Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e2579426-9447-3a59-8d37-f7c0b9edc465.roa
File:                     e2579426-9447-3a59-8d37-f7c0b9edc465.roa (raw, json)
Hash identifier:          WuYteD3T3Oh6DiWxnOJarfCXDf9uSWvx32Ws6ejHHIM=
Subject key identifier:   30:05:BC:5F:77:FE:62:B3:B3:64:8A:9F:19:68:32:D3:61:B7:21:31
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AF8FEE0CF8058DB501F9C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e2579426-9447-3a59-8d37-f7c0b9edc465.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:809f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:8f:ee:0c:f8:05:8d:b5:01:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=7b81653b-0a8e-498a-9689-377ee0e090a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:1c:41:d5:0d:7b:34:b9:8a:01:0d:c7:ab:
                    c7:f6:b6:cb:e2:54:d4:5f:eb:2a:5a:28:87:ce:28:
                    f9:1f:7a:cb:db:d3:14:80:d4:fa:83:2f:6f:0d:f5:
                    5f:4a:c9:2a:e8:a4:73:c2:74:1e:e4:ac:8c:bd:75:
                    10:fc:dc:f6:93:9e:51:d9:c5:e0:29:e3:a4:73:7e:
                    5e:4f:26:8c:78:34:dc:67:f2:8b:51:b1:4c:2d:dd:
                    c0:d0:07:d3:2a:b2:b6:43:e6:34:a9:0d:e3:aa:c0:
                    ea:b4:db:42:c3:a1:46:be:93:ad:c0:ae:e1:05:83:
                    ee:21:01:c4:ec:b5:64:1b:ea:f2:97:fc:29:ac:f2:
                    7a:1c:91:f8:fa:ff:04:90:b8:18:e5:ee:d8:97:d5:
                    70:f6:b7:1d:03:0d:30:77:11:f1:64:c8:6a:ea:2c:
                    23:7a:00:cf:41:42:9b:e1:8d:a2:1d:33:42:6d:9a:
                    fa:76:36:16:75:e4:19:79:62:78:52:3a:b3:92:97:
                    09:f0:55:3f:ac:66:6d:d0:86:31:a7:9c:c3:cb:4d:
                    a1:4a:ce:4e:f6:e7:97:23:b7:e6:62:53:a3:2d:fc:
                    e8:8d:c0:14:fe:f7:54:a8:71:4d:c4:be:52:03:ac:
                    71:8f:97:4e:8f:59:2b:3d:a3:8a:a0:d5:29:07:48:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:05:BC:5F:77:FE:62:B3:B3:64:8A:9F:19:68:32:D3:61:B7:21:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e2579426-9447-3a59-8d37-f7c0b9edc465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:809f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:21:d4:6a:30:cc:6a:2e:29:59:2c:5e:94:1e:2b:1e:8c:57:
         e1:da:ba:c2:ae:71:3c:af:f5:b9:9f:61:83:e7:99:0c:60:e2:
         1f:58:38:05:ec:67:98:15:cf:7a:76:76:71:55:0c:b4:41:4a:
         e4:b8:ad:36:20:77:55:c8:db:bd:70:44:88:dd:2c:24:a2:da:
         39:e9:a7:52:e9:64:e2:3f:38:05:6c:60:98:08:de:73:2e:30:
         fb:7f:4f:a2:e2:01:7a:7f:ed:20:bc:d8:a8:65:b4:98:f4:ef:
         9a:13:c6:d7:49:19:cf:67:1f:b8:06:6c:6a:70:72:ee:01:c4:
         a9:a5:3a:28:e1:28:1f:aa:4c:ac:91:ed:2d:88:db:ea:60:54:
         d7:3d:77:71:ce:ee:bf:cf:d4:b1:0d:5a:2a:f8:0b:09:99:18:
         2f:40:51:68:50:5c:f4:71:34:1b:4e:4f:37:03:06:42:5f:0f:
         3c:f1:22:31:4d:94:50:99:67:d6:1b:c4:ea:b5:de:9a:d8:81:
         03:36:bd:b5:3e:ca:a4:9f:27:47:29:62:43:41:89:bf:ba:48:
         03:65:dd:9b:ff:8a:49:94:16:cf:ba:41:82:f4:0b:70:5a:6b:
         c9:b8:d1:b3:11:bf:64:6e:37:97:e9:3b:78:40:e5:ee:68:e2:
         c9:6a:43:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----