Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bcfde292-c646-37b8-965d-0451e061fab7.roa
File:                     bcfde292-c646-37b8-965d-0451e061fab7.roa (raw, json)
Hash identifier:          xoh8sphvSKlrH3mAwzmwQr7ClUZbMnmnrQqfLXnzIz4=
Subject key identifier:   D3:A7:2C:5F:D2:70:C8:EF:D3:BA:C1:C6:5F:38:C5:11:FD:A8:56:D1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9B05EFA92CC0A5FAC10EE0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bcfde292-c646-37b8-965d-0451e061fab7.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4390::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9b:05:ef:a9:2c:c0:a5:fa:c1:0e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=6e168019-e5c4-4a1e-8eaf-ea921e7b5915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0a:f9:df:26:3d:51:05:7d:36:41:9f:26:85:
                    4f:5b:0e:c5:46:d0:b4:7f:e8:92:03:cf:3b:cf:d8:
                    a0:cc:cb:cd:14:f5:17:99:7d:42:10:65:aa:c8:24:
                    93:02:28:a3:a2:05:4a:76:b2:02:d0:2b:bc:57:71:
                    b3:b7:73:cb:9e:c4:9b:d7:24:3d:b6:84:47:0d:21:
                    a2:08:6b:55:5d:f6:54:80:fd:c8:ee:41:de:a7:89:
                    eb:10:63:5a:14:13:d3:4a:05:b3:0a:f0:3f:4c:9a:
                    65:81:7c:8f:56:9d:4c:bd:6f:b1:5e:fd:d8:3a:57:
                    95:84:e7:81:96:4c:64:0d:56:b0:7a:51:2e:4c:ab:
                    df:d6:9b:0b:e2:a3:a8:fe:df:92:29:89:e2:fd:82:
                    61:cb:52:27:d4:ec:19:e5:ac:d9:79:e8:2c:62:98:
                    1c:18:cd:fb:5f:9f:7c:63:4f:db:bb:4f:43:8d:9e:
                    a2:1e:9e:cb:1e:80:11:4b:af:94:b0:2c:49:8d:f6:
                    c9:74:a6:a6:c6:f9:3e:2a:8c:9c:7f:26:68:f6:d9:
                    5d:1e:e3:86:2b:ec:db:2a:65:8a:17:30:08:93:e1:
                    e8:84:cc:a9:53:b4:ea:09:f6:52:f5:62:8c:fa:a0:
                    27:d7:46:08:c7:f0:17:3b:2a:a5:9e:99:4a:04:2d:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A7:2C:5F:D2:70:C8:EF:D3:BA:C1:C6:5F:38:C5:11:FD:A8:56:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bcfde292-c646-37b8-965d-0451e061fab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4390::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:41:38:bf:4b:06:90:75:f1:63:4a:8b:2b:dd:7d:14:66:1c:
         b0:9f:37:67:02:7e:a6:5e:8f:80:5b:9f:f6:5d:2d:39:f1:13:
         41:01:f8:b6:b9:85:ab:cd:3a:a4:48:f6:80:f3:0c:a5:31:65:
         c3:3d:16:1a:ba:9a:32:e0:5a:9d:64:50:e7:7e:e6:14:7c:b4:
         5f:68:18:ef:82:5f:ff:a2:83:34:81:dd:21:8d:2d:fa:49:0b:
         11:71:a1:22:79:20:8a:53:07:e5:a9:11:0f:64:48:5d:35:8c:
         63:a1:dd:b3:6a:53:93:b9:48:f6:0e:ff:07:87:00:77:05:58:
         a1:14:f8:15:1c:d0:72:cf:31:5d:fa:50:02:ce:32:93:5e:7f:
         65:df:a4:ed:03:5b:67:56:1f:65:63:fb:19:d5:27:fa:9e:92:
         8a:d1:a2:db:dc:1e:d8:3b:73:33:97:c4:77:3a:15:39:30:2b:
         6b:fc:d3:0e:ea:8b:5f:63:f3:32:46:2e:d8:f6:fd:68:67:07:
         3a:74:9c:de:2f:3a:44:b6:09:36:da:71:fe:75:e6:cf:3e:98:
         2f:c4:28:d7:c1:54:c4:46:ac:c3:7f:0c:3f:93:01:ce:41:e7:
         90:98:47:d4:40:ef:32:d0:d8:92:f7:63:a1:2c:18:85:6b:bb:
         ff:b1:87:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----