Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79dccb1b-7463-3753-9de5-d4cf6769fe1e.roa
File:                     79dccb1b-7463-3753-9de5-d4cf6769fe1e.roa (raw, json)
Hash identifier:          b+EOj0V2eBfnMt6txkX4BnRxBTqqSb6F7oKKIK1aHdc=
Subject key identifier:   BF:7D:12:16:FB:BC:71:FC:03:17:C3:88:02:3A:A5:D8:40:5F:65:1C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849833A118C61E9569181748D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79dccb1b-7463-3753-9de5-d4cf6769fe1e.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     12129
IP address blocks:        2001:470:36a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:11:8c:61:e9:56:91:81:74:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=e3cde9b8-74bb-4c33-b8a5-b57e978db7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:c0:a2:8e:95:ab:80:0b:64:2e:59:9a:04:
                    0b:d1:8e:57:2d:70:08:37:93:b3:91:b2:f7:2e:d7:
                    26:b5:03:57:03:28:9c:d0:05:de:79:e0:03:fa:44:
                    92:8b:d8:3d:08:24:56:d8:f5:3a:3d:91:e8:cd:e6:
                    3b:c4:e6:e7:b3:e8:06:e5:e0:f6:d8:9d:d6:fa:4d:
                    05:62:27:c6:20:65:67:bc:4e:cb:6d:bc:d5:9a:20:
                    37:c6:87:00:91:f4:d1:46:b4:b1:ce:d0:f9:7e:7d:
                    41:3f:b2:5b:4b:6e:4f:b2:d7:5f:9b:56:9f:52:38:
                    1d:b2:fa:b1:d4:41:45:73:ec:23:b6:dd:f4:70:41:
                    96:98:d2:79:86:0c:73:60:21:a3:aa:41:3a:ba:29:
                    19:c1:73:d5:b6:50:6b:51:62:38:79:37:c6:63:05:
                    07:41:6f:84:32:14:bc:ca:d2:0a:32:b3:52:c9:6a:
                    54:01:08:3b:03:a1:60:c1:fe:1b:87:23:a4:67:5f:
                    32:0a:ed:06:38:76:22:fe:8f:2b:39:71:49:e6:2b:
                    bb:1d:a3:db:06:5b:2b:ab:6c:aa:25:76:f5:34:b0:
                    75:d9:26:63:3a:73:f9:96:11:50:31:1e:99:fb:12:
                    ea:a9:12:a2:d1:5d:c2:78:56:9a:12:8d:e9:db:b0:
                    43:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7D:12:16:FB:BC:71:FC:03:17:C3:88:02:3A:A5:D8:40:5F:65:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79dccb1b-7463-3753-9de5-d4cf6769fe1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:36a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:08:4f:96:f7:ec:51:76:d8:5c:a1:a5:a9:68:9f:fc:9d:19:
         55:56:3a:ab:5b:25:6d:29:bc:7d:ef:f4:b0:51:bc:52:90:9e:
         3c:c7:ba:7e:5b:12:7a:bb:86:dd:cf:e1:2c:7f:cf:9b:28:de:
         86:ce:ed:69:74:49:c0:5a:15:ee:bf:44:4b:4a:3d:2f:0b:a8:
         d2:33:92:20:7b:14:1d:b2:5a:06:3d:be:95:eb:fb:e8:46:28:
         2d:da:f9:69:c3:d4:b7:da:f3:4a:99:8b:3b:dd:88:5b:d6:5c:
         f8:b8:3d:f4:f1:a7:44:62:64:eb:7b:81:bd:19:91:a6:d0:40:
         b7:83:28:14:69:ff:1b:f0:6b:70:2a:69:28:fb:6f:4e:49:ff:
         a3:22:d5:9f:c0:5a:3c:68:3b:f9:98:26:df:1f:4a:a6:8b:11:
         b1:57:58:d8:9e:2c:fd:ce:b4:94:56:51:2d:8a:4d:d3:8a:6f:
         d7:c5:98:b5:b9:97:03:88:8b:26:29:b3:95:04:d3:ac:08:f6:
         93:09:4d:7c:b5:28:f4:ba:f1:83:98:28:68:80:89:82:cb:8d:
         58:fc:e0:95:64:a8:f4:79:b8:77:6d:dd:f3:c9:a9:d2:e4:99:
         dc:7e:9e:24:bf:a7:78:45:f6:5d:c3:4a:d2:84:bd:46:18:d9:
         5c:7e:01:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----