Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b758603d-156a-3902-a95f-abcfcebf2565.roa
File:                     b758603d-156a-3902-a95f-abcfcebf2565.roa (raw, json)
Hash identifier:          sWmGh9PAU+6KnuvLZXDbBeN31kOl+w6XjWXX8E1csI4=
Subject key identifier:   08:CF:DF:88:A4:92:D4:F7:9C:FC:D5:B6:A7:DB:F7:9E:AA:F4:FF:0D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926E0CFB284FAED07867F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b758603d-156a-3902-a95f-abcfcebf2565.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     18914
IP address blocks:        2001:470:1d2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:e0:cf:b2:84:fa:ed:07:86:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=260fdc78-91ef-479d-8b17-f50d10a163dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cc:9a:cf:0c:c2:68:58:e3:78:a3:83:e2:a3:
                    39:92:3c:11:4e:10:91:f6:4c:8e:56:2a:2d:e7:a1:
                    14:68:ad:a2:14:9d:d2:ee:f6:63:6c:76:40:47:74:
                    00:62:54:d5:d1:d7:25:ed:7a:d8:8a:82:71:c9:55:
                    88:d6:7f:8a:94:45:21:b3:c4:a6:1c:81:89:1f:cd:
                    d2:72:1e:20:11:ed:12:cf:94:10:a8:90:40:0c:9c:
                    41:15:be:7b:ce:32:de:3a:f0:bc:a5:81:c9:18:64:
                    63:9e:fe:d2:8d:91:7f:9e:26:41:15:f5:61:f2:dc:
                    12:3a:75:3e:79:3c:89:c4:d7:55:09:86:c5:ca:32:
                    83:69:de:6a:73:32:51:2f:b7:33:95:46:bc:61:bf:
                    49:a1:eb:f0:7a:89:84:8d:95:0f:04:d5:c2:33:91:
                    1b:21:45:77:d6:e7:3a:a7:a5:ee:a8:2e:ab:70:02:
                    87:dd:81:6c:dd:ee:60:58:1a:82:62:00:9c:46:5d:
                    59:f5:dd:13:0b:bf:68:f3:89:0a:00:81:af:fc:89:
                    7a:8d:1b:0f:72:7d:c2:bd:65:d2:d3:25:0b:68:f9:
                    7e:4d:6a:6a:81:19:0c:82:40:04:3e:b9:3f:56:c1:
                    6d:bc:d0:51:90:1f:b0:8f:c4:dc:d9:2c:b8:99:53:
                    32:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CF:DF:88:A4:92:D4:F7:9C:FC:D5:B6:A7:DB:F7:9E:AA:F4:FF:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b758603d-156a-3902-a95f-abcfcebf2565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1d2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:73:00:39:a1:57:e9:86:13:3d:c1:44:a7:15:cb:f7:14:23:
         4d:4b:f3:b0:0f:d7:9b:a2:00:1b:a2:82:4e:46:5a:52:b7:76:
         95:9f:b9:8a:c6:52:e1:64:b8:3c:03:bc:87:a2:ea:0a:3f:fc:
         5d:b7:3a:ac:c5:bd:f3:2f:8f:d1:2f:cb:2d:d2:dc:7b:84:c0:
         4c:89:43:c1:e0:31:2b:45:36:d2:fd:dd:af:4c:c1:b2:77:bd:
         29:61:bc:da:d0:f1:0f:53:67:24:87:cb:67:e6:4a:ed:3b:89:
         f0:3f:5c:3e:a2:5d:11:16:42:b9:b9:d6:0b:23:cc:dd:2d:27:
         77:04:ad:e2:e7:e9:d2:fb:ad:75:87:9f:78:8f:1c:66:76:06:
         a7:8b:0d:76:4b:72:0c:31:3f:d7:ac:7c:3b:3f:00:df:f1:fa:
         23:5a:6a:94:a3:ce:09:46:19:13:97:d6:25:28:41:ca:1d:de:
         d4:79:51:d5:42:d7:ec:dc:80:f8:0c:8b:7e:8c:0b:a9:fa:73:
         5a:57:bf:12:55:77:bc:cb:eb:38:a4:93:fe:e5:e4:7b:d2:f1:
         2b:24:76:63:11:41:1d:e3:da:39:43:7e:4a:7b:b5:02:b9:fa:
         79:3c:cf:56:70:07:f7:81:90:5d:b3:14:ae:5a:b6:82:00:37:
         7a:46:da:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----