Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e00d3726-b76f-3a77-9c99-3d794cc02f91.roa
File:                     e00d3726-b76f-3a77-9c99-3d794cc02f91.roa (raw, json)
Hash identifier:          cIYqUF8uNTyeOE/vUC1OI2wEg9KiOO3o+/GKRK63aWU=
Subject key identifier:   11:37:85:B2:85:12:72:B1:84:00:C9:B4:C6:AA:A2:85:2D:26:27:70
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849806F2E387DBC1FA182336500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e00d3726-b76f-3a77-9c99-3d794cc02f91.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        2600:1404:2e00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:2e:38:7d:bc:1f:a1:82:33:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=55f0c527-9e1a-4ddd-be46-f01dec80df08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f0:3f:4e:cb:73:26:2f:ae:8d:3e:94:8c:cd:
                    2a:59:a9:c9:28:93:b7:db:d0:03:90:aa:88:25:8c:
                    50:3a:7e:a7:99:ed:7a:1b:e0:93:8c:5c:21:d6:17:
                    1d:91:f2:49:de:cd:08:f6:5e:28:8f:f0:4d:d7:9b:
                    f6:ff:3e:f9:58:32:80:7c:23:c9:65:20:ff:91:7a:
                    63:cd:46:33:20:76:0b:8e:8e:40:3b:6f:6c:c9:cf:
                    df:59:9d:c5:29:bb:17:7f:e0:5c:1e:38:0b:f0:97:
                    6d:c0:90:e1:ca:a6:51:23:ff:6c:a3:9f:88:68:3a:
                    6b:d4:ac:7d:6e:76:e2:47:5c:34:b7:d4:90:d3:09:
                    25:1f:47:bf:0c:28:47:7c:b9:b4:8e:38:8f:b6:58:
                    2d:cb:cf:64:b3:b0:46:dd:6b:c4:aa:c3:dd:6b:1e:
                    15:4f:38:6e:0e:d2:68:5a:58:3c:4e:e4:8e:c0:66:
                    c6:fc:64:bd:b2:fc:4f:5d:d3:aa:dc:bb:9f:be:55:
                    2d:da:10:99:e9:2f:9d:80:02:62:ce:a6:49:d9:42:
                    5e:98:19:78:d5:e9:a8:77:20:3f:e1:9c:35:3d:8f:
                    fa:59:56:e3:fd:8b:eb:38:a9:0e:f8:d2:d9:5c:21:
                    ab:47:9a:1a:d3:d6:ce:a7:f4:ca:77:b1:d0:86:84:
                    34:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:37:85:B2:85:12:72:B1:84:00:C9:B4:C6:AA:A2:85:2D:26:27:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e00d3726-b76f-3a77-9c99-3d794cc02f91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1404:2e00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c8:72:63:99:ab:db:db:0c:7e:aa:6c:d0:20:54:45:46:1d:
         72:5f:37:4e:cf:a9:94:39:98:9c:ae:13:e0:0d:3a:14:a1:8a:
         98:58:58:88:24:76:83:91:b8:bb:a4:b2:c9:0f:7c:57:c2:e1:
         06:08:b5:e5:82:f0:97:fc:ff:7b:97:11:3f:d6:b0:2b:eb:d8:
         ab:f9:82:c5:d8:2d:57:0a:74:4a:07:a4:f8:94:1d:64:ed:cf:
         de:19:dd:54:f2:fb:31:a3:d8:f7:cf:ff:7f:5a:c4:a8:59:f2:
         57:fd:ae:af:25:fd:36:2c:f4:79:7f:bd:81:9d:da:6e:3e:37:
         0e:89:86:b3:b5:e2:d8:9b:a9:c6:89:63:71:50:78:81:b6:b8:
         d8:c5:47:a8:ed:41:a2:39:96:a6:c1:0d:7a:43:22:ba:ed:88:
         fe:5a:30:f8:fc:a2:e3:df:9a:44:98:e4:57:2d:aa:aa:ae:29:
         fa:93:2b:cf:23:57:ee:52:9d:57:f5:84:b1:f1:19:93:e4:61:
         18:1c:67:0d:44:84:1e:47:ad:aa:0f:77:ad:09:dd:78:d2:99:
         09:3d:b4:9a:d2:cd:38:c2:df:d5:35:2c:bc:37:7a:e4:9b:51:
         50:fb:3e:1c:37:62:d3:03:4e:42:18:08:d1:ae:3d:de:db:60:
         7f:f6:58:e3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAby44fbwfoYIzZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk
NTVmMGM1MjctOWUxYS00ZGRkLWJlNDYtZjAxZGVjODBkZjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/A/TstzJi+ujT6UjM0qWanJKJO329ADkKqI
JYxQOn6nme16G+CTjFwh1hcdkfJJ3s0I9l4oj/BN15v2/z75WDKAfCPJZSD/kXpj
zUYzIHYLjo5AO29syc/fWZ3FKbsXf+BcHjgL8JdtwJDhyqZRI/9so5+IaDpr1Kx9
bnbiR1w0t9SQ0wklH0e/DChHfLm0jjiPtlgty89ks7BG3WvEqsPdax4VTzhuDtJo
Wlg8TuSOwGbG/GS9svxPXdOq3LufvlUt2hCZ6S+dgAJizqZJ2UJemBl41emodyA/
4Zw1PY/6WVbj/YvrOKkO+NLZXCGrR5oa09bOp/TKd7HQhoQ0UQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBE3hbKFEnKxhADJtMaqooUtJidwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTAwZDM3MjYtYjc2Zi0z
YTc3LTljOTktM2Q3OTRjYzAyZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBC4A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF7IcmOZq9vbDH6qbNAgVEVGHXJfN07PqZQ5mJyuE+ANOhShiphY
WIgkdoORuLuksskPfFfC4QYIteWC8Jf8/3uXET/WsCvr2Kv5gsXYLVcKdEoHpPiU
HWTtz94Z3VTy+zGj2PfP/39axKhZ8lf9rq8l/TYs9Hl/vYGd2m4+Nw6JhrO14tib
qcaJY3FQeIG2uNjFR6jtQaI5lqbBDXpDIrrtiP5aMPj8ouPfmkSY5FctqqquKfqT
K88jV+5SnVf1hLHxGZPkYRgcZw1EhB5HraoPd60J3XjSmQk9tJrSzTjC39U1LLw3
euSbUVD7Phw3YtMDTkIYCNGuPd7bYH/2WOM=
-----END CERTIFICATE-----