Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6b893b88-16dd-3f43-91e6-6fa94ca2d25c.roa
File:                     6b893b88-16dd-3f43-91e6-6fa94ca2d25c.roa (raw, json)
Hash identifier:          C8tMgDXtswir/2CY+FyK3KrdP61blJSgsLB4lmjnxBc=
Subject key identifier:   6A:25:C8:61:33:1B:A3:18:B7:EE:43:26:EE:63:4A:0F:80:B9:CA:1B
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584695792630336F331E29055300
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6b893b88-16dd-3f43-91e6-6fa94ca2d25c.roa
Signing time:             Wed 17 Jul 2024 12:00:00 +0000
ROA not before:           Wed 17 Jul 2024 12:00:00 +0000
ROA not after:            Fri 21 Aug 2026 04:00:00 +0000
asID:                     36692
IP address blocks:        2620:119:76::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:95:79:26:30:33:6f:33:1e:29:05:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jul 17 12:00:00 2024 GMT
            Not After : Aug 21 04:00:00 2026 GMT
        Subject: CN=3c8f44f7-1e17-467b-8b4c-983b41e5d004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8b:33:07:ea:a7:b9:06:83:62:ff:20:ff:fe:
                    5f:94:05:e9:da:eb:d6:88:27:45:04:4e:49:f7:8b:
                    f2:93:04:66:51:a6:03:83:f0:cd:9d:85:43:c2:21:
                    e0:bb:ff:92:60:ca:87:20:5f:6f:9e:15:c0:a4:3d:
                    5d:ca:c1:4e:95:76:35:65:06:32:a9:0b:7c:64:f2:
                    1f:8c:ad:de:cf:14:5e:93:cb:97:f3:ab:bd:5c:39:
                    e3:a5:59:5b:a7:db:94:d6:bd:67:cc:4e:e2:9c:4b:
                    d2:f8:34:06:a1:54:03:bb:ef:52:85:ce:cc:dc:81:
                    23:80:11:35:b2:65:40:4b:5c:5f:63:8d:43:a1:ef:
                    b9:ca:8b:e1:99:7f:ee:fc:ab:12:27:54:e6:9e:79:
                    87:64:59:02:ba:e5:10:9b:6f:29:af:bd:6d:53:dd:
                    a2:62:d0:a6:8d:d1:e1:f7:7a:4c:2c:d9:74:1c:c5:
                    a7:43:c5:d8:af:95:bd:ef:8e:c8:e5:29:cb:10:b2:
                    a2:f7:82:9e:b9:39:d3:c7:b8:d3:30:dc:81:77:2c:
                    34:a5:80:48:b7:55:23:fb:01:51:36:38:b1:89:83:
                    62:82:b3:ad:0c:a8:df:e7:ac:c4:53:f6:f4:17:34:
                    1e:85:c5:96:6b:64:70:98:2d:ea:3d:20:ee:68:3f:
                    e1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:25:C8:61:33:1B:A3:18:B7:EE:43:26:EE:63:4A:0F:80:B9:CA:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6b893b88-16dd-3f43-91e6-6fa94ca2d25c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:119:76::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:49:8b:ee:9f:5a:37:f6:b0:95:f8:70:4c:28:29:4a:33:83:
         ca:46:42:08:3c:d5:6c:5e:7e:f6:b9:64:70:ae:d0:06:59:2d:
         e9:ce:ae:e8:20:bd:d2:9d:30:98:dd:6a:b0:e8:70:d0:9f:65:
         09:63:3c:8f:f0:ee:da:7d:26:5a:ed:68:11:7a:ee:22:cb:71:
         c5:71:80:96:9b:c9:a2:b1:9f:9b:94:69:e6:22:e2:41:aa:0d:
         22:8a:04:b3:81:d4:16:43:d1:89:eb:1f:10:55:a5:b1:14:cb:
         56:f8:84:20:55:36:78:c8:1e:49:b1:a8:65:b4:08:a9:26:da:
         67:2e:b9:96:58:32:14:e8:ad:4d:65:d7:e1:38:e6:d2:79:91:
         6c:83:be:c4:f6:08:55:bf:b5:e6:a6:c1:a6:b8:03:bc:73:b0:
         44:e3:46:db:93:9a:ef:21:f2:b0:62:80:42:a6:8d:d7:b1:80:
         95:62:1e:a0:10:5b:4a:8c:d6:77:32:54:3d:b7:e6:c4:50:c3:
         f7:e5:d3:cf:41:d1:b8:df:96:8b:db:60:bd:e5:ad:17:62:4e:
         d9:ef:f9:77:a4:37:b1:80:8d:10:1f:bd:56:11:3a:2f:e6:e2:
         74:9d:36:d5:bd:2d:6e:b1:ef:c1:a1:c2:f8:a6:e0:ca:f7:8f:
         6f:7f:5c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----