Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/a26963c2-c1dd-33b2-942d-0b6b92224b05.roa
File:                     a26963c2-c1dd-33b2-942d-0b6b92224b05.roa (raw, json)
Hash identifier:          KvQ01b2Co4PX6imhYGf68O6F/ZDAC3pidyOWAidfg14=
Subject key identifier:   86:E2:56:BB:4F:4B:13:14:27:E2:8F:2E:47:58:CF:B4:A3:E5:76:2D
Certificate issuer:       /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial:       010D0C9F432858494B6409917AE84E0E67DAD080
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/a26963c2-c1dd-33b2-942d-0b6b92224b05.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     16509
IP address blocks:        2631:2000::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:09:91:7a:e8:4e:0e:67:da:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=426c4796-945c-4333-a252-1c0948f11657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cb:e2:cd:9f:1a:b0:41:79:86:2a:d5:2a:0e:
                    d3:c7:e1:17:96:f2:8c:5d:0f:ca:81:67:e9:bd:f7:
                    28:b2:9e:3d:a1:34:b1:10:5c:49:92:26:5f:db:d0:
                    0b:aa:43:62:de:46:3a:5d:b1:83:83:8a:24:89:e4:
                    ce:85:b7:43:60:b9:0a:9c:06:e1:b3:af:0d:12:9a:
                    a7:b7:4d:86:cb:15:df:0f:63:93:f7:bc:a5:75:0a:
                    66:99:2b:23:4c:a7:b2:a1:58:ea:a4:c5:42:3c:64:
                    a7:fb:b4:2c:9d:84:01:35:9a:6f:02:28:93:90:0e:
                    a9:e2:97:f8:d6:94:c7:10:e6:9b:12:e2:94:05:72:
                    9c:b7:41:4f:ce:90:e9:02:f8:bc:38:bb:79:5a:69:
                    e2:47:95:ac:b0:bd:0e:85:e8:04:8f:53:bf:e1:2c:
                    e7:4b:30:ca:59:a6:b8:58:97:0d:09:9f:c9:40:40:
                    11:f5:87:45:9a:d4:d5:84:a8:82:84:48:4d:ae:c3:
                    71:d3:34:7b:fb:75:23:30:30:d3:b8:3f:02:83:bb:
                    a8:a6:86:c5:e0:da:de:31:a4:26:65:5d:ef:2a:1e:
                    58:1f:7c:8b:f2:da:e1:16:1f:26:ed:16:3c:c4:79:
                    c6:ed:a4:73:f5:ab:02:e4:76:c9:2b:f2:20:b2:2b:
                    bf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E2:56:BB:4F:4B:13:14:27:E2:8F:2E:47:58:CF:B4:A3:E5:76:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/a26963c2-c1dd-33b2-942d-0b6b92224b05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl

            X509v3 Authority Key Identifier:
                keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631:2000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:1e:be:a8:aa:a3:d8:fe:c1:58:73:af:5c:a6:36:6f:90:d8:
         6f:fa:fe:f5:b2:b7:d5:31:c0:ea:bd:97:7b:72:3d:7c:6b:df:
         c1:c8:2d:60:cd:c2:fc:dc:a8:1b:ff:01:b7:09:a7:6e:47:b2:
         b6:c6:31:ab:2a:ab:09:fd:6d:b2:a0:d4:0a:96:26:67:f0:29:
         07:68:c7:32:0e:87:88:14:95:48:14:cc:ab:36:ec:bd:81:6d:
         a0:b6:e0:5f:c3:42:dc:2d:4b:eb:94:43:61:f9:36:ec:f3:4a:
         cf:0e:db:63:d6:fa:4c:b0:00:ce:85:bd:70:2d:fd:1f:3d:f7:
         0d:d1:d2:5c:a1:9a:a5:b0:8b:4a:88:b1:b9:0b:63:bb:64:e4:
         df:42:d9:8f:1d:3c:00:93:f5:66:97:1e:39:f1:68:ee:71:f9:
         ee:fb:a9:40:18:e6:ca:01:18:ce:39:b4:81:a5:a9:af:93:60:
         ee:1c:e1:41:28:34:d6:78:76:82:4a:9b:97:a3:90:e9:d8:74:
         54:46:ab:02:91:d9:ca:4f:1d:b6:7f:f3:36:6e:f1:44:e7:7f:
         49:61:35:13:7e:6a:8d:2a:7b:c5:51:e8:e4:06:50:9f:ee:74:
         c1:6f:bf:6c:e9:d2:80:ec:6c:05:6e:90:03:1d:76:16:86:3e:
         62:ef:34:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----