Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42172cbf-6cf0-3da3-8bfb-394d1f2c48f0.roa
File:                     42172cbf-6cf0-3da3-8bfb-394d1f2c48f0.roa (raw, json)
Hash identifier:          Cp2IdOxRS59r10A4yj3CT92Dt7/Axh6G1CR6YM0gXgY=
Subject key identifier:   7A:74:B4:90:C2:38:12:05:DF:3D:B7:7D:16:9B:C1:55:E6:47:74:1D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849806F2E52862AF8DA34290500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42172cbf-6cf0-3da3-8bfb-394d1f2c48f0.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        2600:1404:8400::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:2e:52:86:2a:f8:da:34:29:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=94e095e7-cc05-466d-874e-497041d872e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a0:66:d8:47:e1:a1:a2:c5:70:35:93:2b:48:
                    a1:ca:0f:28:54:66:7c:e3:18:45:d5:54:42:63:c6:
                    c8:d5:e7:82:f9:e0:7a:53:28:41:18:3f:8a:99:54:
                    e6:d0:fd:f4:8e:c0:cb:8d:e1:7a:43:0b:ea:80:01:
                    b6:6d:5c:5f:fc:b9:40:5e:ff:58:fc:92:83:ee:87:
                    67:7f:79:26:90:5b:50:69:5c:83:54:73:20:55:e3:
                    38:14:b9:a1:08:3e:28:b6:2a:02:35:40:60:b2:08:
                    31:25:ad:11:dc:4c:ba:8c:b5:60:89:16:bf:18:63:
                    bb:2f:da:0e:a6:61:08:fb:81:93:c6:36:c9:66:c3:
                    e8:d2:25:a3:f8:62:1a:7b:00:37:38:e5:3d:ad:2a:
                    57:a1:9b:44:5a:86:81:b5:eb:f3:da:57:82:62:9a:
                    3a:d6:5a:94:6a:2c:bd:10:ea:01:16:29:4e:1d:83:
                    a1:a4:b8:7c:70:d2:e9:53:e5:89:cf:d0:f6:fe:e2:
                    b8:86:f2:38:37:c7:3a:1f:c1:29:c8:68:ac:48:f3:
                    ce:f9:64:a1:b7:1e:9a:c3:a9:99:38:a9:08:cb:2a:
                    df:de:d8:cf:eb:23:f0:7f:f2:14:4a:ca:00:aa:eb:
                    34:b9:c5:e2:c8:91:40:c1:54:64:a3:c9:5f:3c:21:
                    df:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:74:B4:90:C2:38:12:05:DF:3D:B7:7D:16:9B:C1:55:E6:47:74:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42172cbf-6cf0-3da3-8bfb-394d1f2c48f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1404:8400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e3:c7:ae:66:88:03:97:9e:9e:9d:4b:23:34:e8:79:82:cc:
         db:8a:15:68:2f:c4:ab:e0:fc:02:52:9c:d9:28:49:3e:46:92:
         14:8b:6f:01:b7:ab:ba:f5:92:50:3e:96:34:57:46:86:10:06:
         b5:28:28:e7:f8:17:a0:b6:d6:30:84:cc:ce:28:eb:ad:cb:15:
         15:6f:38:1b:81:47:1c:e9:f1:53:25:f5:cd:23:42:f9:73:4f:
         79:5b:4b:17:76:9a:6b:48:b2:d7:24:82:e1:1b:9d:57:cb:7a:
         de:a8:3e:f2:5b:d5:b9:80:a0:1e:d5:6d:5f:86:78:77:28:cd:
         bc:b5:d8:22:f0:5d:43:28:f0:a9:9a:51:7b:c3:ab:6c:4e:6f:
         74:56:af:80:0b:8d:3b:1e:38:f4:7c:23:0d:13:bc:65:b8:a2:
         2a:78:a3:68:9b:b6:c2:21:95:62:c9:a4:d9:26:ca:8d:a3:c6:
         a3:9b:d6:e7:e0:61:21:e4:34:a9:4a:76:02:c9:6b:57:ff:c1:
         ca:d9:3f:9c:70:cf:6c:66:4d:b4:c9:2a:9e:91:95:43:34:d5:
         f2:5d:ff:1d:51:24:d9:29:86:fd:0f:1a:42:18:99:d4:af:cd:
         ac:11:23:9c:e4:be:c1:b9:f4:4a:fb:80:05:3a:a3:63:c0:0e:
         dd:8b:ff:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----