Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/cd2dc5dd-1bb1-3cdc-be08-65d6e5ad5de6.roa
File:                     cd2dc5dd-1bb1-3cdc-be08-65d6e5ad5de6.roa (raw, json)
Hash identifier:          DafY2PYrYlLsQ9xqfS8aqw5jZqO0cvssBSvyorALiA4=
Subject key identifier:   67:6E:D4:A7:F3:84:B5:7C:3E:8D:87:D4:F0:2D:B7:8C:A6:F4:C9:8F
Certificate issuer:       /CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
Certificate serial:       010D0C9F43285848A996224F6E377666C2690E00
Authority key identifier: 10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/cd2dc5dd-1bb1-3cdc-be08-65d6e5ad5de6.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     25979
IP address blocks:        2001:4e0:1008::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:22:4f:6e:37:76:66:c2:69:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=2267cf48-2718-4396-8a7f-4ffefe991e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8c:e7:ae:31:95:33:a8:77:88:5a:2c:7a:78:
                    ba:e6:c5:d4:e6:d9:cb:5e:77:32:3e:18:aa:49:53:
                    1f:d9:30:fc:e4:e6:03:b3:a6:65:39:32:cf:31:85:
                    cb:d2:89:81:9e:ce:31:4f:d1:55:b9:51:5b:eb:28:
                    38:0f:61:cc:23:f6:64:22:00:a7:54:c4:66:37:e7:
                    c4:40:89:1d:36:7c:6f:d9:0e:4a:7f:71:6e:8d:27:
                    3a:ae:d1:84:22:c9:0b:fb:47:51:4b:f3:c2:01:6c:
                    e2:b2:c1:37:5d:98:cd:6d:96:47:69:15:8f:bb:68:
                    01:0a:e8:36:6f:9a:34:d1:6a:21:96:bf:61:37:31:
                    76:36:11:df:93:e5:5f:9f:86:75:35:96:55:b0:a9:
                    eb:3d:24:18:45:b9:15:a2:aa:af:b8:fb:c6:59:ed:
                    3b:cb:6e:4c:71:d9:ae:40:2b:16:a6:8c:42:48:e9:
                    74:24:ea:43:5b:a1:1f:0a:f9:4c:0e:31:9d:cf:a6:
                    d2:0f:01:7c:14:00:22:af:d1:90:bd:a2:d9:d4:3f:
                    84:bc:5a:cf:b8:31:84:32:b3:37:9a:6a:3d:19:11:
                    7d:f5:b8:71:17:dd:3e:d4:5d:0e:e0:d1:6b:34:74:
                    b3:b6:2f:f7:d7:c9:d6:6e:b5:31:47:96:d2:e6:ea:
                    34:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6E:D4:A7:F3:84:B5:7C:3E:8D:87:D4:F0:2D:B7:8C:A6:F4:C9:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/cd2dc5dd-1bb1-3cdc-be08-65d6e5ad5de6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl

            X509v3 Authority Key Identifier:
                keyid:10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4e0:1008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d4:0f:64:44:dd:7c:b5:e5:64:f7:fc:97:14:68:ba:34:2c:
         d6:30:5b:71:7b:00:df:6e:ba:b0:e8:e6:ef:ac:c5:51:8a:b8:
         f9:8a:eb:88:86:65:59:84:e1:59:90:88:9b:06:62:4d:8a:ef:
         c9:6b:75:fc:b2:79:4b:23:98:a3:e6:05:52:82:d7:cb:d5:61:
         e8:b7:87:df:af:4b:45:38:2f:66:63:1a:6c:8d:86:72:46:01:
         56:88:97:b2:ee:c1:ea:b0:3a:26:bd:38:3b:69:1f:e6:74:f9:
         ca:d7:cd:90:d9:4f:a8:fc:a6:04:29:1e:cc:15:3f:04:02:0f:
         7f:ab:02:da:5b:21:d6:6e:49:78:62:17:c0:95:8c:fb:09:36:
         40:29:1d:0a:6b:01:7a:56:d1:ce:be:51:e4:97:8d:99:ba:6a:
         84:df:88:e9:c7:4e:41:11:d6:6b:20:1b:57:d8:ac:0a:b2:e7:
         33:39:7d:0b:2d:09:6b:25:59:9e:f9:61:c3:7d:08:ae:4e:64:
         51:c2:06:d5:28:57:e3:a8:1b:7c:7a:f1:90:d3:ae:76:94:6e:
         92:11:60:c6:f1:79:73:71:e2:1c:82:2c:cb:ad:a0:cb:2b:87:
         d3:ca:99:5b:06:7b:b1:46:5f:d6:c9:00:b9:01:19:8b:cd:1a:
         74:76:39:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----