Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d73c9c83-c07a-38a0-a04e-bddb6b46a790.roa
File:                     d73c9c83-c07a-38a0-a04e-bddb6b46a790.roa (raw, json)
Hash identifier:          LgpV94z4gENqFqTbCHEHu8kVwpbiTdT/lIDJ0Z8qwlU=
Subject key identifier:   03:5A:2F:38:43:2E:40:2E:20:FF:85:9E:EF:82:F3:00:02:79:F1:D7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858497F09A97808F0FBB07F3BE340
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d73c9c83-c07a-38a0-a04e-bddb6b46a790.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     20940
IP address blocks:        2600:14a0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:a9:78:08:f0:fb:b0:7f:3b:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=053cdb99-aec6-4bbb-b06b-82400e7639b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:6e:b4:33:a3:38:1f:be:8a:a2:43:f4:61:
                    40:b4:61:e8:3d:9e:09:d6:fb:5e:01:cc:e8:98:a8:
                    ed:e0:31:06:a2:9a:54:99:06:71:98:f9:6d:80:c0:
                    cb:1d:21:f3:cd:ed:92:56:aa:11:9b:c9:3a:82:4b:
                    24:67:36:1a:85:d7:5f:0b:89:fa:f4:2d:2d:b3:ac:
                    32:27:7b:86:ba:22:d0:f3:3d:bd:d7:a5:28:84:9e:
                    f3:31:7f:20:a1:cc:cf:8f:a7:7b:40:12:44:4a:e3:
                    bd:11:7e:6e:87:54:25:b8:ad:a8:48:58:37:54:c3:
                    3e:11:2d:54:47:d4:ad:33:b9:d1:be:91:78:3c:c6:
                    3b:a2:c6:0f:bd:0f:51:16:78:29:04:82:a3:91:4d:
                    3e:55:c7:86:98:a9:95:07:ba:ad:6b:cd:12:6a:86:
                    76:43:5b:21:83:1a:1d:0d:bb:f3:be:c6:5f:ec:e6:
                    8a:de:81:f1:db:27:b2:68:57:85:70:74:77:fd:33:
                    6e:94:6c:99:53:79:e0:1a:67:07:fb:07:5b:35:51:
                    7d:d9:cd:8a:2d:34:bb:bc:2e:49:d6:f2:32:4b:2d:
                    a8:f2:14:cf:82:75:8e:e2:24:9c:8a:78:9b:d7:3e:
                    77:16:bc:97:5f:a4:a4:72:6a:46:22:e5:cd:33:38:
                    35:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5A:2F:38:43:2E:40:2E:20:FF:85:9E:EF:82:F3:00:02:79:F1:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d73c9c83-c07a-38a0-a04e-bddb6b46a790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:14a0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ae:9b:0f:06:26:d3:4a:50:aa:28:81:30:46:b3:f2:8a:53:
         20:dd:17:fb:a6:22:08:d8:69:f7:87:09:62:c3:ea:71:a3:42:
         bf:bd:ce:9e:fe:80:a5:8f:95:e8:ea:96:da:1a:f4:a8:ca:2f:
         26:18:3c:b6:39:9d:f9:c8:ed:c0:d7:69:f8:e4:44:4e:66:1c:
         15:c0:20:d5:2f:6f:83:0a:f7:c3:f7:0d:c5:fa:b4:a5:99:8f:
         3c:7d:0b:03:2c:41:20:be:06:c9:03:7f:48:b9:3d:91:5b:28:
         7f:cb:b9:52:ca:4a:d0:0c:01:db:62:12:23:1e:cc:4c:5a:c9:
         0b:3e:86:2e:2b:fd:fa:52:f2:ef:4c:58:2c:78:04:93:cb:bf:
         5b:2d:7c:45:46:dc:36:65:b7:d5:8e:83:f1:15:6f:4c:ef:36:
         1a:8a:bf:96:1b:33:f2:f1:72:42:b0:e7:cc:b5:93:07:33:71:
         c8:30:b3:ab:8f:b3:9e:22:55:89:0a:6b:af:d3:b9:4d:50:c0:
         b1:3f:0e:ec:03:cd:02:5b:7f:79:7d:2f:03:95:e6:ff:bf:89:
         30:24:7f:fd:fe:24:8c:f7:9b:aa:90:39:67:6b:3f:8b:a8:f8:
         0d:86:36:e1:b6:06:c9:91:df:e3:97:08:bb:9b:79:de:f1:7f:
         4c:ac:7b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----