Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/eaa60970-f300-3abf-bf36-f7659ebacd94.roa
File:                     eaa60970-f300-3abf-bf36-f7659ebacd94.roa (raw, json)
Hash identifier:          8AvgDfmWPJlAoNOCUuymuZCeRjbayPo4y9rknFRLKGc=
Subject key identifier:   09:42:09:A7:DA:B8:29:4D:B4:85:4F:31:CB:58:32:92:90:52:97:33
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9B03356EB92DFA26EE2340
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/eaa60970-f300-3abf-bf36-f7659ebacd94.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:53d0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9b:03:35:6e:b9:2d:fa:26:ee:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=fbba8113-68ac-4dfa-8b51-c3b3efff67aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:50:6d:02:c5:c5:ad:7e:30:c3:cf:a8:74:f3:
                    64:3e:2e:70:52:1a:fb:d3:cc:a2:16:fb:23:82:c6:
                    9a:b3:c6:2d:36:33:34:ee:43:fa:08:c1:af:90:ea:
                    98:de:40:e2:6e:89:01:0f:07:52:e6:f2:1e:37:da:
                    b9:9b:55:eb:0a:6a:bc:07:e0:f3:95:9a:c3:f6:4d:
                    30:35:3b:6f:47:a1:a9:2c:5e:fd:e3:4e:ed:56:c4:
                    69:64:53:d6:b7:95:b5:c1:60:80:2b:f9:ea:1a:8d:
                    6b:5c:9f:9f:88:36:1f:47:ad:5f:b4:5d:e7:58:f5:
                    2d:67:60:e5:fc:34:fc:11:9a:2d:68:8b:52:8a:14:
                    ee:96:46:ee:9b:7d:bf:f7:00:bc:6b:76:d4:de:34:
                    2b:5c:97:6d:a6:63:bb:88:d6:c7:d0:ed:bc:3c:4d:
                    7b:cd:69:82:a6:9e:b3:33:eb:42:c0:d5:3e:ac:7e:
                    36:11:37:3d:6f:4a:03:68:ed:28:bd:1d:14:47:b3:
                    fa:6d:37:1e:1e:d2:0d:d9:f1:0a:e1:e8:93:6e:fa:
                    c4:dd:5c:52:dd:e5:ae:69:29:92:3a:e2:88:9d:4d:
                    49:87:ad:bf:6a:d1:a2:3c:26:88:c4:82:23:34:d9:
                    ef:e7:29:cd:ea:31:94:a1:b2:7b:cf:c1:3d:51:5a:
                    de:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:42:09:A7:DA:B8:29:4D:B4:85:4F:31:CB:58:32:92:90:52:97:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/eaa60970-f300-3abf-bf36-f7659ebacd94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:53d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:f6:f4:d5:a5:87:ed:bd:eb:c8:04:23:7f:18:01:3b:dc:66:
         d1:c8:7d:ea:95:19:80:1e:9a:4c:3d:6c:d3:58:76:0c:26:e8:
         ae:9a:56:6d:13:4f:88:66:f8:95:66:57:0e:44:24:fa:45:1d:
         24:b0:2c:d5:9f:e2:79:6a:2e:10:de:0d:e9:34:c4:59:83:cd:
         6c:ff:8c:f2:62:dc:0e:b4:b1:4f:fb:f0:24:11:4a:02:e7:a1:
         33:fe:76:d9:80:55:f3:1f:47:8d:10:4a:68:62:fd:ac:09:8e:
         ad:99:e1:99:dc:9c:97:79:7c:31:74:45:fc:df:e2:e4:90:7b:
         8a:dd:e9:ef:b7:d4:02:6c:ba:67:65:88:86:90:8d:29:53:0c:
         45:e5:3c:d1:90:f4:bd:06:5f:52:aa:ec:ee:a6:9c:77:20:d5:
         87:57:7a:1e:7b:a4:df:1b:19:d7:ad:c1:d4:be:ff:c1:43:5b:
         a3:54:17:15:9b:3c:51:8e:e8:be:f8:36:3e:39:f7:26:71:26:
         45:19:5c:fa:38:bc:df:74:d1:75:6a:9b:df:22:7f:31:a6:eb:
         01:bf:80:3e:89:5e:f8:a2:33:e4:59:e8:2c:28:36:bf:4d:05:
         f9:93:ce:43:04:2f:65:fc:64:31:63:49:f5:bc:88:a4:87:9e:
         f9:71:32:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----