Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4435826d-b85c-3e62-9b7a-608136d8b2ae.roa
File:                     4435826d-b85c-3e62-9b7a-608136d8b2ae.roa (raw, json)
Hash identifier:          FOlQhGdBw0N5TpYt4idr4EKbRdwFX93IH0JqgaT38cY=
Subject key identifier:   37:B8:34:C8:66:6E:9A:9C:10:1B:59:D7:C4:74:6B:AA:8A:D0:CD:F7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584838624233984426605DA5D480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4435826d-b85c-3e62-9b7a-608136d8b2ae.roa
Signing time:             Mon 16 Dec 2024 00:50:08 +0000
ROA not before:           Mon 16 Dec 2024 00:50:08 +0000
ROA not after:            Sat 15 Mar 2025 23:50:08 +0000
asID:                     13335
IP address blocks:        2606:4700:3035::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:62:42:33:98:44:26:60:5d:a5:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 16 00:50:08 2024 GMT
            Not After : Mar 15 23:50:08 2025 GMT
        Subject: CN=c2603dda-2551-48e8-83c9-bf4d92d794fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:04:00:e9:b1:1d:2d:65:96:e3:47:82:a1:2f:
                    af:3f:75:d1:73:e0:9e:f7:f0:e7:a1:32:93:ae:2a:
                    0b:7a:66:2e:44:93:09:e7:79:47:6d:62:cc:ef:b6:
                    cf:c3:15:61:ee:d3:6b:a5:4d:fe:a7:1b:76:81:16:
                    58:58:08:f1:eb:15:f9:44:bf:f8:41:2b:04:68:51:
                    5c:57:58:7e:62:18:86:2e:a1:10:76:1e:70:82:9b:
                    d2:be:fd:b9:59:49:23:9c:e8:ed:16:32:3f:c0:8e:
                    fe:38:08:d6:37:ad:73:b4:78:2f:dd:3f:7d:e6:eb:
                    8b:29:8e:d1:40:de:1d:08:69:60:9d:c2:cd:b1:2f:
                    a8:c7:bd:fd:68:f8:a0:fa:89:91:a4:a1:73:3a:f6:
                    21:35:07:ca:f5:00:b9:a2:67:1b:58:25:06:4c:5d:
                    10:7a:13:dc:8f:9d:2e:e7:c8:ff:31:66:28:d7:40:
                    c1:34:e3:ac:c8:1a:a8:c7:ba:af:37:ea:b9:83:fa:
                    fb:b7:43:aa:a8:a0:1a:ab:75:0f:02:15:21:8d:b7:
                    de:3c:a1:7e:5e:ee:87:06:a1:8d:d0:e4:e7:45:32:
                    14:cd:d6:35:45:4d:22:53:49:e6:03:38:ec:ad:9a:
                    01:3b:83:9b:a7:54:cb:4f:c3:14:e3:42:84:e3:f4:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B8:34:C8:66:6E:9A:9C:10:1B:59:D7:C4:74:6B:AA:8A:D0:CD:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4435826d-b85c-3e62-9b7a-608136d8b2ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:3035::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:5d:d0:a4:f6:71:1a:12:65:8f:51:b0:43:08:58:fa:42:b1:
         4d:19:ac:bf:d3:eb:69:09:a6:22:fb:2c:88:31:bf:c2:ba:ba:
         72:c8:58:b2:49:03:21:da:a1:fd:5c:fd:0f:c3:dd:11:a8:f4:
         44:da:8c:0c:d2:59:c9:ce:c4:a7:93:7f:9b:98:25:6b:4e:45:
         3e:83:6d:af:8e:85:f2:fe:3b:2e:62:71:ed:30:bb:b8:ec:92:
         d1:89:8d:11:97:37:a8:f3:2b:74:4a:68:2f:55:ec:50:7a:bb:
         aa:67:f6:4b:63:cb:cf:af:cd:11:bb:e2:3f:20:20:a9:8a:b7:
         ff:74:b4:83:e0:8b:1d:4d:f7:99:f2:5a:8b:f2:e4:e7:68:63:
         a8:88:d9:56:e4:bc:92:83:d0:83:b5:9a:3f:da:92:2b:f8:ff:
         e8:c7:61:69:62:c2:86:22:ea:23:26:d0:a8:65:31:ab:8a:cd:
         7d:a1:77:72:27:31:e4:7e:ef:e3:d0:e3:0d:90:a0:a4:29:21:
         d0:3b:2f:23:c7:ac:2e:a5:01:ea:92:ea:19:14:0f:9a:b3:b5:
         12:66:c1:9e:69:72:81:0e:9d:b5:94:95:26:a8:ef:d4:76:1c:
         f0:6a:55:8b:28:9d:b2:1d:b9:23:8b:7d:65:03:0f:42:58:f7:
         69:70:f6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----