Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/3e585714-0ddd-318e-8df9-c94d81bf79ac.roa
File:                     3e585714-0ddd-318e-8df9-c94d81bf79ac.roa (raw, json)
Hash identifier:          VSyOz0EFztx7PAPjOCEuObDMaeVWm6DBS2fJJHgsHos=
Subject key identifier:   5C:30:E6:A5:09:43:42:A1:4A:DC:AD:3D:A6:1A:D5:69:BC:06:DF:26
Certificate issuer:       /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
Certificate serial:       010D0C9F4328584949FE82C07CA08A4D40DD2FA0
Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/3e585714-0ddd-318e-8df9-c94d81bf79ac.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     63399
IP address blocks:        2620:e1:4000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:82:c0:7c:a0:8a:4d:40:dd:2f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=f3266408-72d3-4c3f-ae1b-81108917d4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d2:b2:9c:41:18:87:93:fc:35:6c:63:06:1d:
                    11:44:c4:d8:21:2c:e5:39:8f:b7:2c:62:ba:37:66:
                    42:65:a2:46:2c:d0:71:5a:27:b3:45:82:f7:20:36:
                    de:70:95:4f:ca:df:11:8d:5a:92:b2:7c:0a:6b:a3:
                    6f:18:a0:85:1a:70:91:b9:e2:18:20:f2:7b:b0:9c:
                    50:13:93:70:6b:82:31:d8:35:22:16:13:c7:d4:f6:
                    55:60:ae:73:5b:71:53:0d:77:45:26:60:98:33:d5:
                    8c:5b:99:46:b0:2b:85:e4:c8:9f:40:a8:e1:bd:88:
                    e8:c7:ae:2d:85:0a:64:6f:bf:13:af:f1:99:94:5a:
                    bd:cb:a6:14:0c:cc:5b:d0:5c:2e:0b:d1:14:42:37:
                    66:4a:33:e5:02:28:97:65:3a:63:5a:65:a4:5d:7d:
                    62:ef:0f:81:1e:dd:bb:bd:37:85:47:2b:d7:70:ea:
                    1d:c2:8b:03:fd:94:3e:c9:eb:3b:91:1e:56:ec:88:
                    e2:85:5e:48:9e:df:ab:ba:15:8c:f6:ca:8c:b5:2f:
                    c5:13:4c:2e:04:2d:38:45:ff:86:6e:87:52:1e:79:
                    d6:4c:7e:95:4a:52:f2:e9:d9:3f:96:de:f4:ef:81:
                    16:07:e1:66:8f:46:84:98:8c:61:91:7e:58:6a:d8:
                    06:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:30:E6:A5:09:43:42:A1:4A:DC:AD:3D:A6:1A:D5:69:BC:06:DF:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/3e585714-0ddd-318e-8df9-c94d81bf79ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl

            X509v3 Authority Key Identifier:
                keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:e1:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:c9:08:e5:ed:1a:0b:16:dd:74:a1:13:f4:c4:cf:a5:02:50:
         4e:84:d3:1e:e6:aa:5d:84:02:b6:ce:21:e6:95:3f:87:dd:34:
         62:2b:c4:7e:b6:5f:9d:5d:6c:33:27:11:78:00:d6:f6:d7:06:
         77:ad:98:ff:47:73:11:d9:9b:ad:92:78:0c:ee:a1:5f:ea:37:
         77:10:a5:b8:8f:8f:09:cb:4e:1c:42:cb:fe:80:72:06:82:b4:
         19:25:6a:d8:8e:ed:59:91:8b:1d:e6:ec:1a:ce:75:71:10:b5:
         f9:a7:3d:55:d2:e6:42:53:4d:c2:fa:ba:1f:f1:eb:8f:2f:f8:
         43:e6:49:25:d8:8a:39:66:49:3f:6e:54:d4:b5:e8:f8:c8:98:
         20:bc:f1:67:ec:29:22:e6:4a:e1:37:8d:57:b4:32:fc:e2:80:
         22:d9:c0:b1:cb:f2:6e:c8:f5:02:e0:b0:80:03:ad:b4:0d:b2:
         01:1b:b5:f7:12:bd:55:6b:c5:7f:a8:ae:fa:40:a5:2c:ab:45:
         1a:ee:2d:31:1b:0d:07:e4:4d:2f:0e:2c:91:a3:e1:56:14:3a:
         62:1e:7e:58:46:ec:18:d9:65:7b:80:f8:cf:0b:5b:18:c7:6d:
         fe:e0:95:0f:9a:77:b8:32:bd:ff:75:3a:19:77:84:71:4f:bb:
         9e:e1:87:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----