Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/2baf96ad-1173-3a17-b553-d836f00d57d3.roa
File:                     2baf96ad-1173-3a17-b553-d836f00d57d3.roa (raw, json)
Hash identifier:          JijQL+zp3c9C2v6YY+fU5YjJsa56VEqx5lpJ7xrVwEc=
Subject key identifier:   3E:96:EE:1A:5A:5F:53:1F:6F:CB:4F:4C:CF:A1:00:20:D3:52:D5:A3
Certificate issuer:       /CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
Certificate serial:       010D0C9F432858484EDACD313DCD95D684F64A00
Authority key identifier: 53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/2baf96ad-1173-3a17-b553-d836f00d57d3.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     22296
IP address blocks:        2602:2e5::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:cd:31:3d:cd:95:d6:84:f6:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=0bbdec8a-d9a0-46d1-9601-944c14a8785b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f3:50:af:40:51:ae:f3:6d:9e:44:30:cd:64:
                    17:05:5a:70:14:71:ea:ca:b1:5e:40:45:b2:3e:6d:
                    ee:dd:a2:7e:6a:b2:1e:5d:af:5d:1f:3a:ba:82:4f:
                    66:35:15:2f:00:2c:e5:b3:c9:d1:2b:a9:2e:76:92:
                    58:e7:17:56:49:86:53:d2:f8:4a:1b:1c:32:7b:57:
                    c0:77:47:83:18:53:16:67:29:c3:94:3b:ed:cc:cf:
                    4c:06:2c:36:7f:3e:d6:e7:10:0c:fa:38:ef:a5:d9:
                    a3:dd:27:30:26:2d:1d:f7:db:a3:28:77:3f:c1:06:
                    ff:ff:13:7d:42:65:65:f0:c5:69:63:5a:55:c0:9c:
                    0e:28:29:99:91:7c:63:bf:d3:7c:47:a7:bc:c0:3f:
                    78:91:8a:a6:55:e0:79:60:3c:56:ee:db:db:8b:a1:
                    d6:05:a5:f1:af:69:5b:ab:ad:c9:f6:80:e8:42:af:
                    09:cd:a7:2b:cf:7f:bb:a7:bf:7e:cb:93:a9:56:1d:
                    5f:02:9d:15:e6:70:2e:d7:67:82:c5:5b:e6:1b:65:
                    3c:72:37:83:5e:b0:29:25:3b:75:97:9a:f7:2e:f6:
                    41:36:7b:ae:96:6a:a2:df:77:c4:b4:72:62:da:1b:
                    fe:b3:ba:0e:08:85:98:db:48:f4:d6:a1:28:a9:2d:
                    a0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:96:EE:1A:5A:5F:53:1F:6F:CB:4F:4C:CF:A1:00:20:D3:52:D5:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/2baf96ad-1173-3a17-b553-d836f00d57d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl

            X509v3 Authority Key Identifier:
                keyid:53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2e5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ca:36:5e:0a:45:63:04:a8:69:8d:49:04:bd:32:cc:1f:17:
         c3:96:00:d8:bf:e3:37:e8:e1:98:fe:43:5b:09:7b:89:5c:b9:
         61:f7:5f:c6:94:ce:c0:70:9b:1b:51:8a:88:76:27:47:b2:77:
         eb:20:0e:8c:af:2b:b3:2e:9e:62:53:49:7b:33:bc:7c:0a:7c:
         3b:94:20:b3:23:06:0f:48:c1:db:0f:2b:77:b5:5c:df:7b:88:
         6f:60:6f:d0:41:a7:52:05:8b:f7:f3:28:5c:80:a9:e8:7f:01:
         1e:ba:34:6f:ca:a3:c1:d5:07:a8:a3:37:50:9b:5f:0a:e4:8f:
         34:84:27:9d:d0:97:fd:0a:bf:fc:a6:ea:48:32:92:7c:17:3f:
         93:22:03:69:98:f9:ff:d5:aa:51:46:5f:a9:b4:8f:40:e8:e0:
         d4:51:21:40:87:17:63:11:c8:24:59:cb:63:e9:87:22:ea:c7:
         25:10:c1:a0:61:96:3c:10:36:a8:63:ae:4b:33:8e:2a:18:3f:
         db:b3:46:b7:84:9e:4f:a7:06:18:f9:66:b8:a0:3d:b4:a2:23:
         74:35:66:1a:99:a7:9b:ba:ba:ff:9a:58:3c:f0:1b:cf:17:99:
         11:3e:b8:c8:91:99:35:c6:42:32:ff:46:a1:8c:1f:55:4c:e5:
         cf:a4:69:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----