Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/76d48b7b-0b72-3000-a9a4-f62f96a9ec81.roa
File:                     76d48b7b-0b72-3000-a9a4-f62f96a9ec81.roa (raw, json)
Hash identifier:          6kn7/hgmqj+lyChPFFlpmxfram+kcaT3Vg3yZAMByMA=
Subject key identifier:   86:C8:CE:BB:49:9C:3A:B0:12:42:A3:70:0D:A6:86:49:CE:00:33:36
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849192D158B24E6AC48C9F623C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/76d48b7b-0b72-3000-a9a4-f62f96a9ec81.roa
Signing time:             Thu 06 Mar 2025 13:19:52 +0000
ROA not before:           Thu 06 Mar 2025 13:19:52 +0000
ROA not after:            Wed 04 Jun 2025 12:19:52 +0000
asID:                     207266
IP address blocks:        2001:500:41::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:2d:15:8b:24:e6:ac:48:c9:f6:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar  6 13:19:52 2025 GMT
            Not After : Jun  4 12:19:52 2025 GMT
        Subject: CN=7f587f81-2d05-4e49-a724-b08cc99d35fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5b:d6:4c:05:54:a5:a6:5b:17:4a:b4:48:80:
                    e8:a0:60:02:80:c0:a9:be:a5:e9:70:ab:e3:ac:9a:
                    c7:00:20:27:f8:f8:9b:74:f9:14:ce:a3:b3:a2:f3:
                    5a:be:ed:9d:06:c3:fd:a6:93:94:55:ea:66:ba:20:
                    c3:e1:5b:62:33:43:c3:9a:fa:01:28:a9:07:36:10:
                    0c:92:c0:04:37:cd:8a:a8:2a:85:86:a8:f5:aa:2b:
                    3f:58:1a:e6:e2:ca:3f:bd:89:41:e6:be:89:17:8b:
                    26:52:2e:5f:2d:69:5c:f2:5e:95:5d:e1:9b:d3:39:
                    34:8e:bf:91:25:e4:fb:33:4e:6c:cf:67:9d:ca:89:
                    f5:a7:38:5f:2f:46:57:ac:e4:d2:1c:4b:2a:63:5b:
                    69:4a:7a:8b:51:96:5e:6c:da:32:3c:a0:1e:22:c0:
                    13:c2:97:3f:56:2d:f0:ac:46:75:19:d2:e3:b4:ed:
                    57:74:51:18:41:78:c1:2d:9a:56:5a:ac:1b:45:54:
                    ba:90:4b:7a:3f:e5:03:66:76:08:87:93:65:52:e5:
                    55:c3:9b:c6:45:51:69:a2:96:41:00:2f:e8:ac:c4:
                    f9:40:31:50:db:c3:b8:83:3a:8c:a4:9c:f1:b3:6a:
                    3b:1f:d9:82:9a:3e:78:fe:2b:9a:12:2d:db:47:c4:
                    2f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C8:CE:BB:49:9C:3A:B0:12:42:A3:70:0D:A6:86:49:CE:00:33:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/76d48b7b-0b72-3000-a9a4-f62f96a9ec81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:51:c8:12:f5:b2:c6:3d:16:2e:51:d1:64:9b:93:df:71:90:
         83:db:c4:0d:f9:9a:23:19:b5:9a:b5:92:0b:19:d2:e9:3c:0e:
         40:88:f4:1d:6d:76:50:9a:3e:3f:e4:0f:91:4c:93:1c:23:50:
         3e:02:74:78:6c:7a:b6:32:3d:7b:59:e6:6f:ab:74:e6:2a:a8:
         96:38:f4:c1:11:d5:af:35:84:35:94:51:9f:69:94:ef:0a:1f:
         7b:3a:46:ba:88:56:44:72:39:de:8c:dd:72:c9:60:a7:16:74:
         5d:49:35:8d:de:ea:1e:aa:d5:53:78:83:f0:eb:38:27:3c:b3:
         c8:e3:8e:92:0d:f6:a9:86:f1:b5:7b:b8:8b:03:13:cd:22:3c:
         3d:5a:84:3d:c3:05:b6:b5:fd:7d:45:f8:f0:08:0c:26:ae:fa:
         df:dd:73:1a:e9:e7:47:85:dc:9d:70:e1:2a:09:12:24:77:0a:
         03:d8:0b:e4:05:64:7b:d2:35:b7:85:32:41:d1:3c:c4:4e:40:
         9d:f4:02:c6:ee:8b:85:fa:30:44:6a:9a:86:72:6f:9e:cb:05:
         a2:0f:cc:31:1f:4e:20:4f:86:af:86:dc:98:6a:1e:c2:b6:8f:
         e4:ac:79:64:52:f9:ac:04:83:86:e8:29:48:ea:25:0e:b3:43:
         6a:ac:81:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----