Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/a5693a5f-61c9-36bf-8e86-22ed3bb7ff74.roa
File:                     a5693a5f-61c9-36bf-8e86-22ed3bb7ff74.roa (raw, json)
Hash identifier:          5xamRdaVf9JYVw39oma3BctDnxn9bfhLSi6dosaGs9o=
Subject key identifier:   91:FC:47:63:56:12:A1:D4:55:B9:1D:4B:E1:81:ED:79:EB:B3:41:B7
Certificate issuer:       /CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa
Certificate serial:       010D0C9F432858483B4FF7E24C280A1370269C00
Authority key identifier: DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/a5693a5f-61c9-36bf-8e86-22ed3bb7ff74.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     7029
IP address blocks:        2604:3547::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:4f:f7:e2:4c:28:0a:13:70:26:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=9a36b37b-589a-41bf-b931-16dd5d94b663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6e:0f:1f:68:c0:c9:3d:8e:d3:a3:97:3d:9f:
                    ca:da:0a:1a:c9:b1:8b:03:9c:ae:a9:20:e0:c0:61:
                    ca:b4:82:f3:44:45:dc:04:38:b9:c1:b4:dc:74:00:
                    49:23:90:93:64:bb:e6:c0:c5:18:32:19:17:2e:d9:
                    9a:c1:68:c5:31:7c:54:54:86:2d:7b:ea:63:61:3f:
                    43:09:00:a1:12:68:ee:34:3e:7d:87:bf:7a:bb:2a:
                    74:a3:2c:47:63:5b:ef:d1:74:44:8f:dc:70:61:46:
                    65:05:56:0b:1a:fe:e0:ad:78:42:1b:03:56:95:17:
                    15:45:87:fd:b3:7c:9c:58:59:d7:3a:9e:7c:64:a4:
                    12:a1:0d:47:cf:a4:a1:a8:80:3e:f0:fc:f4:42:e5:
                    8e:b2:63:6b:dc:e7:29:f5:68:96:92:19:bc:28:99:
                    a2:bf:d8:a6:b0:39:ef:26:8d:c9:00:d1:ca:4c:35:
                    61:c1:e5:c4:ac:d2:3c:45:59:77:ea:55:99:0f:5c:
                    0f:30:22:08:03:1f:ff:67:4e:01:f4:de:2d:6e:f1:
                    ef:f0:e5:a2:e5:2b:8f:27:14:85:4a:be:74:05:71:
                    aa:5a:6a:2c:c4:27:ea:1f:cf:9e:ac:9c:9f:0f:3e:
                    f8:6f:21:b1:bf:0b:7e:fb:a7:f0:fb:85:ed:a8:9c:
                    3c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FC:47:63:56:12:A1:D4:55:B9:1D:4B:E1:81:ED:79:EB:B3:41:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/a5693a5f-61c9-36bf-8e86-22ed3bb7ff74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl

            X509v3 Authority Key Identifier:
                keyid:DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3547::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:f4:ab:5f:e6:12:72:97:00:a7:16:52:34:9b:5c:04:f4:7b:
         2a:14:ce:f6:d8:80:79:d6:c8:42:2b:d6:9c:8e:b1:6e:87:ef:
         98:9d:f3:50:64:22:30:d3:f4:cb:28:45:dd:28:a7:cf:73:39:
         ee:80:48:1e:30:b0:a8:e9:5b:c1:aa:40:00:08:b2:49:46:6a:
         1f:20:c9:d7:4f:f8:a3:ba:43:cd:6c:2e:ba:ec:01:1f:0c:10:
         9e:e8:52:ea:e0:97:76:ff:82:e8:9f:27:e8:dc:19:74:70:36:
         ff:1f:7c:2e:01:43:5d:0e:8a:df:bd:38:e0:51:7a:96:9c:5b:
         24:52:0d:2d:a4:f9:f4:9b:00:fb:fe:54:e1:82:2a:5e:cd:52:
         a7:61:72:20:7c:69:1b:15:82:85:b3:12:a3:a4:fe:ad:17:4d:
         75:d5:73:1b:9f:69:2a:a6:8d:c3:d0:60:7a:5c:02:5a:2f:66:
         56:7e:22:bb:99:fa:f2:99:19:5a:8c:3f:0b:82:68:10:dc:bd:
         72:2c:19:f1:7b:28:bb:00:f8:7b:89:55:ee:d6:5e:99:cd:7a:
         f5:eb:68:d8:86:e2:34:eb:75:46:74:28:34:57:0b:19:f1:4f:
         f2:ef:4b:88:e0:73:23:9f:b4:f9:b4:a0:c0:9c:a3:1b:45:30:
         d3:50:a2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----