Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/ee43e0d4-8135-32cc-b6e6-7165bebc6445.roa
File:                     ee43e0d4-8135-32cc-b6e6-7165bebc6445.roa (raw, json)
Hash identifier:          /oTcOmHxMLsVseXomsYerIqFn2weSSwj+Tdz/we5zZ0=
Subject key identifier:   E4:5B:DB:84:22:A2:65:62:83:A5:89:4E:26:10:F8:E0:9C:73:DE:3F
Certificate issuer:       /CN=80f343df-55be-4b48-b559-15fb2fe6c1c5
Certificate serial:       010D0C9F43285848B6261B07E2176A30D70ED5C0
Authority key identifier: CA:25:37:D9:1E:AF:B6:C9:18:89:19:53:82:63:C8:4F:4D:F0:83:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/ee43e0d4-8135-32cc-b6e6-7165bebc6445.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     8075
IP address blocks:        2602:812:200a::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:1b:07:e2:17:6a:30:d7:0e:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f343df-55be-4b48-b559-15fb2fe6c1c5
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=dc785e46-7d97-4594-9e55-864001835429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:98:ee:f4:56:2c:69:56:30:c0:15:ef:b4:b1:
                    06:34:8e:b4:25:fa:11:88:45:fb:39:8c:b6:8c:a3:
                    cc:37:f5:99:69:aa:8f:80:97:13:6f:ab:6c:9c:fa:
                    83:b5:29:36:6f:4f:e0:6f:0b:83:5c:64:6d:b4:c3:
                    b1:a8:1c:30:d2:91:3a:27:45:b1:db:69:17:07:e4:
                    4a:ea:ab:b8:b8:1c:38:8e:97:dd:57:19:e9:e0:95:
                    aa:c3:73:66:ee:6b:69:07:ca:6c:ea:83:11:72:a1:
                    76:a2:a2:3a:f1:03:fb:9d:ee:3a:7f:ff:14:df:47:
                    c4:97:e7:2f:20:44:59:c2:3d:be:82:6d:db:7a:17:
                    7c:a4:b6:82:3b:2b:d9:a4:37:21:99:c1:65:3d:5a:
                    92:27:bb:c3:53:7f:ba:6a:c1:7d:bc:e7:f7:89:6a:
                    50:9f:0f:2b:8e:9f:fc:39:1e:ab:4d:55:bf:4f:73:
                    de:10:26:71:00:89:28:e9:dd:4b:b4:04:e7:d6:d3:
                    8d:b1:b4:68:9b:72:67:96:3b:cd:a1:96:1a:1c:59:
                    c1:39:9c:a8:a6:2f:83:ea:3b:07:b1:b1:cc:44:37:
                    9f:80:61:dc:df:c4:07:eb:de:c9:76:4d:80:30:ea:
                    c1:95:2e:60:af:ff:f1:9e:f6:b2:19:e9:44:69:f0:
                    6c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5B:DB:84:22:A2:65:62:83:A5:89:4E:26:10:F8:E0:9C:73:DE:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/ee43e0d4-8135-32cc-b6e6-7165bebc6445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/80f343df-55be-4b48-b559-15fb2fe6c1c5.crl

            X509v3 Authority Key Identifier:
                keyid:CA:25:37:D9:1E:AF:B6:C9:18:89:19:53:82:63:C8:4F:4D:F0:83:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:812:200a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:0d:5d:68:0f:f7:24:e8:08:1f:9a:8d:74:f9:35:f1:f8:cd:
         57:7f:64:11:83:bf:e9:ff:e4:fe:93:87:dc:1f:0a:1a:e6:43:
         15:2e:44:60:11:1d:60:3e:05:eb:3a:a0:8e:4d:2c:15:f0:1b:
         2f:53:23:c2:03:3c:76:4b:d2:4d:a3:dd:52:ae:be:e0:ed:c0:
         36:2d:c9:b4:58:3f:9f:f0:d3:39:6d:73:53:c8:70:1f:6c:25:
         0f:cb:ae:d9:5f:d9:d0:29:a3:23:f8:b6:2b:b3:0a:79:32:e8:
         7c:78:34:9c:6c:45:fa:84:6c:2a:58:43:db:4e:56:98:ef:39:
         67:0b:6e:c8:c0:39:81:25:7c:d4:3c:2d:57:d2:e0:1e:9f:ba:
         40:03:52:9b:46:24:36:18:4a:53:60:29:5e:2b:6a:6b:5c:ae:
         a1:81:26:0f:31:28:7c:66:78:d8:dd:95:85:30:04:51:f0:9e:
         bc:2a:f9:c6:80:b4:31:f1:c5:eb:16:11:c9:50:0a:ed:3b:77:
         65:e8:38:62:ad:cc:41:c0:4a:8c:d3:3b:53:21:59:ea:c4:bd:
         a4:db:a0:94:48:1c:b5:58:e0:c5:d2:fe:b0:c2:04:83:0c:ca:
         39:25:a3:d3:81:1c:42:8a:e7:83:6e:4b:25:2a:e2:0c:c0:e1:
         1a:a8:5d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----