Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/ebf9b2cc-5b56-304a-9601-ce7416e9e1d4.roa
File:                     ebf9b2cc-5b56-304a-9601-ce7416e9e1d4.roa (raw, json)
Hash identifier:          a/w/s3CQ0iLGnMtphddRl8pXUTGSzRKZlcVEBA8AC1w=
Subject key identifier:   0C:66:E4:02:43:96:E3:E3:2C:CB:13:1E:81:43:49:FD:54:22:5E:10
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F432858486C2B09970A707BB49D515F00
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/ebf9b2cc-5b56-304a-9601-ce7416e9e1d4.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     559
IP address blocks:        2604:4540::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:09:97:0a:70:7b:b4:9d:51:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=1fa3f864-4155-4acb-9291-80883aeafb08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:2c:57:2f:8b:82:14:9a:95:24:8f:9c:89:
                    92:09:1b:fc:e1:5a:ae:47:b0:65:d4:47:9d:ee:a6:
                    8f:1b:c4:77:53:2a:ad:e1:a8:be:e7:66:03:e8:ac:
                    4d:b0:17:72:73:81:f9:b9:57:ee:0a:dd:2f:a4:bb:
                    38:dc:15:81:60:0e:1a:a5:25:8a:81:4f:35:58:05:
                    b4:5a:2b:31:96:f2:b7:b4:68:3f:3d:8f:48:5e:47:
                    2a:2f:08:d3:52:fb:2a:ac:0f:a8:76:f4:73:6b:61:
                    6a:63:d6:ab:77:09:9a:68:86:dc:77:a3:e9:e8:c4:
                    36:2c:dc:f2:44:7e:ed:39:31:74:67:26:4c:4c:7e:
                    29:a3:1e:69:2f:cf:af:06:22:ae:8c:26:97:d8:c1:
                    74:44:c3:ef:e3:93:d1:5b:63:c0:d0:eb:e1:a4:53:
                    52:f2:d2:2d:0a:d9:7b:c8:3d:2a:3b:c3:99:2b:8b:
                    92:3f:d6:e7:91:fb:b9:4b:80:90:d4:a0:3c:33:0a:
                    65:4d:a7:94:ed:99:1b:bb:4b:bb:69:7f:ca:33:e7:
                    04:d1:01:c5:ea:aa:a4:03:5f:09:f9:00:b9:70:8e:
                    a4:a7:9f:4d:53:54:7d:28:4e:85:90:0a:6f:3a:4d:
                    b5:f8:60:ad:fe:86:39:db:5c:bf:a5:b8:dc:1b:fc:
                    97:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:66:E4:02:43:96:E3:E3:2C:CB:13:1E:81:43:49:FD:54:22:5E:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/ebf9b2cc-5b56-304a-9601-ce7416e9e1d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4540::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:92:ee:3a:fb:54:c8:59:b8:28:fd:e2:26:07:62:06:ad:5c:
         d3:c2:70:a5:65:cf:ac:95:bf:fe:62:e9:3c:c1:73:6c:52:b7:
         5b:3a:89:60:eb:e3:aa:73:53:6b:21:15:30:43:25:c6:8b:04:
         31:f4:2f:b8:d5:6c:23:6f:9c:87:5c:d4:ef:20:3b:90:17:e0:
         d4:46:6b:f5:a2:23:73:f8:e7:b7:eb:d7:fc:ec:66:15:1e:1e:
         4f:9c:1a:8f:47:a2:ce:f8:cf:10:a3:2a:08:5e:29:80:97:79:
         30:bb:24:61:3a:58:96:64:4a:05:28:49:da:ba:b5:ca:4c:6f:
         e0:dc:52:9d:d0:93:5d:c9:4e:5d:a0:ee:77:52:ca:10:83:f1:
         35:49:4d:16:35:99:f1:f4:eb:03:34:37:9b:ea:90:9f:b4:6e:
         31:2c:3d:02:c6:d3:03:16:d0:1b:b6:6b:e3:d0:de:3e:43:f5:
         5b:03:91:7b:1b:e9:53:64:23:73:ce:b5:1e:38:f9:f6:8c:f8:
         4f:aa:56:a3:04:c5:eb:fd:b5:ea:dc:60:4b:88:ef:6a:6f:fc:
         da:c1:eb:6a:dc:c7:0b:37:7f:ec:c2:72:46:4d:2e:7b:65:40:
         f7:a1:65:7f:b1:33:38:f9:69:e5:11:a1:68:7d:60:cd:85:9d:
         9a:40:25:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----