Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/d9a4f2e6-6578-3925-930d-f5154e79deb1.roa
File:                     d9a4f2e6-6578-3925-930d-f5154e79deb1.roa (raw, json)
Hash identifier:          rSd1/QSCUkIpbhLZiHF1HpG/3J1sCVfH7VzDWKRDQIE=
Subject key identifier:   CF:DB:C4:20:1E:D1:54:F8:96:19:E9:0A:14:BA:D2:6F:42:09:05:59
Certificate issuer:       /CN=e62ce32a-582e-49d1-9c4a-bd8cab83f7eb
Certificate serial:       010D0C9F432858481C9A822075DFAC1E17DD10D0
Authority key identifier: 5F:F0:4F:56:FF:C7:E3:22:3F:23:7A:CD:F3:42:AE:3E:64:E3:FB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/d9a4f2e6-6578-3925-930d-f5154e79deb1.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     3801
IP address blocks:        2607:c00::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:82:20:75:df:ac:1e:17:dd:10:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62ce32a-582e-49d1-9c4a-bd8cab83f7eb
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=b0f9e7d7-5cc2-46e9-9bc9-d781d72ac189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:51:f4:8f:d3:60:a6:67:61:a3:04:c4:da:e9:
                    58:dd:92:c4:c9:5b:69:83:b9:03:55:e0:b9:55:d6:
                    48:13:02:1d:72:67:95:20:db:68:6e:c5:79:d3:a1:
                    bc:3d:4e:2e:49:50:0c:e5:a0:72:b2:6e:a4:c9:63:
                    54:ba:61:85:a8:3e:7d:7c:e8:0f:f1:50:e9:a3:8d:
                    ec:f7:1c:bd:cb:83:59:8a:53:46:3c:c7:b9:69:5f:
                    1b:78:b8:2c:bd:01:b2:ae:fb:cf:0a:9d:f0:74:e5:
                    e8:23:e5:5d:a3:cb:87:cf:ad:e5:7e:9c:2b:46:bb:
                    db:d6:c6:39:66:a5:9f:bf:93:cc:cc:fd:37:44:b1:
                    f6:b1:df:45:c6:90:c1:03:48:eb:ba:7f:fa:4d:94:
                    a8:04:c3:53:4a:6b:86:4c:8c:1d:1b:35:56:ec:1a:
                    6c:c0:b0:f6:19:1e:3a:70:26:d2:bc:ed:b3:f3:58:
                    e3:c3:03:f4:2f:16:f6:5b:bd:85:71:fe:78:5d:c0:
                    f0:d1:f2:10:0b:86:bb:7e:7b:db:23:67:9f:75:51:
                    3f:55:08:29:4e:e9:ae:c5:41:98:62:5f:0b:24:56:
                    0c:d3:de:4b:5e:c0:d8:fa:9a:8b:4c:06:3d:40:6c:
                    b1:91:39:fa:4a:2d:e2:22:60:63:6d:52:6b:cd:20:
                    87:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DB:C4:20:1E:D1:54:F8:96:19:E9:0A:14:BA:D2:6F:42:09:05:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/d9a4f2e6-6578-3925-930d-f5154e79deb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.crl

            X509v3 Authority Key Identifier:
                keyid:5F:F0:4F:56:FF:C7:E3:22:3F:23:7A:CD:F3:42:AE:3E:64:E3:FB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:25:27:19:09:20:35:0e:7e:4a:c4:5b:94:ca:33:00:28:74:
         a7:cd:9e:30:bc:3e:c2:53:30:bd:ab:a7:11:cc:dd:7a:4f:4b:
         b7:e1:25:94:3a:97:95:dc:dc:cf:bc:15:9d:65:25:10:e9:26:
         82:8e:b1:23:94:4e:4f:9a:0f:09:04:c0:0d:36:7c:a3:1e:10:
         3b:61:70:6c:be:fd:d9:e9:53:67:28:22:d5:c5:a1:50:22:b2:
         69:fc:b0:3a:ae:5d:f4:3e:2a:64:78:35:e4:80:6c:cb:5e:2f:
         05:71:10:43:9d:73:e7:cf:20:c8:e6:13:2f:57:5e:62:d2:e2:
         e8:c3:32:82:3e:b3:c7:51:a6:a7:7c:ca:6d:b4:7e:af:83:c1:
         c4:a1:f0:ba:34:35:35:5e:7f:ea:4d:c3:71:7c:2c:db:2e:b6:
         1e:74:8e:6d:54:e3:11:01:7b:11:16:13:d3:db:c1:f4:d0:e8:
         c2:92:b8:09:eb:6d:04:96:24:3e:84:a8:52:d1:df:7f:8c:8f:
         f8:9a:f1:b1:6d:0d:72:e3:51:b1:2e:a4:1b:f4:47:ab:70:5d:
         19:a6:70:00:45:7b:4d:1c:79:56:cf:9a:26:88:cf:11:99:05:
         4d:05:06:4f:f3:c3:30:e3:11:10:ab:51:55:d4:f0:3d:11:4b:
         5f:45:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----