:1f:4c:83:1c:d5:b4:54:b0:a3:44:ec:5c:3d:8f:
         95:5e:ab:59:fa:67:f2:6a:37:95:30:40:c9:d9:a1:f7:2e:da:
         7a:e1:3b:ce:74:fb:87:e7:f3:77:48:2d:2d:14:df:56:bb:b3:
         a8:ed:e8:23:45:3f:b9:09:b5:59:e2:0a:fa:3d:c6:a2:97:dc:
         db:49:c9:b0:33:b3:9d:57:e3:69:bb:6d:37:3f:37:ef:ad:11:
         06:f0:17:86:9b:2a:80:5e:92:27:e6:94:88:43:05:83:36:87:
         0c:1a:b0:6d:1c:9e:0d:66:a6:76:52:72:ee:74:5f:c4:fd:1c:
         2e:d6:49:ea:5e:54:1a:f0:63:4c:a4:f4:2e:0a:68:10:7e:70:
         74:96:cf:4c:80:c8:75:b5:c8:5e:47:c1:bb:20:c1:13:26:55:
         96:a9:9b:a1:ab:de:fe:c9:aa:48:f4:05:74:6a:db:aa:85:04:
         2b:d9:0e:5b:a8:47:79:fe:67:46:9a:2c:35:21:ad:81:72:9a:
         58:b1:d9:bf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi0wNOLfI02XPMIEVQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3
ZDcxMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
ZjBiNTY5ZTctOTdmOS00YjY4LWJmZTktMzg1ZWEzMzRlMTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSlWEwyXTG8ttebtbfMUHAdGvc+k/Gztj0YU
3o27wK/xCcwR0TQMhNhymFzmMw/uPzyOWOKaB/VFA2wW09DltY4X5yEY8t3//EEi
0cqbAKFEbCTaaE0oxDBJbLdmIkLdlDDp+SkAmHVSV5i5WpsqlcKV7Nq7VfRJoIVv
SBmgjBKPWcaViovdoXlt53n2tHkByRpV6PTQvDG0peP0OQ3tLMoJpZqrKmAS52E+
NVd0/Z8F/7WIUMDfykSFRyd8PE6OTd0ED9YkKmObhW7AufbhbzYOCphg1InsreP5
nnypY0HhJJfZmirombmRQczEyE1bJrf76lrYPvSjdGhFAt1qYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHtuCt/oaJv4sWsAXGY2E+dBIlaJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk
NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvZTJhNGE0YjMtYmMzMS0z
MWIxLTk0NGUtNGE4YzM4YjliM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0
MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1
N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl
NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALBIEZPph8C+fbrQOeTpZ861gb2CinfmQDAlp9gI+RlmZLokRkgr
VgeBIUxoC2s8p9dzHPGVPoygyL4fTIMc1bRUsKNE7Fw9j5Veq1n6Z/JqN5UwQMnZ
ofcu2nrhO850+4fn83dILS0U31a7s6jt6CNFP7kJtVniCvo9xqKX3NtJybAzs51X
42m7bTc/N++tEQbwF4abKoBekifmlIhDBYM2hwwasG0cng1mpnZScu50X8T9HC7W
SepeVBrwY0yk9C4KaBB+cHSWz0yAyHW1yF5HwbsgwRMmVZapm6Gr3v7Jqkj0BXRq
26qFBCvZDluoR3n+Z0aaLDUhrYFymlix2b8=
-----END CERTIFICATE-----