Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/db3eb550-42cd-3a2a-aec9-ade3790f93c5.roa
File:                     db3eb550-42cd-3a2a-aec9-ade3790f93c5.roa (raw, json)
Hash identifier:          f4X+FZ+o8l9jR7+ZmoLa1+4U+YRsUD+UTVGrdrSr0ag=
Subject key identifier:   14:CD:C8:C2:A9:6C:F0:BF:5B:C1:F7:01:06:3D:E3:0E:34:FA:FC:2F
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584975445759A211677CC9BF2A00
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/db3eb550-42cd-3a2a-aec9-ade3790f93c5.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     18752
IP address blocks:        2607:9700::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:57:59:a2:11:67:7c:c9:bf:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=70246958-9e20-4fd9-abc8-d6aff53bac10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:30:1a:5f:80:3f:18:96:ee:ae:e6:3c:4b:47:
                    66:be:f8:97:11:e8:a0:31:47:da:79:c7:7f:6f:9f:
                    bf:ef:6d:dc:69:b4:53:a5:b0:80:a5:4f:26:10:ca:
                    39:78:42:15:23:6c:2e:76:8e:36:e0:3a:a1:97:04:
                    e1:cb:da:b0:b3:5b:67:82:93:c4:61:02:c6:27:66:
                    00:0e:20:8c:52:88:db:87:db:2c:01:47:d2:7a:87:
                    80:84:e1:4f:21:17:e3:0f:d5:ef:2e:15:a9:08:73:
                    81:d1:9e:13:1f:ae:59:eb:9b:21:ec:dd:6e:74:c3:
                    22:8b:e7:1a:af:7c:6a:38:d1:58:19:1a:2c:67:9e:
                    2f:cc:3c:15:cb:85:11:c8:d7:1d:af:51:b4:dc:cb:
                    19:31:10:21:47:9c:53:7c:b1:74:d1:45:a6:ce:db:
                    6a:c4:67:90:e9:bd:cf:73:c6:74:e1:e1:c9:5e:46:
                    6a:7a:77:ce:1d:97:bd:01:b9:a2:c6:ba:3b:bb:70:
                    44:2f:9b:68:46:7e:33:15:f5:2a:8c:71:4f:bc:48:
                    70:17:2d:4f:7d:c7:25:f5:39:d2:58:07:8c:e8:a6:
                    9b:34:a2:5c:85:9e:8e:38:ff:f1:ea:d5:b7:99:b3:
                    71:08:2c:ef:93:7d:25:39:89:2b:9e:15:29:73:79:
                    b4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CD:C8:C2:A9:6C:F0:BF:5B:C1:F7:01:06:3D:E3:0E:34:FA:FC:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/db3eb550-42cd-3a2a-aec9-ade3790f93c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9700::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:3b:22:e4:23:54:2f:ee:13:8d:ea:8a:12:47:15:00:81:5d:
         44:d2:e9:f0:21:2a:b2:f5:74:ad:c5:d1:ec:df:93:7f:40:d8:
         cb:b4:8c:85:2b:50:10:47:95:62:21:0b:ec:09:0e:cd:d8:82:
         75:6c:a1:ec:0c:42:d9:80:16:ae:c5:ad:b3:11:f4:b4:19:3b:
         d9:95:af:6e:d8:3c:f4:87:27:90:59:fa:81:54:2b:53:bb:5d:
         c6:d2:b1:b1:07:2b:dd:eb:af:b0:22:65:bb:f9:81:26:78:24:
         73:98:77:a4:46:5d:c3:33:e7:2f:6a:ed:c1:2a:12:af:67:da:
         ef:52:2d:34:65:53:42:ef:60:b1:ef:2c:9d:34:c3:8e:e9:c6:
         f7:15:59:f5:7d:85:63:62:3d:7c:58:f6:a1:4a:9e:ba:27:a6:
         35:ee:c8:0b:59:23:72:5f:67:de:e9:51:f8:25:7a:b1:ef:50:
         8e:bf:cb:d3:93:68:49:74:a5:da:14:e0:fb:be:be:08:1d:b5:
         4a:bc:f8:d5:da:14:b2:22:ee:57:b1:51:8e:4f:b1:12:c5:74:
         e5:77:56:47:6d:6f:4e:6c:5b:a3:c8:f9:59:19:61:9c:9b:e7:
         cc:90:37:1d:e1:55:4f:84:6b:0d:f9:fc:ee:98:d1:60:21:01:
         88:d8:97:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----