Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/b7ba221b-48ce-3f30-a243-211b86357982.roa
File:                     b7ba221b-48ce-3f30-a243-211b86357982.roa (raw, json)
Hash identifier:          C5dCw9jkakq0bfdtQGSXQPjuoH3vRxEd+VyJB+DPXaE=
Subject key identifier:   72:24:2F:A9:28:FE:75:9A:D0:9D:DD:42:C3:71:81:2D:D6:89:C0:25
Certificate issuer:       /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial:       010D0C9F4328584832F01DCCFF83B0E0FD8C9C40
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/b7ba221b-48ce-3f30-a243-211b86357982.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        2607:d540:fc0::/42 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:1d:cc:ff:83:b0:e0:fd:8c:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=6b38f51a-403c-4f3f-aa94-4acfa5262dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:c8:ce:ef:01:4f:9e:01:8b:2f:03:7d:be:
                    91:07:68:53:0e:fe:40:ba:1e:5e:b0:c9:c2:05:31:
                    d1:9f:04:f1:1a:6b:33:e7:4a:17:90:a5:8d:38:08:
                    a1:de:fa:71:cd:4f:6b:fa:51:84:7c:ff:49:17:0f:
                    98:5c:dc:a3:1d:ce:56:77:55:7e:48:e7:11:c3:d7:
                    fd:bb:be:51:f9:14:b5:24:7f:9e:cc:3b:72:db:1f:
                    65:a7:4c:55:5a:30:6b:bd:83:3d:47:bb:b6:0e:8d:
                    91:23:a6:4f:a6:41:23:20:ab:f6:0c:6c:53:88:da:
                    47:ee:c0:cd:33:52:63:72:53:1e:18:f5:f7:6a:66:
                    cf:18:15:cb:08:07:0c:a3:be:82:3c:44:b1:de:65:
                    67:5b:87:ef:a1:52:b1:1b:6c:f7:fa:6b:dc:ec:ae:
                    f1:bf:83:af:26:6f:6a:88:a2:ce:e9:ea:5d:7d:a1:
                    41:c4:ee:4e:ab:11:5a:1e:19:0d:a1:b9:1f:83:02:
                    68:b5:c0:34:48:42:4e:e5:54:d4:49:3b:0c:81:88:
                    4f:9c:2b:a3:a5:61:21:10:79:b6:f7:7a:be:af:81:
                    90:79:04:7c:9d:af:72:24:2d:a6:3a:bd:f3:eb:9f:
                    94:69:c3:a7:c5:88:23:4b:a2:34:2f:3a:ef:f6:03:
                    24:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:24:2F:A9:28:FE:75:9A:D0:9D:DD:42:C3:71:81:2D:D6:89:C0:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/b7ba221b-48ce-3f30-a243-211b86357982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl

            X509v3 Authority Key Identifier:
                keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d540:fc0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:41:ad:83:d8:2f:c7:fa:54:06:4e:fe:fb:8d:ed:eb:21:95:
         ab:3d:93:e1:f1:9f:d8:3e:6c:76:a5:95:97:f3:91:a1:6a:d5:
         76:72:a6:82:cb:98:fc:38:7f:6a:65:c5:e0:e4:21:d7:1c:ea:
         86:b6:52:c2:3f:3e:33:b5:45:01:d2:69:8a:90:2a:29:f8:fc:
         f3:97:9f:c7:7f:ea:68:fa:87:08:57:3b:fe:e2:e7:73:c4:cc:
         b5:ce:02:bc:e9:f8:85:40:16:65:2d:9a:0d:a7:ed:1a:2a:41:
         49:47:83:54:9f:b1:36:b2:17:11:a8:7b:78:b0:b0:7d:10:c6:
         76:ee:b1:c4:de:7f:12:d8:9b:ba:df:38:ef:06:f3:7d:a1:3c:
         14:10:fe:9d:09:06:93:5a:09:57:26:00:ae:f8:0a:59:85:7f:
         7e:13:55:11:4a:c8:51:8d:00:4a:0c:57:67:34:47:e0:b9:f6:
         01:a2:63:85:f9:a4:1d:fe:b4:eb:d0:67:d3:7e:65:ca:79:6e:
         6f:ae:63:92:14:5f:ba:74:4a:2a:b7:97:b7:4b:f5:d3:01:13:
         c1:cb:f9:a5:23:94:dc:0f:0f:d8:3c:d6:db:c8:c2:ca:61:6e:
         cd:b3:4f:40:81:28:90:14:d5:66:e2:02:f5:64:45:41:83:fc:
         ca:2d:e0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----