Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/354b6b4b-fe0d-3804-a420-3adce649b26a.roa
File:                     354b6b4b-fe0d-3804-a420-3adce649b26a.roa (raw, json)
Hash identifier:          owbKch9BW6mbBeVAWz8BgmgqKnNMlrCyTGnb0dX+kcY=
Subject key identifier:   9E:EB:0A:A3:EE:2F:20:86:1C:7E:8C:29:77:24:B4:D2:80:FE:8E:B1
Certificate issuer:       /CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f
Certificate serial:       010D0C9F43285848424AE2F3A109D3CEF9EFE2C0
Authority key identifier: DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/354b6b4b-fe0d-3804-a420-3adce649b26a.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     20259
IP address blocks:        2604:440::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:e2:f3:a1:09:d3:ce:f9:ef:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=4153055e-5fb5-4173-a1de-377ecbce8bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:60:5d:80:e9:34:e3:f9:1c:7a:dd:9c:0e:dc:
                    cd:94:9e:96:a7:41:e1:37:11:54:08:a2:87:ef:fd:
                    f2:98:88:65:a2:ae:a1:3b:8a:08:19:da:36:bc:ce:
                    ba:97:71:72:29:b9:e1:e3:33:06:a2:cf:f9:5e:b6:
                    5e:f7:fc:a2:0c:43:85:a4:f7:e0:fc:6a:a6:cf:10:
                    17:29:1f:a1:fe:4c:15:da:24:ca:22:3d:5e:07:fd:
                    87:0d:ae:08:77:5a:51:d3:a1:68:b3:d0:b5:91:d1:
                    42:29:33:84:ea:40:15:01:60:c3:ff:bf:6a:b8:f2:
                    53:8a:7a:99:a5:09:a6:e1:fe:ce:e6:75:ca:7a:f0:
                    1f:4b:ca:80:d5:8a:5c:03:8e:4e:d2:30:f9:ec:70:
                    dc:71:c0:a9:6f:37:e2:7c:02:bd:6f:45:b6:84:f0:
                    57:f8:88:0c:e2:6c:07:30:6d:3b:1a:8b:74:ce:22:
                    f1:6f:0c:a8:5d:db:91:aa:e7:63:2c:c2:e1:4c:0c:
                    5a:87:c7:d1:be:c6:91:a2:11:b7:53:bd:91:94:9c:
                    a6:08:46:81:1e:d9:50:35:b2:25:e4:e6:6a:15:dd:
                    4e:f2:77:57:35:3d:98:ed:21:06:b5:62:e8:74:aa:
                    fa:b1:38:1d:87:2d:5b:e0:13:21:1b:54:21:b7:4c:
                    64:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EB:0A:A3:EE:2F:20:86:1C:7E:8C:29:77:24:B4:D2:80:FE:8E:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/354b6b4b-fe0d-3804-a420-3adce649b26a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl

            X509v3 Authority Key Identifier:
                keyid:DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:d3:32:98:77:39:a7:b1:14:d7:b2:ea:c7:aa:19:92:46:7d:
         23:47:c2:96:28:c7:79:c0:b4:e7:86:32:92:be:19:21:ec:93:
         f6:90:1a:82:50:3e:2c:45:94:02:25:94:82:3d:ea:a7:41:2b:
         6e:b1:3a:2b:8b:f4:ea:2a:83:6c:57:c5:f9:76:f7:be:bc:9e:
         46:49:70:46:0a:ee:23:70:b6:38:fc:3a:0c:c3:c4:76:b2:6e:
         c4:0e:da:3c:cd:3e:1b:97:6d:70:02:e8:a2:c8:3d:d4:7d:5c:
         11:8f:82:22:09:ee:60:f9:cf:ab:49:6f:31:ff:85:6a:61:26:
         55:32:ea:63:bd:c6:5f:3d:3f:d5:a9:30:32:1a:02:45:56:f9:
         c7:0d:3e:de:1e:9f:a8:ab:70:de:10:27:b4:2a:5b:36:be:e5:
         bb:7a:95:fb:94:52:2c:db:2a:c0:fc:df:c0:85:b7:14:a2:fa:
         f3:2b:79:ff:f5:f2:e2:ed:31:a3:92:2d:7f:70:2d:92:8e:3f:
         92:f6:e0:21:07:59:69:05:4b:39:5a:9d:30:a0:69:cc:d0:47:
         00:71:79:00:12:2c:ff:84:b9:f0:5b:57:26:76:90:01:98:c8:
         80:dd:a6:0b:37:d6:72:85:4f:76:69:f9:83:c2:3a:04:fb:fc:
         ad:e0:22:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----