Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa
File:                     2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa (raw, json)
Hash identifier:          pjFJSXQZsxgu3xRGm04q4FOY4aIofCLB9LKqLMOG+vA=
Subject key identifier:   5A:D8:B9:AD:E9:BD:8B:CC:67:82:CF:43:2A:B0:3C:B3:BD:5A:E8:38
Certificate issuer:       /CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
Certificate serial:       010D0C9F432858494A294440F06951A6A9D1CB00
Authority key identifier: 78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa
Signing time:             Mon 24 Mar 2025 02:26:47 +0000
ROA not before:           Mon 24 Mar 2025 02:26:47 +0000
ROA not after:            Sun 22 Jun 2025 02:26:47 +0000
asID:                     11832
IP address blocks:        2602:f6b1:1::/48 maxlen: 48
                          2602:f6b1:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4a:29:44:40:f0:69:51:a6:a9:d1:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
        Validity
            Not Before: Mar 24 02:26:47 2025 GMT
            Not After : Jun 22 02:26:47 2025 GMT
        Subject: CN=63977ea9-66e1-49d9-81ce-2f1ed77b64ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2d:25:b2:dd:b8:af:22:d7:75:3c:3e:3b:bc:
                    80:16:8a:bb:ad:e2:93:65:e9:98:02:98:87:50:cd:
                    28:9a:c6:7f:10:94:60:d0:3b:5a:cd:33:38:4f:43:
                    b5:97:d2:e3:c8:f3:14:40:1a:ec:18:ad:30:50:9a:
                    d3:ea:4a:4c:e4:ab:3d:0f:08:21:91:01:8d:41:db:
                    11:56:73:c8:37:46:8b:2f:37:2b:6c:c9:57:72:9f:
                    28:4a:91:ab:18:39:a8:52:da:c6:07:63:17:28:31:
                    94:0a:25:58:33:b9:c4:90:28:41:39:a2:07:00:30:
                    c7:79:1c:9f:d2:60:7f:ec:19:22:e8:f6:e4:aa:9c:
                    d2:3e:25:c6:48:72:1e:bd:96:73:ed:49:07:7b:69:
                    8d:54:bd:b3:6a:77:0a:d7:a1:b4:c4:92:22:70:3d:
                    8a:11:53:27:94:d4:4a:7e:af:7d:d4:97:bf:c0:71:
                    01:07:68:7f:1e:02:52:0d:32:05:d7:73:f4:1d:82:
                    f5:62:f1:87:54:b8:cd:04:a8:73:3a:01:8f:7d:f3:
                    09:34:b3:06:c4:0c:70:ac:2b:0d:79:fc:4b:f3:6f:
                    2f:d8:33:c5:16:56:3d:fa:9e:f7:f1:ac:0b:7b:3d:
                    ac:17:78:18:d6:ff:f7:43:ce:93:57:bd:2b:ec:eb:
                    37:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D8:B9:AD:E9:BD:8B:CC:67:82:CF:43:2A:B0:3C:B3:BD:5A:E8:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl

            X509v3 Authority Key Identifier:
                keyid:78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6b1:1::-2602:f6b1:2:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:b6:55:2e:8c:6c:c7:ce:0f:a8:31:c0:2a:c9:cb:26:1a:44:
         58:d4:f9:db:dd:17:fa:f1:e0:5f:6d:1d:5e:c0:a8:58:13:5d:
         30:61:b0:92:30:ff:7d:83:37:f5:98:62:c8:18:3b:5c:af:3f:
         9b:08:8c:c1:8a:98:f0:1b:9c:10:74:54:8e:82:9c:f5:2a:96:
         d4:64:99:41:c8:87:ef:1e:27:9a:0c:e7:68:5e:cc:07:da:6e:
         14:17:63:9e:9f:9b:95:8d:46:24:07:03:ae:16:bc:d9:73:d8:
         6e:41:0d:44:78:43:3a:0f:f8:e9:27:39:e2:40:e7:16:03:89:
         92:41:ac:e9:0f:d6:48:a1:1b:dc:53:c3:dc:43:50:92:61:70:
         2c:13:95:f4:b4:dd:19:30:99:5a:f8:fd:dc:ab:b6:ef:e1:45:
         6a:5e:6c:06:e3:22:8f:66:55:b8:e6:02:94:ba:c5:1d:4d:5e:
         d2:da:8d:10:00:4e:6e:94:0d:87:b0:cd:78:f9:41:d8:56:52:
         98:a0:2d:9a:95:ee:d8:f7:24:e1:0c:3f:27:37:12:80:21:9c:
         09:a6:b1:84:2d:63:1e:c2:f2:45:9f:ad:33:0b:73:18:87:40:
         75:19:bd:9c:f0:89:1b:b2:f7:0e:20:62:25:e2:11:27:45:71:
         90:40:8c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----