Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/13c1aa45-1be2-3120-b677-18f0d15c80ce.roa
File:                     13c1aa45-1be2-3120-b677-18f0d15c80ce.roa (raw, json)
Hash identifier:          ax3HtYTD5cKbJ9iH52yvMOussOYUaZm2D3qVQCs2BX8=
Subject key identifier:   5C:10:91:AF:EB:9E:FF:F0:96:FC:E1:C4:78:A5:6D:3A:60:FA:A5:59
Certificate issuer:       /CN=e5c2b906-947b-452e-a546-6011e1a0e535
Certificate serial:       010D0C9F4328584816A78041F9E63091BBD29240
Authority key identifier: 07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/13c1aa45-1be2-3120-b677-18f0d15c80ce.roa
Signing time:             Tue 03 Dec 2024 22:52:10 +0000
ROA not before:           Tue 03 Dec 2024 22:52:10 +0000
ROA not after:            Mon 03 Mar 2025 22:52:10 +0000
asID:                     39941
IP address blocks:        2001:504:b::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:16:a7:80:41:f9:e6:30:91:bb:d2:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c2b906-947b-452e-a546-6011e1a0e535
        Validity
            Not Before: Dec  3 22:52:10 2024 GMT
            Not After : Mar  3 22:52:10 2025 GMT
        Subject: CN=e3f417d7-fb94-48b6-afb8-2b95d63b07d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:60:a2:37:4f:7c:57:7f:24:a4:66:74:ae:0c:
                    c9:e4:99:5f:72:2b:69:a1:0c:6e:0f:a3:83:81:30:
                    57:c4:99:3b:85:a3:be:cc:7a:83:42:13:4b:05:30:
                    49:26:ee:90:a6:9e:02:65:83:88:e7:30:fb:f5:75:
                    28:2b:06:f7:04:ac:f1:50:22:d8:0d:4c:30:5a:fe:
                    5a:3c:c0:43:5e:0e:45:e4:c8:65:5c:98:78:d4:3f:
                    43:dd:6e:7e:0c:82:54:a3:6b:3c:8b:d0:31:2b:a3:
                    e1:d3:87:37:72:cb:70:56:11:d9:9d:0b:77:5c:5e:
                    3d:f9:2c:d4:a2:c5:f7:b6:63:75:df:f5:84:70:60:
                    06:0e:55:aa:db:ea:69:3d:8a:b1:22:d0:82:46:65:
                    0d:84:19:ae:61:dd:b0:6a:b2:ec:5e:01:a9:ca:b1:
                    59:7f:c1:d1:fd:d1:49:8d:a6:e2:13:35:5a:1f:6f:
                    b8:ae:94:40:b3:2f:5d:f3:43:ba:69:14:1d:a2:de:
                    8e:de:0e:0b:f3:f8:a9:0c:72:cc:3d:4b:3f:7a:b2:
                    54:fd:df:f3:4a:35:c8:a1:a8:c6:88:4e:34:a5:e4:
                    ad:50:9e:4b:05:93:aa:4f:1b:af:d5:37:d1:eb:4d:
                    08:4b:b7:2d:4e:95:7e:8e:26:9b:53:eb:b9:8b:c4:
                    b3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:10:91:AF:EB:9E:FF:F0:96:FC:E1:C4:78:A5:6D:3A:60:FA:A5:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/13c1aa45-1be2-3120-b677-18f0d15c80ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl

            X509v3 Authority Key Identifier:
                keyid:07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:16:07:b5:00:8b:c6:2c:c1:a0:72:3e:3f:97:0f:75:ce:e2:
         4c:b9:3c:44:64:68:c3:a6:f1:54:95:66:07:64:6d:a0:6e:02:
         16:58:30:f6:fb:79:d6:a6:c6:8f:e0:7f:29:6e:64:3b:d3:60:
         7d:ca:fc:56:2e:52:23:90:a6:03:aa:81:64:ef:99:9b:f8:ad:
         79:ce:bc:88:7f:8f:fb:c4:d5:9c:64:3e:ef:3d:89:26:5b:55:
         ea:76:8a:94:50:a9:4e:d9:9c:b6:98:a6:e9:96:d3:6d:5d:dd:
         ed:a5:ad:ac:94:74:e8:95:9c:77:ad:7d:c5:5a:95:fe:51:66:
         1e:2c:f1:2d:ef:9a:04:9a:0d:03:a8:42:c0:2d:cc:5e:4b:6a:
         b1:3d:8e:4f:73:bd:65:ec:45:a6:70:ef:5c:7d:25:46:24:01:
         09:1f:85:ee:8a:3a:05:d9:cb:1b:5d:38:fe:ae:8f:0e:63:ff:
         97:34:ac:75:18:4b:00:20:27:fe:eb:d5:6c:28:52:02:6a:83:
         cc:58:f9:ee:0b:37:81:d2:b2:c0:f6:31:7e:3e:d0:f2:f3:23:
         f2:8a:01:76:28:9e:fa:fb:3d:b7:2b:6e:d7:24:11:2b:f4:c1:
         e6:77:d3:22:9e:e4:81:56:29:31:89:b7:50:90:ba:79:f5:9d:
         e4:c1:04:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----