Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cc44dd7-835c-47ac-83c2-d7dd4dde67cd/a6a7ae2a-f570-373a-a89c-d7a5ad2effcf.roa
File:                     a6a7ae2a-f570-373a-a89c-d7a5ad2effcf.roa (raw, json)
Hash identifier:          Tk5n//d7pGegGSzx+g8M+3m14RVeLb8JLlhWzyJLmF8=
Subject key identifier:   E1:57:C1:57:FE:62:95:FA:08:C0:2F:FC:1D:56:BA:DF:39:96:93:F9
Certificate issuer:       /CN=1cc44dd7-835c-47ac-83c2-d7dd4dde67cd
Certificate serial:       010D0C9F43285847FDE4D863BB798EC74F577500
Authority key identifier: 77:8D:F4:F6:AA:62:B9:3D:05:51:86:69:FE:84:44:A1:99:83:B5:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cc44dd7-835c-47ac-83c2-d7dd4dde67cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cc44dd7-835c-47ac-83c2-d7dd4dde67cd/a6a7ae2a-f570-373a-a89c-d7a5ad2effcf.roa
Signing time:             Mon 25 Nov 2024 02:00:28 +0000
ROA not before:           Mon 25 Nov 2024 02:00:28 +0000
ROA not after:            Sun 23 Feb 2025 02:00:28 +0000
asID:                     62810
IP address blocks:        2605:ab40::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:e4:d8:63:bb:79:8e:c7:4f:57:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cc44dd7-835c-47ac-83c2-d7dd4dde67cd
        Validity
            Not Before: Nov 25 02:00:28 2024 GMT
            Not After : Feb 23 02:00:28 2025 GMT
        Subject: CN=429d5846-21d9-4d63-a3ad-9da479ce8a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:87:46:61:96:ab:0b:b8:bd:06:b6:29:e0:
                    77:d1:65:6f:75:99:ac:0e:d1:73:e1:a3:12:bf:01:
                    25:01:6e:3e:8a:9c:20:c6:bb:96:cc:06:72:66:f6:
                    c6:02:c6:ca:67:ed:d5:35:51:cf:30:38:7b:dd:27:
                    bc:0c:af:eb:c3:1e:78:4f:6f:31:3d:aa:7b:84:0f:
                    ae:fc:47:db:51:1f:9d:ef:9e:9c:87:a4:c2:52:42:
                    3e:8e:d2:df:a4:57:5c:f6:c3:f8:68:23:64:b9:0d:
                    be:4b:83:bc:40:d2:ec:33:fe:47:b8:4c:4c:07:ad:
                    64:56:69:ae:ee:40:cc:af:65:6e:7d:51:84:57:10:
                    e8:bf:a5:21:14:d5:2f:7c:79:9c:07:7c:0a:ce:97:
                    c4:e3:55:1e:92:48:1f:d8:9e:5d:6b:b7:9c:da:1d:
                    cb:60:72:b2:1f:44:e0:d2:c0:78:b1:e3:83:1b:19:
                    6e:e6:a8:84:57:35:45:b1:c6:c2:65:60:11:35:5a:
                    4b:c3:a1:91:ed:3d:73:55:e3:19:b3:7b:33:c6:ee:
                    9b:bb:79:40:67:a7:e6:4c:60:cf:cc:a4:2b:31:f1:
                    03:86:5b:48:ed:57:14:5b:03:ba:d6:92:2e:11:a2:
                    2f:25:7b:d0:13:73:01:af:bf:6a:19:ba:ed:34:bf:
                    d8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:57:C1:57:FE:62:95:FA:08:C0:2F:FC:1D:56:BA:DF:39:96:93:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cc44dd7-835c-47ac-83c2-d7dd4dde67cd/a6a7ae2a-f570-373a-a89c-d7a5ad2effcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cc44dd7-835c-47ac-83c2-d7dd4dde67cd/1cc44dd7-835c-47ac-83c2-d7dd4dde67cd.crl

            X509v3 Authority Key Identifier:
                keyid:77:8D:F4:F6:AA:62:B9:3D:05:51:86:69:FE:84:44:A1:99:83:B5:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cc44dd7-835c-47ac-83c2-d7dd4dde67cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ab40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:85:2f:0f:16:08:1d:41:3d:d9:c2:aa:cb:3f:f4:65:6e:10:
         72:71:2d:5d:1e:5a:49:8b:de:67:48:7e:3b:d8:48:df:9b:ba:
         39:18:79:d7:e7:b7:12:20:a0:fd:6d:24:59:a4:85:3e:84:1e:
         6d:47:50:55:cd:88:75:b0:85:c3:49:e7:1f:0e:74:bd:ce:c6:
         69:24:85:45:b3:41:0b:d7:61:fa:b5:c0:2e:d0:93:70:c6:fb:
         9a:87:b0:c0:2e:1b:ab:f7:e9:4b:28:42:27:2a:bc:31:08:67:
         83:0a:dd:30:73:2e:85:15:34:5d:51:08:62:37:05:b1:d2:99:
         72:45:1c:9f:0f:f7:4b:ee:c2:58:69:a8:4f:09:d0:04:b8:95:
         af:2c:28:20:f1:a0:40:26:ae:37:b1:04:ac:f5:a6:c1:cf:2d:
         82:cf:f4:fd:08:82:a8:90:33:76:cb:f0:e1:3f:6c:2b:3a:7e:
         9e:2c:64:24:ca:20:47:8e:57:53:8c:d6:c9:dc:c4:8a:af:61:
         12:87:71:dc:f7:e1:8d:01:d4:05:26:e0:30:45:1b:d5:40:da:
         e9:0b:c3:05:0c:ea:ce:b7:47:6d:14:ec:94:68:87:79:5b:47:
         7c:e6:c6:a2:2d:7f:76:05:63:54:04:0f:e8:11:e1:88:d2:4d:
         bd:97:fa:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----