Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c432216-bd6c-3f90-a94b-9ad80710daa1.roa
File:                     5c432216-bd6c-3f90-a94b-9ad80710daa1.roa (raw, json)
Hash identifier:          Jhkas9tX91x1OLgl7C/+5GU5wevmGgKo/iv5edRkkZs=
Subject key identifier:   B9:9F:94:19:EA:92:EE:5B:00:66:88:19:39:02:D8:29:69:B6:15:C8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858497F09A9473D537CEDB7BF6400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c432216-bd6c-3f90-a94b-9ad80710daa1.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     20940
IP address blocks:        2600:1402:b800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:a9:47:3d:53:7c:ed:b7:bf:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=f70e68b6-6a8e-4d0a-a399-317346b451e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c2:bf:17:c9:0c:43:d0:c3:05:4c:56:29:dd:
                    00:7f:f5:6c:ce:90:73:39:dc:bd:1e:49:cb:bd:52:
                    4b:87:56:ee:ff:bb:85:48:20:2d:a9:3e:72:70:0e:
                    62:44:6e:b5:2b:77:10:fb:89:32:69:42:03:db:4f:
                    e1:bf:2a:48:97:d5:cc:c1:4c:32:69:81:0d:8b:93:
                    aa:22:ca:51:97:19:6b:e4:9e:53:fc:39:05:db:40:
                    01:a4:0c:5b:e7:a7:15:72:6c:dd:03:fe:96:3c:48:
                    1a:17:3b:69:91:a9:90:c9:21:55:dc:dc:f1:62:78:
                    ad:66:5f:44:3f:f8:e5:0e:76:43:4b:e7:20:80:76:
                    8b:8e:12:7f:bb:ae:a8:16:2e:aa:2b:3b:87:cb:c4:
                    00:84:40:0e:09:7f:bd:1e:c9:7a:a7:ea:f3:42:0f:
                    ee:f6:07:05:bd:5a:47:c9:16:6e:ef:f8:0e:ea:8d:
                    6a:51:d8:83:2c:5d:c2:f7:a3:fb:a7:41:a5:b1:e3:
                    19:3d:03:16:ce:c8:cd:dd:aa:cb:fe:79:b4:2e:c3:
                    fd:f5:11:b1:e8:d1:ce:94:b4:83:1f:c3:7f:d0:44:
                    3f:5c:f1:ac:fb:a3:11:1a:39:32:c2:96:6e:50:5f:
                    6a:0b:7c:64:e6:46:8a:da:f1:97:3c:60:40:bd:05:
                    49:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9F:94:19:EA:92:EE:5B:00:66:88:19:39:02:D8:29:69:B6:15:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c432216-bd6c-3f90-a94b-9ad80710daa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1402:b800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:2d:5c:57:41:f4:8c:d3:d1:bf:72:a9:a0:cf:09:57:bc:fa:
         4a:40:5d:26:f1:fe:9d:0f:3b:95:a3:b8:e4:8d:59:d2:95:ad:
         54:0b:db:1d:39:27:b3:7c:9d:39:6e:6d:d8:3a:ee:25:21:d1:
         db:9d:ce:aa:f4:23:28:dd:b2:1d:81:51:b0:d3:c2:70:52:f2:
         6b:eb:a5:cc:37:d8:29:8a:6a:71:85:5c:16:56:1b:f3:c0:2c:
         82:9c:b2:23:dd:9e:cd:3b:6a:96:3d:78:86:a5:44:b2:60:86:
         95:63:91:cd:63:5f:80:6f:4e:81:78:dc:bb:87:9b:fa:b1:95:
         c4:f5:2d:b5:17:84:5e:f2:b3:31:1d:1d:68:6c:77:59:67:e6:
         cb:48:1a:f2:27:ce:31:1d:78:fc:5c:40:52:d6:79:49:6b:79:
         2b:ba:c7:7c:4c:04:8a:88:c7:bd:d3:45:75:ba:81:56:33:10:
         5c:98:3c:d3:db:1a:86:a9:2a:d1:86:74:d4:1b:69:99:9c:d3:
         56:5b:a8:ba:ae:cb:15:01:3d:ac:86:8d:a8:95:d2:38:6f:fb:
         22:f1:a6:86:ab:55:31:fc:ff:e7:cc:b8:33:f9:17:04:36:d2:
         9d:53:87:03:8c:7d:a7:4c:82:58:e4:4b:0a:25:fd:53:74:3f:
         0e:d9:ad:18
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl/CalHPVN87be/ZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk
ZjcwZTY4YjYtNmE4ZS00ZDBhLWEzOTktMzE3MzQ2YjQ1MWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMK/F8kMQ9DDBUxWKd0Af/VszpBzOdy9HknL
vVJLh1bu/7uFSCAtqT5ycA5iRG61K3cQ+4kyaUID20/hvypIl9XMwUwyaYENi5Oq
IspRlxlr5J5T/DkF20ABpAxb56cVcmzdA/6WPEgaFztpkamQySFV3NzxYnitZl9E
P/jlDnZDS+cggHaLjhJ/u66oFi6qKzuHy8QAhEAOCX+9Hsl6p+rzQg/u9gcFvVpH
yRZu7/gO6o1qUdiDLF3C96P7p0GlseMZPQMWzsjN3arL/nm0LsP99RGx6NHOlLSD
H8N/0EQ/XPGs+6MRGjkywpZuUF9qC3xk5kaK2vGXPGBAvQVJfQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLmflBnqku5bAGaIGTkC2ClpthXIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWM0MzIyMTYtYmQ2Yy0z
ZjkwLWE5NGItOWFkODA3MTBkYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUArgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGgtXFdB9IzT0b9yqaDPCVe8+kpAXSbx/p0PO5WjuOSNWdKVrVQL
2x05J7N8nTlubdg67iUh0dudzqr0Iyjdsh2BUbDTwnBS8mvrpcw32CmKanGFXBZW
G/PALIKcsiPdns07apY9eIalRLJghpVjkc1jX4BvToF43LuHm/qxlcT1LbUXhF7y
szEdHWhsd1ln5stIGvInzjEdePxcQFLWeUlreSu6x3xMBIqIx73TRXW6gVYzEFyY
PNPbGoapKtGGdNQbaZmc01ZbqLquyxUBPayGjaiV0jhv+yLxpoarVTH8/+fMuDP5
FwQ20p1ThwOMfadMgljkSwol/VN0Pw7ZrRg=
-----END CERTIFICATE-----