Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/bba397d2-686c-32ea-8247-424889060922.roa
File:                     bba397d2-686c-32ea-8247-424889060922.roa (raw, json)
Hash identifier:          R2KzttPBKEMusKhwtuOjbFt/FSyLyrF+lfiQhoAXG4U=
Subject key identifier:   13:D2:3C:7D:C3:F2:8A:70:2E:00:EF:7E:B7:65:7E:F1:2D:0A:F3:C9
Certificate issuer:       /CN=daef5cc1-9697-4016-a7b1-84106520128a
Certificate serial:       010D0C9F43285847E8F4CC339055185C1D426900
Authority key identifier: 53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/bba397d2-686c-32ea-8247-424889060922.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     56508
IP address blocks:        2602:815:900f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:cc:33:90:55:18:5c:1d:42:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daef5cc1-9697-4016-a7b1-84106520128a
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=c08d5894-af37-4018-a400-f2f907f45afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:16:4d:17:a1:49:a8:e8:df:f4:72:91:87:76:
                    8b:43:bb:d0:95:21:ef:52:49:60:57:c5:7e:7e:9e:
                    18:b3:f8:c1:49:34:b0:6c:81:23:04:10:68:bf:0c:
                    54:e7:cd:7a:51:a2:42:c6:1e:ae:f9:92:35:ca:53:
                    58:47:33:35:36:92:13:f6:00:9b:be:43:de:f6:26:
                    bc:8a:94:ca:7a:f4:a5:aa:72:29:d4:77:c9:fd:b7:
                    55:57:63:fa:98:4c:86:9e:68:ea:5d:90:95:22:29:
                    25:d1:be:7f:71:05:7e:dc:2d:a5:c5:66:38:76:d3:
                    81:62:f9:39:d6:a8:f0:d9:d2:a2:13:9c:75:24:bf:
                    ee:30:70:51:1f:b3:6c:a9:0e:3c:85:fa:28:5c:1d:
                    dc:94:b3:b5:0a:86:e8:68:5f:8b:8c:0b:81:2a:9b:
                    88:30:69:99:f4:86:b9:9b:41:96:01:f4:4f:b0:f2:
                    91:97:ae:fa:ed:63:a6:37:53:52:bf:52:7a:cf:4a:
                    99:30:df:e1:40:e6:41:61:56:46:98:bc:8a:7f:f1:
                    1b:ad:92:ae:e8:1c:c3:98:9d:da:98:85:ab:71:93:
                    9a:fa:27:66:2e:c7:7a:6f:c5:23:44:c3:20:1e:93:
                    8f:21:01:61:ac:3a:55:4f:77:b6:a0:3f:c6:18:2e:
                    22:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D2:3C:7D:C3:F2:8A:70:2E:00:EF:7E:B7:65:7E:F1:2D:0A:F3:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/bba397d2-686c-32ea-8247-424889060922.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl

            X509v3 Authority Key Identifier:
                keyid:53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:900f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:2f:ae:16:3f:cc:b8:b1:ae:43:29:61:25:fc:c0:2c:92:a6:
         c4:17:a3:94:1f:a1:bf:a6:6f:26:41:f7:ec:87:95:c0:2b:97:
         b4:77:0e:57:ac:ff:89:b2:e5:2f:64:14:3e:b0:56:a0:7d:06:
         4e:b8:88:44:da:43:1a:48:49:8e:21:48:be:90:1f:2e:31:0f:
         ea:7a:84:9e:88:4d:1f:6f:24:15:6d:5f:c1:6c:5f:e7:ab:70:
         9c:db:79:4e:25:d4:55:29:42:ba:99:44:8f:83:e8:0e:3c:e1:
         6e:97:de:d6:79:ec:b7:4b:27:45:f9:48:03:a3:29:bc:e5:03:
         35:2f:89:6c:47:a0:7d:46:1c:03:14:17:52:9d:b6:09:21:6a:
         04:75:be:f2:e8:ed:1e:1f:67:2b:c1:c3:fb:1b:e5:ce:26:1a:
         7c:fc:9e:ac:c6:a2:51:cb:72:e8:c7:49:a3:46:87:b5:9f:5a:
         ee:93:e3:f6:00:20:1a:6b:72:1f:0d:ad:d9:fd:70:9d:98:d8:
         19:71:83:66:d9:d0:2c:fb:f2:a1:1c:53:94:bf:f4:e6:6a:b2:
         74:e4:83:68:b0:3b:6f:76:b1:b2:92:c0:19:26:1a:4c:03:f1:
         2f:1e:35:bb:b1:e3:64:c8:00:8d:82:9d:76:ae:32:73:9b:3a:
         3b:99:fd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----