Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a95e7eaa-bffe-3f7a-b89b-0e3822b29621.roa
File:                     a95e7eaa-bffe-3f7a-b89b-0e3822b29621.roa (raw, json)
Hash identifier:          wwTh5+YPd2575Q2kevjFL6qHM7P1uBkaZ94git0toyU=
Subject key identifier:   33:24:7B:3D:54:83:C9:6D:F4:AA:5C:20:B8:E6:76:70:CE:80:E5:C2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849806F2DA0AE554F273217DF40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a95e7eaa-bffe-3f7a-b89b-0e3822b29621.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        2600:1419:4600::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:2d:a0:ae:55:4f:27:32:17:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=e7a7d136-1ed4-45a7-9648-7789f3067c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d8:95:6b:83:da:a0:3a:df:60:c7:1c:4e:14:
                    a7:1d:45:c8:88:52:42:d9:70:8b:a1:5e:4a:4b:ce:
                    bc:d7:be:18:21:de:9e:4f:5f:fc:c2:71:1c:f9:1e:
                    ec:eb:0d:50:91:18:8b:1c:2d:18:82:ed:a1:a9:ca:
                    77:21:ed:56:36:f9:a0:1e:ff:86:a8:55:62:bd:b0:
                    7d:34:8c:8f:a8:68:94:87:66:38:ab:8e:a3:00:2d:
                    8e:4a:9f:86:33:6f:5b:de:56:c0:e5:99:16:4a:b7:
                    d1:fc:0e:01:49:91:22:3a:ec:bc:cc:5e:0a:04:69:
                    2c:74:2a:97:ed:14:19:54:1a:fa:24:bd:27:c0:de:
                    bd:ff:28:95:8c:36:d5:c0:bb:00:1b:3b:40:44:e5:
                    e7:e9:2a:c8:92:6e:77:ff:00:a7:e6:4e:82:65:a6:
                    1c:74:3d:42:b0:0a:28:27:eb:ed:e5:87:bd:6a:6c:
                    76:92:63:89:c6:30:87:de:f3:ed:9e:84:71:bc:a3:
                    7d:5b:a6:a0:dd:13:91:20:50:aa:27:bc:7c:06:b0:
                    0f:50:df:53:e4:2a:d4:b2:be:61:e8:9c:5c:fa:4d:
                    03:25:8a:2b:e3:81:80:e4:d8:73:8a:94:c9:39:87:
                    89:56:2f:54:d3:83:f7:01:5e:07:5b:5e:fb:66:01:
                    3a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:24:7B:3D:54:83:C9:6D:F4:AA:5C:20:B8:E6:76:70:CE:80:E5:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a95e7eaa-bffe-3f7a-b89b-0e3822b29621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1419:4600::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a6:45:ec:e5:1d:fb:40:45:58:55:e0:6a:67:89:bb:e9:71:
         95:58:f9:cb:a8:73:60:00:2d:83:a0:64:db:d1:61:87:ce:7a:
         a7:10:c1:03:a4:d9:38:f9:e8:20:ba:e4:74:13:ee:29:bb:c2:
         af:97:2e:58:db:83:a4:68:4d:a3:2b:58:68:22:15:2c:46:86:
         06:c3:a9:1c:31:36:56:92:23:fb:2b:7d:0d:44:8f:c1:63:d0:
         11:08:22:2d:be:68:45:83:9b:a4:97:71:d6:0c:c2:35:e4:d6:
         98:a4:f5:0c:a0:9f:8a:e3:49:59:f1:bb:3b:48:46:46:64:58:
         18:fb:3e:42:5a:71:00:e8:6a:f0:85:55:b5:07:32:fc:6b:eb:
         35:bf:74:97:60:62:6a:1a:b8:16:d6:4f:70:8f:b7:78:09:95:
         91:17:f4:a9:1c:04:e9:81:18:1f:f8:43:bd:34:bd:58:0d:4c:
         4e:27:1c:3f:4a:29:8e:0f:a7:03:00:fb:ec:d7:3a:ea:6b:1a:
         bf:a3:34:39:85:bf:19:53:43:9e:3e:b3:ec:dd:44:19:6f:68:
         77:97:8b:ec:8f:96:fc:cf:c6:d9:45:78:f2:0d:2c:68:d8:46:
         65:7c:04:15:b8:d2:a3:a4:31:26:d8:77:59:21:99:e5:c9:c8:
         41:c6:d9:a5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAby2grlVPJzIX30AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk
ZTdhN2QxMzYtMWVkNC00NWE3LTk2NDgtNzc4OWYzMDY3YzU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtiVa4PaoDrfYMccThSnHUXIiFJC2XCLoV5K
S868174YId6eT1/8wnEc+R7s6w1QkRiLHC0Ygu2hqcp3Ie1WNvmgHv+GqFVivbB9
NIyPqGiUh2Y4q46jAC2OSp+GM29b3lbA5ZkWSrfR/A4BSZEiOuy8zF4KBGksdCqX
7RQZVBr6JL0nwN69/yiVjDbVwLsAGztAROXn6SrIkm53/wCn5k6CZaYcdD1CsAoo
J+vt5Ye9amx2kmOJxjCH3vPtnoRxvKN9W6ag3RORIFCqJ7x8BrAPUN9T5CrUsr5h
6Jxc+k0DJYor44GA5NhzipTJOYeJVi9U04P3AV4HW177ZgE6PQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDMkez1Ug8lt9KpcILjmdnDOgOXCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTk1ZTdlYWEtYmZmZS0z
ZjdhLWI4OWItMGUzODIyYjI5NjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGUYA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACqmRezlHftARVhV4GpnibvpcZVY+cuoc2AALYOgZNvRYYfOeqcQ
wQOk2Tj56CC65HQT7im7wq+XLljbg6RoTaMrWGgiFSxGhgbDqRwxNlaSI/srfQ1E
j8Fj0BEIIi2+aEWDm6SXcdYMwjXk1pik9Qygn4rjSVnxuztIRkZkWBj7PkJacQDo
avCFVbUHMvxr6zW/dJdgYmoauBbWT3CPt3gJlZEX9KkcBOmBGB/4Q700vVgNTE4n
HD9KKY4PpwMA++zXOuprGr+jNDmFvxlTQ54+s+zdRBlvaHeXi+yPlvzPxtlFePIN
LGjYRmV8BBW40qOkMSbYd1khmeXJyEHG2aU=
-----END CERTIFICATE-----