Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/39d37bab-e9cc-3fec-86ef-a7daf491525a.roa
File:                     39d37bab-e9cc-3fec-86ef-a7daf491525a.roa (raw, json)
Hash identifier:          J0kyeavERDmTLsRaDorUOf673NglJSt4dBL6k4nBJ5k=
Subject key identifier:   0C:10:0F:06:80:A6:5E:56:1A:DA:DE:CF:92:92:27:D5:85:9F:EC:71
Certificate issuer:       /CN=8de2686c-f2c7-4e46-bfb3-85a78f602984
Certificate serial:       010D0C9F43285849691E1FFF0B3425F548F03E00
Authority key identifier: 26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/39d37bab-e9cc-3fec-86ef-a7daf491525a.roa
Signing time:             Fri 04 Apr 2025 04:34:24 +0000
ROA not before:           Fri 04 Apr 2025 04:34:24 +0000
ROA not after:            Thu 03 Jul 2025 04:34:24 +0000
asID:                     14618
IP address blocks:        2602:f6fc::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:69:1e:1f:ff:0b:34:25:f5:48:f0:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8de2686c-f2c7-4e46-bfb3-85a78f602984
        Validity
            Not Before: Apr  4 04:34:24 2025 GMT
            Not After : Jul  3 04:34:24 2025 GMT
        Subject: CN=3a722898-981e-4ecc-95cd-b8c1c09130b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:1a:dd:72:65:46:0a:1f:17:26:48:84:62:
                    9c:1d:7f:0f:7e:ce:a2:82:43:ad:fc:ae:76:b9:48:
                    13:75:cd:12:0f:7c:da:d9:45:d1:37:cb:2f:87:cd:
                    02:23:b3:e4:d8:71:a3:ae:8e:a7:dc:8c:2f:c2:fb:
                    66:7e:a4:19:a4:cb:d2:d9:91:bc:9c:fe:5d:63:01:
                    bb:da:28:13:ce:06:32:86:0a:fe:9b:be:98:a7:54:
                    00:de:07:bc:dc:1f:d2:74:a3:51:4c:0f:63:5a:89:
                    27:14:81:ef:ec:9b:a2:b6:43:db:6d:cf:53:e1:75:
                    1e:96:38:09:e0:4b:fc:83:ac:fe:d7:f9:8d:a5:f5:
                    d3:3e:7d:87:ed:46:bf:3a:bd:4f:8b:bf:e8:26:71:
                    48:50:25:6e:96:37:f1:6a:5f:b3:21:9d:ca:bd:2a:
                    74:6b:b9:51:38:f4:79:ec:14:5c:21:c8:90:cf:38:
                    98:45:26:72:2f:de:05:95:51:3b:41:eb:14:96:3a:
                    7c:34:20:32:ea:67:48:ea:d3:1d:41:67:31:3c:08:
                    02:e0:a7:8f:8f:28:f2:56:57:ef:4d:32:01:77:9b:
                    72:a1:c9:f1:89:7e:80:ba:7b:1c:ee:11:e3:9b:da:
                    3e:67:7d:5f:ce:a2:f9:43:d8:fd:fc:eb:55:96:9a:
                    e5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:10:0F:06:80:A6:5E:56:1A:DA:DE:CF:92:92:27:D5:85:9F:EC:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/39d37bab-e9cc-3fec-86ef-a7daf491525a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.crl

            X509v3 Authority Key Identifier:
                keyid:26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6fc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:44:21:aa:bf:7f:b2:18:03:3a:ae:c6:24:37:f3:e9:e8:e0:
         ad:5e:0b:d6:05:c8:46:ec:f5:fd:0a:04:73:26:74:66:81:18:
         e1:35:05:1f:9e:ed:33:07:69:78:1d:13:06:fc:f6:8d:0d:84:
         81:5c:44:79:26:37:3c:33:93:eb:30:d0:7e:52:6f:be:10:c8:
         0b:54:0e:14:ea:19:87:f6:94:e1:88:38:d3:c2:f2:21:d4:84:
         9a:25:20:07:62:76:1c:4d:09:5d:58:fa:ce:be:ea:51:f9:fa:
         2a:22:d5:2f:9e:79:0d:1f:f1:68:06:8a:91:50:cc:51:ed:24:
         63:2f:0a:74:bc:8d:6d:5b:9d:8b:85:22:5d:e3:45:cc:8d:09:
         dd:34:4b:1f:6b:dd:3f:c2:17:76:4d:33:28:d8:1f:7e:7c:87:
         e7:07:55:44:0d:34:64:59:99:57:56:cb:0c:10:4b:47:f1:64:
         00:fa:d6:ac:a2:9a:4b:29:62:54:73:31:e7:f0:ae:86:57:ca:
         99:2d:f8:4a:64:aa:3e:90:ee:c8:34:03:dc:56:e2:f2:b7:0b:
         08:62:d6:93:21:a5:65:bc:ef:ee:33:1d:65:6a:0e:db:f7:ce:
         a5:3d:77:a4:b4:b5:bc:b2:79:d9:51:eb:34:13:d5:dc:dc:2e:
         ea:a5:79:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----