Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/f61adb1e-bc9e-34ec-80fb-4d5ecf11e1dd.roa
File:                     f61adb1e-bc9e-34ec-80fb-4d5ecf11e1dd.roa (raw, json)
Hash identifier:          DsqFxwc52d/MKVk7jnid9SglcNb/xJABmZfF869gLDU=
Subject key identifier:   00:66:0F:72:42:BB:EF:FE:66:87:CB:A2:66:01:D5:29:BB:0A:2B:FF
Certificate issuer:       /CN=eb3726d7-0f8c-4949-99b6-eecda94a0675
Certificate serial:       010D0C9F432858483455676DFA00E2691E7A3020
Authority key identifier: 9E:F0:8D:44:A7:A6:26:F4:A9:17:81:5E:EA:26:57:FC:D8:00:89:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/f61adb1e-bc9e-34ec-80fb-4d5ecf11e1dd.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     194
IP address blocks:        2620:117:2000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:67:6d:fa:00:e2:69:1e:7a:30:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb3726d7-0f8c-4949-99b6-eecda94a0675
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=c0dbb9e4-034f-4ff9-af42-323da68cb8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:70:0e:09:d8:d8:a1:1d:6d:b7:5a:e4:0b:70:
                    d2:74:be:a0:d8:4d:61:b7:36:8d:eb:2a:d9:2c:b3:
                    f0:c6:af:a8:f7:cb:28:69:e3:fc:ae:71:48:56:5a:
                    06:20:a3:d9:7c:d4:16:54:b6:19:1c:a9:f2:b2:e9:
                    a2:ae:59:66:fc:5c:df:20:82:4a:47:88:0f:ca:81:
                    de:d8:5b:09:21:c5:b0:a2:7e:68:f6:32:9b:72:68:
                    ae:69:4e:00:0b:88:ec:1b:60:de:9d:bc:15:34:0f:
                    c8:7a:30:68:8c:6a:30:00:8a:85:8b:46:d8:4a:59:
                    16:06:7e:27:68:c5:b7:b2:19:da:1a:89:f6:f8:20:
                    b6:7b:67:42:1b:6b:1a:42:2b:b1:be:22:d0:dd:7b:
                    ee:5c:b4:e8:3a:03:13:e5:da:74:8a:9e:3a:bf:ce:
                    6d:03:a6:f7:a2:f3:9e:45:21:d6:98:7d:85:a2:f4:
                    31:97:33:4d:7c:1b:04:61:51:d1:b4:b3:17:c3:5e:
                    aa:8d:ca:c0:50:5d:a0:04:e3:e4:3b:4f:b0:57:86:
                    fe:16:7e:84:24:92:a5:68:7d:54:88:0c:3e:8c:07:
                    5b:51:91:b9:09:56:7d:9a:aa:df:7e:aa:8d:3d:c6:
                    06:20:22:81:92:b9:74:ee:d0:3c:96:5a:a9:a0:81:
                    b7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:66:0F:72:42:BB:EF:FE:66:87:CB:A2:66:01:D5:29:BB:0A:2B:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/f61adb1e-bc9e-34ec-80fb-4d5ecf11e1dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/eb3726d7-0f8c-4949-99b6-eecda94a0675.crl

            X509v3 Authority Key Identifier:
                keyid:9E:F0:8D:44:A7:A6:26:F4:A9:17:81:5E:EA:26:57:FC:D8:00:89:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:117:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f8:ff:af:5f:4f:6d:b6:e0:4c:22:c2:26:3b:79:c0:c2:3f:
         60:d6:ac:a7:db:bd:2b:b7:22:31:65:95:d9:ef:78:07:7d:ee:
         f1:4b:58:86:2f:4c:87:57:ab:08:b6:82:08:36:52:be:52:8e:
         0a:e6:0d:4d:c6:50:82:7c:ca:77:36:d7:bd:c1:61:53:ba:23:
         b9:46:ae:64:8e:96:38:ba:09:e0:86:46:af:ae:83:d8:dd:57:
         40:77:d0:cf:05:85:b0:bb:cc:4a:20:76:be:92:c5:53:7d:a4:
         a3:76:72:27:63:d5:85:85:b4:6b:dd:1e:7d:01:b0:6b:15:90:
         f3:e9:25:bc:97:fc:3a:cb:ee:37:e6:80:12:5f:a1:75:d0:9d:
         cc:fb:c9:1c:18:62:87:84:23:8a:3c:ab:54:7a:08:af:7a:d6:
         d9:2d:7f:9e:2c:7a:e1:a9:74:d3:6c:89:18:1c:be:90:1e:a5:
         e6:37:8b:03:bd:9e:e7:0d:41:d1:22:e4:eb:50:6a:61:ea:ec:
         af:a3:26:2e:63:0e:66:d8:a7:d9:ca:1d:1c:87:ac:64:77:f5:
         4a:13:76:a0:50:a8:e2:43:3a:f1:f7:1b:7d:8b:df:1d:b4:07:
         cd:16:48:84:0e:2f:ae:4a:69:4d:90:36:07:cd:47:05:ce:c5:
         f7:a5:48:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----