Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa
File:                     323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa (raw, json)
Hash identifier:          nqj+36+MiaNurPPfzLikkjQ9ANGwXnMgOV/BYAsUZi0=
Subject key identifier:   7D:7E:0B:A8:DB:20:C8:86:04:D6:49:38:0B:92:44:FB:35:6F:60:5E
Certificate issuer:       /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial:       3E578DCE2000B2728F242C5C9FDF5EDFAD1EBAC2
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa
Signing time:             Thu 10 Apr 2025 11:54:06 +0000
ROA not before:           Thu 10 Apr 2025 11:49:06 +0000
ROA not after:            Thu 09 Apr 2026 11:54:06 +0000
asID:                     20473
IP address blocks:        2604:e4c0:110::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:57:8d:ce:20:00:b2:72:8f:24:2c:5c:9f:df:5e:df:ad:1e:ba:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
        Validity
            Not Before: Apr 10 11:49:06 2025 GMT
            Not After : Apr  9 11:54:06 2026 GMT
        Subject: CN=7D7E0BA8DB20C88604D649380B9244FB356F605E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:24:56:fd:2b:4d:bb:f5:00:35:73:6c:6f:
                    82:89:f7:d4:21:a2:ff:92:87:5d:21:46:73:02:a0:
                    0a:b4:61:80:39:d4:ee:cc:34:cb:f8:fb:82:7d:90:
                    64:22:70:11:32:92:cd:57:c6:80:16:1e:c2:d7:a2:
                    88:6b:9c:29:5d:06:0e:f0:d2:d8:99:52:c7:a3:b7:
                    00:32:43:bb:42:1a:61:08:e9:cc:ad:4f:c1:14:91:
                    97:c1:23:10:a4:a6:2a:df:3a:67:8b:38:53:e3:d4:
                    82:18:a9:0a:2d:5a:a7:4d:87:04:82:0b:06:0b:59:
                    04:1a:15:aa:c8:90:f1:2a:a6:1a:52:44:d9:77:5e:
                    bd:24:4b:f8:30:9c:79:ed:31:f4:d7:87:49:d9:f1:
                    99:23:c1:b8:36:73:7f:59:97:c7:9c:d7:d8:45:78:
                    49:41:59:b6:14:51:a6:a2:61:9c:34:28:ba:b5:20:
                    60:6a:a9:af:bc:bb:f1:50:56:20:ae:e6:fd:ec:99:
                    63:da:32:21:ab:40:ca:ac:12:b6:5d:92:e5:2b:92:
                    07:4e:f5:49:40:fa:eb:22:73:f3:2b:a3:3d:83:86:
                    fe:ec:0f:c6:e3:6e:35:4f:5c:49:cd:8c:3a:93:94:
                    d3:f3:3f:81:ff:3f:21:cb:ff:52:bb:66:fd:43:70:
                    f3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7E:0B:A8:DB:20:C8:86:04:D6:49:38:0B:92:44:FB:35:6F:60:5E
            X509v3 Authority Key Identifier:
                keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e4c0:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         82:22:74:6a:9b:d9:b2:a6:d0:c7:84:ec:aa:01:bf:6f:fb:0f:
         a6:6b:13:3a:9e:c6:3a:5b:cf:34:02:5b:4d:b9:65:7e:b5:f3:
         63:2b:f7:b8:b4:58:a8:05:de:7f:fa:7d:48:a5:60:4b:5b:61:
         bf:cf:de:6c:df:37:e6:65:d7:ea:9c:88:f2:fb:1e:5f:84:77:
         0c:62:2f:be:cd:f2:88:37:9f:62:49:76:ec:dc:4b:7b:8f:e5:
         ae:5e:6a:f7:ed:8b:89:03:8b:15:9f:18:37:bb:1a:09:e7:52:
         42:71:af:91:66:07:8c:17:ef:9b:3c:47:49:e7:f3:8c:49:1f:
         2d:d4:41:4e:75:42:5e:bb:80:79:39:e7:42:06:6b:5b:40:84:
         79:d4:ad:8c:59:32:99:bb:96:5a:b1:82:45:fc:1a:6e:7c:04:
         dc:4e:cc:00:51:9d:47:06:3a:44:bb:9e:85:6a:9a:39:60:58:
         5c:79:c3:65:a2:f8:2b:20:52:be:80:1f:9a:d7:c8:25:99:4b:
         09:7f:ff:d8:88:8b:ae:95:f5:94:56:f4:dc:f1:1d:20:33:18:
         cf:69:0c:2c:1f:79:12:76:39:da:29:02:b2:f3:82:c5:b6:85:
         38:bd:86:5b:d4:f6:61:d1:f4:61:82:e3:95:3c:61:35:69:97:
         4c:39:85:e3
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgIUPleNziAAsnKPJCxcn99e360eusIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODFkYWRlNDdlZjU2NWE2N2MzMzQ5NGU2NjdkMDNkNGRh
N2NmZjE3MzliMDI3YzY0MGIwHhcNMjUwNDEwMTE0OTA2WhcNMjYwNDA5MTE1NDA2
WjAzMTEwLwYDVQQDEyg3RDdFMEJBOERCMjBDODg2MDRENjQ5MzgwQjkyNDRGQjM1
NkY2MDVFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM8kVv0rTbv1
ADVzbG+CiffUIaL/koddIUZzAqAKtGGAOdTuzDTL+PuCfZBkInARMpLNV8aAFh7C
16KIa5wpXQYO8NLYmVLHo7cAMkO7QhphCOnMrU/BFJGXwSMQpKYq3zpnizhT49SC
GKkKLVqnTYcEggsGC1kEGhWqyJDxKqYaUkTZd169JEv4MJx57TH014dJ2fGZI8G4
NnN/WZfHnNfYRXhJQVm2FFGmomGcNCi6tSBgaqmvvLvxUFYgrub97Jlj2jIhq0DK
rBK2XZLlK5IHTvVJQPrrInPzK6M9g4b+7A/G4241T1xJzYw6k5TT8z+B/z8hy/9S
u2b9Q3DzuQIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFH1+C6jbIMiGBNZJOAuSRPs1
b2BeMB8GA1UdIwQYMBaAFHTjueFuksUaiXmttacx3eLV6ulsMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNTMvNzRFM0I5RTE2RTkyQzUxQTg5NzlBREI1QTczMURERTJENUVBRTk2
Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj
Y2UtMTM3MjI3ZTk3MWFjL2I1YWUxODNlLWE0MDItNGMxYS1iNDY0LTY3MDQ3MmU4
MmI3Mi84MWRhZGU0N2VmNTY1YTY3YzMzNDk0ZTY2N2QwM2Q0ZGE3Y2ZmMTczOWIw
MjdjNjQwYi5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTMvMzIzNjMwMzQzYTY1MzQ2MzMwM2Ez
MTMxMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcEJgTkwAEQMA0GCSqGSIb3DQEBCwUAA4IBAQCCInRqm9myptDHhOyqAb9v+w+m
axM6nsY6W880AltNuWV+tfNjK/e4tFioBd5/+n1IpWBLW2G/z95s3zfmZdfqnIjy
+x5fhHcMYi++zfKIN59iSXbs3Et7j+WuXmr37YuJA4sVnxg3uxoJ51JCca+RZgeM
F++bPEdJ5/OMSR8t1EFOdUJeu4B5OedCBmtbQIR51K2MWTKZu5ZasYJF/BpufATc
TswAUZ1HBjpEu56Fapo5YFhcecNlovgrIFK+gB+a18glmUsJf//YiIuulfWUVvTc
8R0gMxjPaQwsH3kSdjnaKQKy84LFtoU4vYZb1PZh0fRhguOVPGE1aZdMOYXj
-----END CERTIFICATE-----