Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/71b83ec4-78b1-3f7e-b800-7136d3f2784e.roa
File:                     71b83ec4-78b1-3f7e-b800-7136d3f2784e.roa (raw, json)
Hash identifier:          CcGcMondPphBXGwtDXuloff6AdzVvqXCZGhTFz2QgrU=
Subject key identifier:   9A:59:53:61:45:9D:9B:68:5F:9D:D0:5D:F8:0E:89:D5:D8:06:2E:81
Certificate issuer:       /CN=26f87379-b07b-41fb-8976-6fd9e7149fda
Certificate serial:       010D0C9F43285848E59BBE21FDD7DD7BE2892E60
Authority key identifier: B3:E3:8B:C0:B5:ED:73:06:2C:85:6C:E9:D3:69:C8:9E:A9:E3:DB:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/71b83ec4-78b1-3f7e-b800-7136d3f2784e.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     19016
IP address blocks:        2607::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:be:21:fd:d7:dd:7b:e2:89:2e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f87379-b07b-41fb-8976-6fd9e7149fda
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=4bb2c73d-5f9d-4879-ba74-b90223f35cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4a:ca:7c:f4:5e:79:c6:50:0b:9d:a9:c8:81:
                    ea:91:5c:12:05:20:7a:35:77:c6:94:4b:58:8d:03:
                    c0:09:96:2b:7a:23:70:33:77:1d:d4:43:18:5a:e2:
                    ba:31:34:89:47:a2:62:78:f2:ea:ce:26:71:19:1a:
                    ab:96:89:61:4b:06:49:e6:e6:c6:e2:cc:b9:03:88:
                    5d:ec:bd:85:20:04:4e:1b:3e:2b:9a:3a:ab:c3:34:
                    c1:b7:5b:92:c9:d5:b4:a1:d6:e4:03:64:c6:1f:ea:
                    90:b6:57:fb:42:65:11:4d:24:dd:d9:06:d2:ee:06:
                    63:34:73:41:28:c0:50:97:50:8a:7e:dc:b7:15:50:
                    6f:90:23:33:2d:00:69:18:f9:c3:85:b1:e6:e8:4f:
                    32:f7:c5:32:db:a3:11:b8:3b:94:a3:ce:68:74:1d:
                    a2:b2:35:66:c9:e1:0e:a0:b4:2b:f8:b7:23:1c:78:
                    52:e5:3c:4b:78:0e:68:e6:fc:a6:d3:b1:6f:98:e8:
                    8c:91:35:09:aa:e5:af:e3:f9:f6:d2:72:be:be:38:
                    1f:73:f5:d1:05:6a:9a:14:6a:e2:82:b0:66:df:c2:
                    73:35:d6:e3:0e:ba:b0:59:13:a9:1c:2b:52:e2:9c:
                    87:8b:ef:4a:e4:1b:fa:96:67:0d:45:4f:18:c6:f3:
                    d4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:59:53:61:45:9D:9B:68:5F:9D:D0:5D:F8:0E:89:D5:D8:06:2E:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/71b83ec4-78b1-3f7e-b800-7136d3f2784e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/26f87379-b07b-41fb-8976-6fd9e7149fda.crl

            X509v3 Authority Key Identifier:
                keyid:B3:E3:8B:C0:B5:ED:73:06:2C:85:6C:E9:D3:69:C8:9E:A9:E3:DB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:2a:92:74:0c:f3:aa:69:4c:9f:28:df:90:c7:e9:61:19:ad:
         0f:3b:d3:6d:33:e8:c8:6a:5f:8a:03:a9:f4:5a:c8:b2:75:c7:
         a0:87:e9:af:e9:a2:56:50:6a:5c:bc:73:2b:97:58:08:6f:f2:
         fe:7b:8a:d9:b1:1a:f7:c1:e4:d2:33:99:9c:99:86:d1:ad:cf:
         66:92:c6:c0:0c:af:3f:ba:e3:bf:30:c2:75:d4:94:b6:31:86:
         01:7d:3e:ee:b4:28:9d:4f:ae:93:4c:24:c3:ed:ef:e2:42:8f:
         96:15:0d:96:27:fb:ae:64:5b:99:aa:b4:a6:b6:94:41:09:81:
         9f:94:80:49:b3:eb:fb:4f:7c:04:7a:dd:4f:a9:de:b2:70:a3:
         7d:14:ee:d3:7f:2b:97:f6:e1:06:dd:06:85:89:ae:14:2b:c2:
         dc:4e:93:91:d0:a8:2f:51:32:15:5d:0c:42:7b:84:60:20:29:
         bc:6e:b5:4b:55:8c:af:c5:42:31:4a:63:12:c1:6c:76:e5:0b:
         e6:9a:7b:fd:51:c0:93:be:49:3e:9a:c0:1d:e1:c0:24:dd:39:
         0e:ff:8e:da:08:f6:6e:12:d9:0a:fd:5c:15:61:2c:67:31:f8:
         ba:1f:a0:aa:df:38:d4:c3:04:65:8c:35:8a:b0:5f:60:c7:f4:
         4c:0c:e3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----