Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/be335098-658c-34b3-80a0-cee6306c0430.roa
File:                     be335098-658c-34b3-80a0-cee6306c0430.roa (raw, json)
Hash identifier:          aifVrDiUijfBnynUH5aYwJCuuN6Yr2tqJNA/Q/Wprnw=
Subject key identifier:   37:6C:B7:9C:9F:B9:91:D8:7A:44:1B:38:1F:B9:77:A6:35:01:E2:30
Certificate issuer:       /CN=4272c123-bab5-43cb-a3b9-ac162a3b30af
Certificate serial:       010D0C9F43285848090FB7EC531F8FBBFB765280
Authority key identifier: F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/be335098-658c-34b3-80a0-cee6306c0430.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     400013
IP address blocks:        2602:80c:1005::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:b7:ec:53:1f:8f:bb:fb:76:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4272c123-bab5-43cb-a3b9-ac162a3b30af
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=a8b155f5-1edc-445a-b352-3740fd0fe5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:4e:b8:85:25:5d:ed:a4:19:10:a6:e1:24:
                    6e:eb:95:fd:e9:75:b3:c7:6c:3c:01:4e:36:d1:c4:
                    a0:14:40:ce:89:a5:50:04:03:ed:c8:a2:88:04:7f:
                    a7:7a:f9:7b:f8:1f:c9:f4:ec:92:bb:07:ac:c4:9b:
                    65:7f:cf:6b:fe:f7:1f:55:a5:96:62:71:47:87:fb:
                    f1:3e:74:11:e6:94:fc:ed:8f:98:03:6c:0c:d9:b8:
                    69:6e:25:25:d1:0d:ad:9d:60:20:c7:8e:57:15:ea:
                    76:10:36:3a:89:20:5c:67:a2:50:9c:18:a6:d7:aa:
                    d6:cb:ba:6f:1b:10:a9:de:85:d4:83:ff:cb:c1:c0:
                    35:e1:87:fe:2a:78:07:ba:86:e9:71:64:c2:76:2a:
                    90:20:d5:08:d4:9f:e2:65:4f:e6:46:06:fc:c0:07:
                    b8:3e:24:40:5f:07:36:3d:de:1d:d5:c5:f8:dc:d6:
                    8b:54:d1:4d:ea:01:59:e8:31:2d:99:18:28:af:f4:
                    15:d1:be:85:30:c5:3a:22:ed:a3:e6:05:31:4b:66:
                    37:b0:42:22:ba:a8:ca:ff:f9:66:68:35:32:dd:b4:
                    d3:d4:1a:3b:7c:ec:4a:4a:57:e0:ec:c1:07:23:59:
                    60:86:1f:32:07:31:d4:ba:f6:53:4c:9f:58:c3:26:
                    45:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6C:B7:9C:9F:B9:91:D8:7A:44:1B:38:1F:B9:77:A6:35:01:E2:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/be335098-658c-34b3-80a0-cee6306c0430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl

            X509v3 Authority Key Identifier:
                keyid:F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:1005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:1b:dd:d9:02:3b:3f:52:24:ea:59:60:e2:0e:54:05:77:e6:
         1a:46:9f:d9:a1:2c:ce:bb:2f:f9:3f:a1:5d:41:ec:4f:89:55:
         ea:59:6a:f8:7a:e8:0f:93:92:37:5c:ff:0b:e0:ec:24:28:1d:
         d0:5d:ac:c7:83:30:23:eb:c5:64:28:25:54:f9:3c:c3:d7:cb:
         73:22:7b:36:b6:12:6d:76:58:09:eb:3b:a6:c1:df:e8:51:07:
         c3:d0:a8:c1:34:54:28:f5:d2:16:f7:d3:3c:df:74:d2:8f:7d:
         fe:09:03:3d:a2:84:a3:e5:2e:c7:48:d2:77:12:25:b8:05:1b:
         cc:df:b1:0c:6c:55:2f:40:7b:23:c2:ff:49:e9:0b:c4:b0:1d:
         56:36:14:fb:3b:4c:0e:06:c2:c3:41:77:a7:29:84:70:78:07:
         bf:d7:bd:bf:7f:63:e8:6f:8c:d1:8f:fe:9f:66:31:32:f7:f5:
         6c:a7:61:73:06:fb:9f:be:c3:84:4f:22:9c:02:88:bf:09:8b:
         bf:a7:c8:33:f9:ad:04:de:0f:e6:a7:4f:6d:7e:d7:92:41:e5:
         17:e4:86:30:db:00:60:e8:01:34:76:99:ff:83:05:c0:50:1d:
         82:43:86:e0:53:d4:5d:3d:51:73:ee:08:ce:e0:73:d3:b8:d9:
         88:1f:6c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----