Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dde18efe-770c-3070-8db4-326b245d5f2f.roa
File:                     dde18efe-770c-3070-8db4-326b245d5f2f.roa (raw, json)
Hash identifier:          FINq+7lohAKq/8rUop5Sm9/IYa6JJEjpIwM+YCLEot8=
Subject key identifier:   44:97:D6:0D:95:79:4A:14:7A:2D:1F:2A:D4:27:DF:27:32:E1:EC:D6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848FD56A2F3F052985DFF085B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dde18efe-770c-3070-8db4-326b245d5f2f.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     12222
IP address blocks:        2001:4878:158::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:a2:f3:f0:52:98:5d:ff:08:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=6b9d4d56-2712-469b-810d-d3581ed40c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:04:57:51:70:cc:d3:73:0b:af:25:9e:ec:
                    0c:e8:17:bf:36:2c:bf:ab:01:e9:54:6a:3a:9b:e5:
                    1d:9c:d8:cf:55:ac:63:ca:50:98:b0:95:23:60:f9:
                    b6:ea:f5:13:41:25:e2:a1:b8:42:a0:c4:c6:e7:b0:
                    44:17:da:0b:cc:18:4a:63:4c:d4:92:9a:12:f8:56:
                    b5:2f:3c:7b:3c:da:bc:61:1c:7e:04:c4:88:16:3a:
                    08:a2:7c:c5:e8:96:71:5e:e1:c1:33:f1:83:e0:fd:
                    58:f4:37:98:e0:57:aa:a4:e6:e0:a2:59:46:b4:0d:
                    31:97:d6:bf:c8:6f:6b:7c:2b:08:44:06:e0:2c:5b:
                    bb:ea:de:93:9d:41:be:e3:0d:ca:99:c9:d0:0e:9a:
                    93:ad:da:d5:02:48:8b:1d:0d:a8:fd:d3:57:43:a4:
                    3d:48:e2:87:9b:96:f9:94:e7:c5:95:2e:ef:47:2f:
                    d7:5d:7f:8c:83:d9:5a:d7:b9:32:c3:cc:ff:80:44:
                    37:57:96:f6:25:b9:18:0e:0d:40:51:1d:d9:5f:83:
                    dd:90:e7:80:c8:4f:99:b5:ec:71:c4:e5:67:37:00:
                    13:55:f2:0e:3b:1f:7e:45:c7:f3:aa:ba:d6:cc:1d:
                    67:ec:54:a9:71:82:ff:c7:78:f0:63:35:6a:ad:ef:
                    4a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:97:D6:0D:95:79:4A:14:7A:2D:1F:2A:D4:27:DF:27:32:E1:EC:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dde18efe-770c-3070-8db4-326b245d5f2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:158::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:57:aa:0f:37:8a:a5:0e:48:52:61:62:85:30:ec:14:5e:d5:
         71:30:4e:b4:49:45:98:56:cc:a1:5b:36:86:23:54:47:ef:96:
         00:2b:b8:5a:d8:c1:4d:0b:b9:2c:98:e1:0b:a0:d2:6a:fc:86:
         fc:82:7f:5b:2a:e5:34:4b:b9:92:4f:e2:b0:39:74:89:02:8d:
         f0:7c:48:fe:49:26:5f:52:80:c2:3d:a6:6c:32:3f:93:ba:d0:
         88:eb:ba:a0:48:3b:c2:42:24:cb:11:f2:d4:4d:82:7d:e2:72:
         5d:aa:91:a0:a8:3f:f9:98:c5:0a:7c:9f:cb:f8:72:b1:22:d7:
         3f:a5:ba:df:3d:f7:f9:71:a0:c4:6a:16:8a:38:0a:b6:95:30:
         3f:83:6c:5c:35:15:ca:7b:12:4a:46:40:a0:fa:98:dd:75:7c:
         6d:8f:e5:e3:32:de:0b:72:97:88:b8:89:e3:2b:6a:d1:af:02:
         40:89:97:df:c5:5c:52:d3:83:68:e9:c3:c4:d5:9e:5c:74:b2:
         74:be:c4:d1:c3:a8:56:a5:dd:c3:a4:3b:59:5d:4d:48:17:af:
         c1:27:78:a0:71:c4:7e:41:6a:ca:5a:23:81:ad:ab:9e:e7:89:
         86:be:68:26:24:bf:2a:fe:5a:12:06:a5:5b:a7:c8:0c:c2:15:
         dc:5c:7e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----