Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/25a9023f-d699-3519-a7da-1f6835dd7b5c.roa
File:                     25a9023f-d699-3519-a7da-1f6835dd7b5c.roa (raw, json)
Hash identifier:          LubRpUcU37jnruiW+EcvDhF4/YTzK7jwJoQP+/iWOyo=
Subject key identifier:   31:BA:3E:7A:77:00:92:F2:48:63:C8:FD:75:3E:90:1C:EB:8B:54:E9
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F432858484EDAC447858B3894BFFC98C0
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/25a9023f-d699-3519-a7da-1f6835dd7b5c.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     398493
IP address blocks:        2602:fd37:700::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:c4:47:85:8b:38:94:bf:fc:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=b887830f-908d-4e9c-8510-6c12d2b5099a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3a:73:cf:63:e4:4f:ff:4c:a1:31:7b:73:53:
                    9a:c4:76:69:84:00:c6:9c:52:d0:bb:e3:c6:49:e8:
                    0a:ba:e9:ce:d9:35:69:24:9c:84:f6:5c:50:c1:a2:
                    7c:b8:fd:97:a1:98:c8:c8:46:25:4c:29:4f:b2:8b:
                    f2:dc:77:c4:e8:1f:88:78:df:bd:f5:df:84:e4:72:
                    74:83:37:19:69:d1:7c:56:0d:9f:09:d9:6b:60:d2:
                    5b:77:2f:8a:ca:fc:8c:e5:98:15:6c:b9:49:0a:ad:
                    88:98:44:c1:5f:74:a5:0f:e9:fa:7f:10:dd:57:de:
                    34:0c:be:7f:5c:5a:1d:fc:25:c6:02:40:6b:5a:5c:
                    9c:9c:9b:56:90:ec:07:fb:8d:dd:8f:fb:02:11:13:
                    de:8d:86:29:88:84:05:8f:e7:b7:66:6b:f7:0d:58:
                    87:79:61:40:02:28:ed:93:bd:54:bf:5b:20:40:b1:
                    e9:81:9c:21:47:f5:63:c0:74:f7:6d:e6:24:69:d7:
                    10:53:2d:fc:a3:e5:f6:ab:bd:c6:3c:4d:aa:fb:33:
                    91:a9:78:7a:f8:f1:46:b5:62:18:8c:cb:d9:19:ea:
                    6b:86:ec:ac:34:e1:04:4c:c3:8b:57:ee:4d:bd:ad:
                    e8:11:57:7c:af:21:31:bd:4a:f7:f0:4e:65:a4:c6:
                    17:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BA:3E:7A:77:00:92:F2:48:63:C8:FD:75:3E:90:1C:EB:8B:54:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/25a9023f-d699-3519-a7da-1f6835dd7b5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd37:700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:29:e2:06:53:62:44:03:58:d5:53:86:65:84:ef:51:cc:61:
         01:79:f0:c2:94:37:2f:12:37:97:60:2a:da:36:90:4e:b0:27:
         e1:21:cc:23:7a:ce:96:d9:a0:d5:a2:0b:9e:fc:a7:3b:79:19:
         2e:4f:ef:f6:34:6c:91:04:e4:92:53:68:ff:1b:aa:72:6c:de:
         5e:07:7b:cc:9a:04:02:79:7f:b5:2e:8d:ec:a3:a7:8c:13:50:
         67:21:b3:c2:37:e2:d9:53:23:d5:db:3f:82:9d:07:6f:09:98:
         a7:7d:d9:1e:7f:1a:38:d6:5d:e1:97:f9:a0:7e:f3:3a:03:ec:
         75:c9:c6:53:e5:42:35:74:0e:c0:46:c2:69:b3:78:d0:5a:86:
         d3:f8:75:f5:8b:78:ae:db:04:65:6a:ff:d5:d7:84:63:ec:63:
         df:28:c3:e7:5e:5e:c5:49:31:11:59:a5:66:c0:a9:f7:a2:56:
         8d:b1:b5:09:45:8c:3f:7c:d2:fa:c3:f0:f2:a1:41:bf:7d:1d:
         f4:49:8a:f2:ac:b9:6a:8e:71:82:cf:9b:f0:02:16:59:f7:96:
         39:07:cf:c5:ae:7c:47:ef:8c:4b:9e:1c:ca:3c:7e:b1:ff:45:
         05:db:26:6d:6a:40:9b:4f:b9:ad:1c:b9:71:47:b2:18:fc:92:
         b0:1e:17:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----