Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/e666913e-9906-3516-98a8-a6e27a69ef82.roa
File:                     e666913e-9906-3516-98a8-a6e27a69ef82.roa (raw, json)
Hash identifier:          vhg5OkbcPzPf6/kVwhTX74ezsRRNhm8rCcO7xQS4rQk=
Subject key identifier:   18:8C:DE:64:A2:1A:70:68:7A:DE:61:3C:38:24:23:9A:19:8C:5B:09
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F432858495D8970254D62FA6277D24B80
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/e666913e-9906-3516-98a8-a6e27a69ef82.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     8075
IP address blocks:        2620:12c:9005::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:70:25:4d:62:fa:62:77:d2:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=3a7eeb4d-9a3c-4841-8998-5e12529130fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:53:83:f6:97:6b:1c:45:52:4b:98:78:37:44:
                    c8:c9:f5:20:2a:d7:92:8b:e2:fc:88:95:b6:f3:02:
                    07:29:1f:ee:55:e0:27:4a:4c:77:61:c6:29:42:00:
                    a2:05:a8:ed:d9:83:de:3d:e4:6e:2c:dd:3b:03:d8:
                    0f:58:93:14:60:ea:46:e2:59:58:b4:f3:62:18:a2:
                    b8:0c:c4:8b:92:c6:9f:8c:9d:97:7f:ab:53:4e:4c:
                    08:5f:a9:db:91:f0:12:bc:e7:a9:4b:01:c5:13:ed:
                    c3:2d:a3:9e:cb:f1:94:94:9f:56:31:cb:37:3a:b6:
                    6f:88:74:96:1b:2d:7a:fa:6c:51:51:3f:5b:a7:f1:
                    55:96:3a:43:d2:07:f8:be:41:79:3a:e2:8d:55:86:
                    4f:08:e4:3a:70:ec:a5:c7:5d:e0:80:39:50:0e:6b:
                    bf:14:ab:e0:36:09:75:e8:f7:c5:44:6c:f9:b8:a1:
                    de:af:65:9d:4a:11:55:da:34:48:19:0f:2e:27:c0:
                    94:8a:26:69:a3:6e:d0:50:67:cb:6a:bf:a8:2b:a6:
                    e7:6a:73:1f:5c:c1:cd:df:13:6a:67:3d:96:16:c8:
                    4d:ed:08:95:5f:07:3b:aa:4a:4c:05:25:63:18:0c:
                    5b:ee:e4:68:57:6f:39:05:af:03:62:28:56:9d:75:
                    4e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8C:DE:64:A2:1A:70:68:7A:DE:61:3C:38:24:23:9A:19:8C:5B:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/e666913e-9906-3516-98a8-a6e27a69ef82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12c:9005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:ee:08:80:20:97:27:19:c2:33:a2:2c:35:2f:82:d8:13:f9:
         1b:bf:87:31:14:77:d6:a4:9c:d5:df:00:bc:61:fc:da:61:0b:
         54:6f:ba:4b:fc:bb:4b:45:d1:1c:70:04:fb:ad:79:69:ce:02:
         2d:d2:89:a8:9d:b9:24:a0:b4:43:cb:0b:34:2b:6f:65:52:5d:
         9f:51:e5:e2:ee:ef:42:5f:c5:49:fc:ce:23:42:38:2f:4f:af:
         0f:66:55:f2:a7:61:b7:8d:65:83:c3:12:41:2a:bb:56:8a:c8:
         17:a5:79:d0:9d:71:b2:71:26:ae:c0:d8:c9:c8:2b:8a:a0:44:
         8f:3a:a7:c2:31:0e:f9:f1:26:39:67:81:90:de:8c:50:ca:20:
         8d:68:f8:dd:88:80:a7:ad:84:de:f8:d0:81:65:1b:3d:41:34:
         e7:da:cc:01:ea:c0:b6:94:dd:e7:cb:21:ce:4f:e1:f8:21:78:
         1d:86:fb:03:5f:91:81:e5:e4:43:e5:bb:c9:0e:69:91:02:a4:
         f9:32:3b:cd:a2:12:fe:c8:15:12:d5:b2:d7:cc:bd:73:05:2a:
         eb:87:96:6d:ca:cf:4e:3b:ad:46:e0:f1:77:e3:e1:84:be:5b:
         59:c6:39:54:7f:6e:de:d7:be:9c:a1:e6:2a:b5:6c:eb:ec:29:
         e7:b3:0d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----