Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98e69e38-4353-3762-a63c-5f5e5ec4ec31.roa
File:                     98e69e38-4353-3762-a63c-5f5e5ec4ec31.roa (raw, json)
Hash identifier:          Nk6IBrLLMH82O+C6A/pUGY63tlA7fqfAitQWzR0Hiik=
Subject key identifier:   73:6B:07:48:73:9C:C4:15:0D:DF:FE:66:BC:13:79:7E:E8:EE:3B:30
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858492F87CE8E839A4BB1AD765880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98e69e38-4353-3762-a63c-5f5e5ec4ec31.roa
Signing time:             Fri 14 Mar 2025 13:30:27 +0000
ROA not before:           Fri 14 Mar 2025 13:30:27 +0000
ROA not after:            Thu 12 Jun 2025 13:30:27 +0000
asID:                     49183
IP address blocks:        2001:470:427::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2f:87:ce:8e:83:9a:4b:b1:ad:76:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 14 13:30:27 2025 GMT
            Not After : Jun 12 13:30:27 2025 GMT
        Subject: CN=1de9dfdf-4bbf-4d0a-8d65-8233b3883717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:97:69:11:08:1b:f5:ec:92:83:ab:3f:d0:
                    2f:11:0c:73:f5:1c:f4:b1:83:5f:62:12:49:02:c5:
                    79:ef:9a:03:96:4c:e3:5f:c8:31:4d:9c:af:af:ed:
                    7d:e6:e3:87:d7:e2:1d:97:8a:6d:44:d6:1c:84:e9:
                    fe:61:a8:9e:63:a6:cb:87:df:4e:63:35:0a:bc:09:
                    59:40:66:d7:09:c1:28:f6:84:0b:58:ff:93:b9:8c:
                    e5:3c:89:80:6b:9a:39:13:9e:4c:7f:d2:e7:36:41:
                    7a:23:5b:9e:d4:85:ee:91:f2:36:fb:2a:18:67:d0:
                    b6:4f:d6:76:7b:79:43:39:bb:9a:61:fb:47:d7:8e:
                    02:8d:79:20:ab:00:ed:0c:02:3b:ad:7a:c1:ee:ff:
                    b1:47:b4:24:33:d0:84:e7:c4:83:b5:69:0c:71:fa:
                    8a:89:46:bd:2d:c6:9e:69:59:e5:01:8d:5f:06:ee:
                    3a:60:23:35:99:fc:06:fb:71:36:7e:bd:76:c1:ee:
                    a0:c2:8b:d8:16:15:e6:80:69:18:2e:e4:f9:bf:f4:
                    1b:2f:c1:31:77:13:3e:5b:ab:08:f9:dc:6e:1a:2f:
                    bb:6d:d5:68:be:eb:83:50:08:08:7a:05:85:1d:63:
                    da:dd:dd:0f:39:3e:e3:39:cc:ae:37:64:db:c2:46:
                    ee:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6B:07:48:73:9C:C4:15:0D:DF:FE:66:BC:13:79:7E:E8:EE:3B:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98e69e38-4353-3762-a63c-5f5e5ec4ec31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:427::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:b0:db:12:93:90:c5:d0:75:19:3d:c8:5e:9b:bc:2f:ad:2b:
         ea:32:06:ef:27:90:cf:c9:c9:9d:0e:b2:05:20:05:34:87:09:
         55:80:b9:be:ef:2c:c3:a4:7e:e8:3b:cf:86:61:ac:6d:b4:98:
         4f:33:7c:a4:5f:3d:f1:44:12:81:eb:6d:37:71:38:16:57:92:
         1b:76:08:c8:36:de:49:39:a8:03:3d:e7:9b:13:06:5f:f7:c3:
         98:eb:95:7a:cf:82:6e:2c:41:df:5e:d9:47:48:47:64:60:84:
         d1:fa:d6:50:04:61:c8:4d:c3:2e:48:45:2a:55:1f:7f:0c:c7:
         af:c7:37:b9:87:e3:42:36:e6:cf:95:7d:9a:49:f9:6e:99:ab:
         5a:db:2b:99:73:e4:3f:5d:c7:61:2f:01:75:31:f4:4f:a4:4a:
         23:a4:a9:93:ec:b4:39:cf:53:33:f8:b2:c2:38:9b:5d:b9:99:
         ff:f8:b3:c9:5d:fa:ed:5c:f9:0a:4c:48:bc:f8:55:00:4d:18:
         82:5d:12:02:f0:d8:18:84:86:38:5c:1e:b2:84:45:35:ac:42:
         81:fa:6b:2f:48:5f:4f:3c:47:b7:b6:d7:e5:36:51:c1:19:41:
         55:83:fd:7c:6b:0d:4c:1a:aa:c4:aa:05:d2:bd:d1:06:5a:9b:
         d7:60:45:ca
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkvh86Og5pLsa12WIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDMxNDEzMzAyN1oXDTI1MDYxMjEzMzAyN1owLzEtMCsGA1UEAxMk
MWRlOWRmZGYtNGJiZi00ZDBhLThkNjUtODIzM2IzODgzNzE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM6XaREIG/XskoOrP9AvEQxz9Rz0sYNfYhJJ
AsV575oDlkzjX8gxTZyvr+195uOH1+Idl4ptRNYchOn+YaieY6bLh99OYzUKvAlZ
QGbXCcEo9oQLWP+TuYzlPImAa5o5E55Mf9LnNkF6I1ue1IXukfI2+yoYZ9C2T9Z2
e3lDObuaYftH144CjXkgqwDtDAI7rXrB7v+xR7QkM9CE58SDtWkMcfqKiUa9Lcae
aVnlAY1fBu46YCM1mfwG+3E2fr12we6gwovYFhXmgGkYLuT5v/QbL8ExdxM+W6sI
+dxuGi+7bdVovuuDUAgIegWFHWPa3d0POT7jOcyuN2Tbwkbu8QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHNrB0hznMQVDd/+ZrwTeX7o7jswMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOThlNjllMzgtNDM1My0z
NzYyLWE2M2MtNWY1ZTVlYzRlYzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALiw2xKTkMXQdRk9yF6bvC+tK+oyBu8nkM/JyZ0OsgUgBTSHCVWA
ub7vLMOkfug7z4ZhrG20mE8zfKRfPfFEEoHrbTdxOBZXkht2CMg23kk5qAM955sT
Bl/3w5jrlXrPgm4sQd9e2UdIR2RghNH61lAEYchNwy5IRSpVH38Mx6/HN7mH40I2
5s+VfZpJ+W6Zq1rbK5lz5D9dx2EvAXUx9E+kSiOkqZPstDnPUzP4ssI4m125mf/4
s8ld+u1c+QpMSLz4VQBNGIJdEgLw2BiEhjhcHrKERTWsQoH6ay9IX088R7e21+U2
UcEZQVWD/XxrDUwaqsSqBdK90QZam9dgRco=
-----END CERTIFICATE-----