Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee1dbe41-b748-35ce-a664-9353df68da13.roa
File:                     ee1dbe41-b748-35ce-a664-9353df68da13.roa (raw, json)
Hash identifier:          fxXb4MjTRsVe1zcefFt0bx72dsioQAbiaVK/oYytM0I=
Subject key identifier:   33:03:4E:C5:70:19:B3:A3:16:D4:91:2A:F9:23:21:C2:AB:1B:76:3E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849806F3A2C1C3892D400E3C980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee1dbe41-b748-35ce-a664-9353df68da13.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        2600:1409:1800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:3a:2c:1c:38:92:d4:00:e3:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=6657b165-d4b8-4678-aaa0-f4f9d4a72ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:47:f1:79:0e:c5:9b:7d:d1:64:7a:dc:c3:67:
                    d6:8d:90:4a:97:a5:7d:78:85:7e:14:1f:11:70:c6:
                    cb:37:f9:b5:2e:ff:ac:a8:8a:c0:e7:da:55:ff:e8:
                    11:ed:63:1f:d0:46:aa:33:da:67:b0:87:74:ce:fb:
                    74:19:dd:f5:e6:e1:24:a6:60:4c:af:e8:23:b1:0c:
                    0f:bb:03:ca:a1:03:5f:7d:b5:77:db:0b:e1:d9:d6:
                    e6:34:c0:d7:e9:c6:fa:da:a0:d6:37:11:61:e2:dd:
                    d9:e4:96:4f:4b:08:3f:82:c9:49:c3:5c:59:e1:61:
                    87:86:bc:0f:7a:04:91:78:45:75:30:83:ec:9f:8c:
                    fd:57:de:b5:27:6d:d0:38:32:cb:d5:d9:e6:6a:a4:
                    c7:da:c2:73:46:24:c7:e0:5d:bd:a3:7d:81:38:a8:
                    f3:31:ec:98:7b:57:2e:88:a4:e2:4a:88:93:86:1e:
                    94:8e:ad:64:d8:17:df:12:3e:8e:05:84:3d:87:c1:
                    63:ac:58:a2:2d:64:d5:11:1b:36:de:c6:d4:b9:2c:
                    ce:9f:c4:24:b3:9c:f2:60:5d:1a:c1:91:14:d8:75:
                    7e:96:3c:14:77:a1:d2:e2:00:43:44:a1:c0:e0:13:
                    09:a1:f6:11:02:1c:c2:c8:c3:3f:2f:a7:e9:c8:e0:
                    cc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:03:4E:C5:70:19:B3:A3:16:D4:91:2A:F9:23:21:C2:AB:1B:76:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee1dbe41-b748-35ce-a664-9353df68da13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1409:1800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:86:e9:2a:1d:df:d4:16:27:e2:25:15:b3:f1:14:66:23:6f:
         07:db:1a:b7:fc:e5:36:d3:94:45:d0:08:87:e3:4b:d9:43:22:
         8d:52:f8:0d:66:0a:fc:36:b7:76:dc:69:0c:b5:da:b9:2e:64:
         a6:b6:45:1d:29:0c:f4:74:ef:91:cf:ab:25:d0:a3:30:cf:16:
         0f:7c:69:33:74:5d:ee:c9:b4:2e:a2:8f:41:95:d1:da:44:f0:
         a0:96:1a:01:99:a7:e3:a6:ff:1e:63:b9:4f:18:97:b5:c2:50:
         a2:9f:63:3f:e4:97:a7:7b:49:93:4e:64:da:be:2b:cd:41:f8:
         d6:10:c2:39:2f:19:69:ab:5b:68:dd:47:a8:92:d3:2e:86:8a:
         6b:b8:01:d4:d9:e2:a2:62:13:47:c4:07:35:6e:41:d0:b1:a4:
         13:38:34:85:ea:45:e7:d5:8c:29:40:99:2f:18:f0:1e:cb:ca:
         e1:3d:0f:54:21:ad:ab:db:17:83:e3:96:84:cc:18:89:7e:43:
         a2:41:28:d9:10:5a:6e:5a:aa:b2:d4:ad:44:99:ac:d2:03:6e:
         ab:00:79:57:0f:15:d2:fe:8a:cd:ef:aa:84:24:92:f2:e8:7e:
         c4:f5:07:11:c2:7c:04:e5:9b:5f:53:15:63:46:58:e3:b2:fe:
         d0:61:7a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----