Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf96aa55-a414-3442-918f-e8173dc75f78.roa
File:                     bf96aa55-a414-3442-918f-e8173dc75f78.roa (raw, json)
Hash identifier:          n/W2HRht4Wx8QyI+3DEEeDg0Q5kdeoHlFrQ/fjlOyPA=
Subject key identifier:   47:E5:76:19:48:53:94:AE:27:45:0A:EF:4F:50:0E:07:02:41:32:1C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849806F2F8CF017D25E5568B680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf96aa55-a414-3442-918f-e8173dc75f78.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        2600:1406:7800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:2f:8c:f0:17:d2:5e:55:68:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=d946062f-ae38-4c1b-9712-9c9284d78f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:64:75:88:98:cc:bd:6f:96:3f:a6:be:a2:1e:
                    38:7f:b1:38:b7:fa:86:4a:24:62:80:b2:fe:0c:f0:
                    c5:ee:50:46:29:b3:3f:f1:25:c2:fe:3c:c8:82:cc:
                    11:46:7d:48:9d:6c:93:57:9a:27:83:8c:18:0a:b5:
                    e9:65:b7:52:f7:ce:f9:7f:6c:bb:1b:e0:b3:15:b9:
                    da:6a:d1:f5:7b:c6:66:6d:a6:78:4a:32:71:d7:76:
                    49:d7:7b:fc:2b:1f:e9:8a:ed:b4:f6:63:29:0c:61:
                    d7:20:f0:80:e0:d2:81:35:4e:28:0c:ea:cb:8f:99:
                    30:b0:54:c0:85:47:c1:87:10:46:68:c7:03:bd:f8:
                    0e:20:02:18:8f:b5:cf:77:bc:b4:6b:c7:30:dd:48:
                    16:b9:28:14:ec:68:b9:80:c2:e8:a3:7f:c2:24:21:
                    0b:cd:9c:86:df:af:4e:31:d8:08:ed:4f:72:46:68:
                    42:e4:c3:41:d2:58:05:27:be:86:b8:95:f9:c4:ae:
                    58:7f:cf:79:d3:f1:b8:bd:ea:58:30:fd:18:cf:f3:
                    26:e2:79:8b:e7:5a:d9:9e:e7:bf:ee:23:e3:18:f5:
                    07:d1:68:fb:78:76:a2:63:d1:0d:33:03:ab:da:4e:
                    6a:f9:bc:11:a4:7c:6c:0f:88:21:5e:66:4c:8a:70:
                    85:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E5:76:19:48:53:94:AE:27:45:0A:EF:4F:50:0E:07:02:41:32:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf96aa55-a414-3442-918f-e8173dc75f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:7800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:6e:9b:50:f4:8a:ab:ec:21:3a:e6:df:8d:e4:2b:75:d7:c7:
         cb:b2:07:95:81:50:e8:54:13:d5:94:4c:72:7c:39:38:0e:d7:
         29:43:a6:1e:68:d3:34:cf:e6:44:94:76:15:82:af:bb:ce:75:
         c5:e8:3d:36:19:c7:37:01:48:ff:0e:20:e1:be:d7:3d:22:64:
         3d:5b:44:72:07:e7:30:05:f1:26:cb:51:d1:eb:38:5f:48:bc:
         d6:14:5a:32:d8:c1:c6:25:5d:f1:c9:99:00:16:d9:67:a8:ec:
         16:e4:51:57:1e:49:ab:9c:7f:70:f6:81:60:a0:52:26:07:0a:
         1b:e5:7d:80:28:98:ea:e3:cc:03:0e:83:77:4a:7e:f2:1c:ec:
         06:c2:d6:95:25:8c:41:93:60:e5:ae:a1:5c:6d:1b:92:79:23:
         4e:59:7b:92:b5:3c:6b:5c:25:f9:51:f7:15:8f:68:d7:0c:80:
         71:a4:92:da:75:c5:da:fe:13:44:5a:c1:79:1f:df:a5:ec:bd:
         cc:d5:56:0a:92:97:d5:0f:1b:d3:a9:5e:bb:e4:01:bd:46:ee:
         bd:3b:6e:0c:8b:4d:ed:31:8b:fd:07:24:19:dd:f8:28:51:66:
         17:ee:4b:39:da:57:74:b4:64:fa:b0:1c:bc:47:4e:7f:b3:36:
         17:cd:ad:85
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAby+M8BfSXlVotoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk
ZDk0NjA2MmYtYWUzOC00YzFiLTk3MTItOWM5Mjg0ZDc4ZjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2R1iJjMvW+WP6a+oh44f7E4t/qGSiRigLL+
DPDF7lBGKbM/8SXC/jzIgswRRn1InWyTV5ong4wYCrXpZbdS9875f2y7G+CzFbna
atH1e8ZmbaZ4SjJx13ZJ13v8Kx/piu209mMpDGHXIPCA4NKBNU4oDOrLj5kwsFTA
hUfBhxBGaMcDvfgOIAIYj7XPd7y0a8cw3UgWuSgU7Gi5gMLoo3/CJCELzZyG369O
MdgI7U9yRmhC5MNB0lgFJ76GuJX5xK5Yf8950/G4vepYMP0Yz/Mm4nmL51rZnue/
7iPjGPUH0Wj7eHaiY9ENMwOr2k5q+bwRpHxsD4ghXmZMinCFYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEfldhlIU5SuJ0UK709QDgcCQTIcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmY5NmFhNTUtYTQxNC0z
NDQyLTkxOGYtZTgxNzNkYzc1Zjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBngA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGdum1D0iqvsITrm343kK3XXx8uyB5WBUOhUE9WUTHJ8OTgO1ylD
ph5o0zTP5kSUdhWCr7vOdcXoPTYZxzcBSP8OIOG+1z0iZD1bRHIH5zAF8SbLUdHr
OF9IvNYUWjLYwcYlXfHJmQAW2Weo7BbkUVceSaucf3D2gWCgUiYHChvlfYAomOrj
zAMOg3dKfvIc7AbC1pUljEGTYOWuoVxtG5J5I05Ze5K1PGtcJflR9xWPaNcMgHGk
ktp1xdr+E0RawXkf36XsvczVVgqSl9UPG9OpXrvkAb1G7r07bgyLTe0xi/0HJBnd
+ChRZhfuSznaV3S0ZPqwHLxHTn+zNhfNrYU=
-----END CERTIFICATE-----