Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1f193dab-2889-3eb3-aa2d-ee07ec69bb3a.roa
File:                     1f193dab-2889-3eb3-aa2d-ee07ec69bb3a.roa (raw, json)
Hash identifier:          hQQ5IvHw2SOs/L+EgFec4xnJJGRYvCVAO0sQ2N6ZdIc=
Subject key identifier:   4B:9A:A9:60:0C:CB:3C:A0:68:4C:77:49:FA:51:4C:6A:F4:CB:09:A1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848EC96A3F03BFEA3929C410840
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1f193dab-2889-3eb3-aa2d-ee07ec69bb3a.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     0
IP address blocks:        2602:107:1400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:a3:f0:3b:fe:a3:92:9c:41:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=32e6bbba-50f4-46e7-aa66-80c7bc63d8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4e:48:1c:54:24:91:df:a9:84:75:c2:c3:13:
                    3d:1c:8f:36:90:85:07:05:2d:f0:5b:7e:91:6c:86:
                    e3:c9:0a:a0:20:b9:89:5f:d8:0c:de:1e:0b:40:6f:
                    62:eb:6e:74:36:58:4b:f7:d4:ff:50:3e:48:2b:5a:
                    d8:cc:f2:13:9e:07:de:74:18:32:c7:66:52:99:75:
                    ac:58:5d:eb:b3:de:1a:b1:a5:99:44:51:67:56:a4:
                    14:fe:27:9b:ca:26:de:ad:db:18:be:bd:34:55:aa:
                    ea:6b:a4:d3:5a:b9:c9:8d:f1:6f:78:89:3f:7e:80:
                    4c:ea:8b:93:5e:39:98:8a:42:89:6e:38:37:ff:ec:
                    c9:ae:57:aa:62:9d:7e:c0:32:64:82:fa:f4:19:1d:
                    74:28:99:ab:12:e2:79:2b:c9:20:c0:bf:dc:2c:af:
                    1c:d2:fa:ab:bd:47:c3:cf:91:cc:05:5c:e5:f5:43:
                    c9:bc:5c:95:ca:c0:e9:f0:37:17:91:64:15:c4:b4:
                    8d:a8:6c:e0:2c:15:5e:0b:d9:7d:08:b1:ed:13:1b:
                    f6:d5:d7:30:f8:c0:18:c8:1a:68:14:88:27:a3:4e:
                    5e:15:be:b5:2f:83:89:bc:f9:6b:b7:ed:4c:a6:27:
                    d9:06:cc:c7:e4:14:44:40:8e:bd:0b:f8:75:77:9d:
                    10:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9A:A9:60:0C:CB:3C:A0:68:4C:77:49:FA:51:4C:6A:F4:CB:09:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1f193dab-2889-3eb3-aa2d-ee07ec69bb3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:1400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:0c:db:f7:6e:2a:fe:cb:76:5b:7d:61:8a:72:8a:f8:36:3d:
         d2:79:2c:b2:44:a8:da:32:aa:25:38:bc:43:ae:04:1b:41:66:
         d6:7f:77:6a:ee:86:b4:8b:b9:03:0a:ef:76:a0:53:b3:1c:34:
         66:6b:bd:54:98:71:a8:a7:2f:63:c2:f3:70:b9:77:28:1a:0e:
         28:47:f9:df:63:32:01:88:c7:cc:64:8a:1a:14:24:00:ec:37:
         de:10:dd:46:9b:e3:b2:5a:0c:b7:84:9b:83:c6:ca:21:fe:b1:
         12:c5:29:6a:7a:49:6e:76:fe:64:48:d1:34:6c:8e:0b:4e:1a:
         6e:2b:06:10:62:57:82:ec:03:3d:e3:7b:66:dd:17:c3:e5:13:
         cf:c8:cc:bc:60:b6:87:f2:6e:40:4b:21:80:26:59:ec:1c:73:
         79:9b:37:9b:a5:45:65:76:37:e4:9b:46:42:f0:1f:9a:c4:8a:
         05:a5:ed:63:1d:18:c7:48:53:34:e6:b1:1a:e6:08:56:38:4f:
         98:a1:6e:51:8a:13:74:a6:1a:07:d5:e9:33:83:41:7e:2c:cf:
         6a:56:c1:02:04:16:e3:4b:55:08:5c:62:e3:4c:5c:f1:89:41:
         c7:3c:24:85:7a:88:7f:83:a3:03:af:4f:6a:70:24:80:c3:55:
         bd:f3:2c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----