Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/06f41e6d-6678-3834-9f70-d8ccd6fbbf82.roa
File:                     06f41e6d-6678-3834-9f70-d8ccd6fbbf82.roa (raw, json)
Hash identifier:          m2HKslgO1agZ3/3wUOOTCa4Nak2uwLT2GRiS6wfa/FI=
Subject key identifier:   E3:2D:8D:11:67:C3:5F:6F:A3:98:F9:CA:78:A7:50:69:88:EB:3F:6F
Certificate issuer:       /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial:       010D0C9F432858486B1101F5576435BF7F0AE240
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/06f41e6d-6678-3834-9f70-d8ccd6fbbf82.roa
Signing time:             Fri 03 Jan 2025 04:32:39 +0000
ROA not before:           Fri 03 Jan 2025 04:32:39 +0000
ROA not after:            Thu 03 Apr 2025 03:32:39 +0000
asID:                     8011
IP address blocks:        2631:2000::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6b:11:01:f5:57:64:35:bf:7f:0a:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
        Validity
            Not Before: Jan  3 04:32:39 2025 GMT
            Not After : Apr  3 03:32:39 2025 GMT
        Subject: CN=177dd3a2-8b22-4a3e-aff6-0a4236d41797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d8:c2:cb:9c:45:03:ef:fd:15:98:23:b0:7f:
                    65:63:33:dd:fe:5a:57:ae:c3:e5:52:1c:fc:7b:07:
                    7d:8a:49:0a:4d:c4:90:b0:0a:fa:6f:2c:b1:ae:84:
                    b7:42:5f:14:34:40:9f:0c:3c:97:ac:e5:78:19:2f:
                    47:f9:4d:cd:54:e9:e3:da:bd:9f:4f:63:53:88:25:
                    7e:a3:6f:0e:04:24:1c:6f:d2:41:24:fc:ce:23:38:
                    aa:c3:d3:31:51:91:6a:16:4d:d3:7f:62:c3:da:c3:
                    d5:a2:24:b7:c3:79:96:d6:a7:ff:ca:c7:20:ae:b6:
                    e9:6e:d4:70:a0:28:5d:d5:86:1b:01:b1:d7:94:6e:
                    62:ae:73:c9:b0:c2:ca:5e:a1:a6:ff:a8:d1:12:12:
                    41:f8:e4:fa:af:c1:94:3e:cc:dd:28:e7:2e:1e:4b:
                    49:bd:50:51:75:db:55:01:6b:ee:99:32:56:52:ff:
                    89:0d:08:51:a5:89:b2:3c:cc:52:c6:32:d2:70:21:
                    5c:30:87:74:7b:5a:33:e4:e9:73:3c:81:13:67:35:
                    a4:95:60:80:3b:51:38:73:06:f5:47:8c:47:5b:c5:
                    4b:55:23:b3:9a:d6:f3:8e:b4:1b:cd:54:69:6b:fb:
                    1d:fc:0a:e0:d9:95:32:58:13:98:b2:73:7e:9a:a3:
                    a1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2D:8D:11:67:C3:5F:6F:A3:98:F9:CA:78:A7:50:69:88:EB:3F:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/06f41e6d-6678-3834-9f70-d8ccd6fbbf82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl

            X509v3 Authority Key Identifier:
                keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631:2000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:7d:35:92:4b:6c:a2:91:71:93:fa:e5:70:92:4b:1a:7b:fd:
         90:36:f4:0d:e4:b9:e6:dd:45:2e:85:17:ea:c1:d5:7b:f4:ea:
         84:90:c9:db:59:0d:c8:09:46:68:30:ea:16:46:88:e4:ff:3a:
         b5:b2:16:a9:f4:8d:84:5d:7c:43:5a:5b:7e:01:17:47:bd:67:
         b3:4a:ba:aa:d0:c1:93:dd:e8:c3:c6:5f:74:7c:ec:01:b7:f3:
         ad:7d:0f:d2:f9:5b:73:d4:f2:31:87:a0:ec:11:dc:cc:ba:b5:
         5d:57:44:86:35:ab:0e:40:ce:6a:d1:4c:fc:a8:74:b0:eb:34:
         b1:a8:d9:d6:e4:81:7f:2f:7d:fb:7b:ca:10:7f:75:ac:f1:19:
         90:f0:33:a7:81:24:95:96:1d:da:1f:2b:e6:a1:ff:2d:97:ad:
         d5:53:8c:69:e9:a7:7c:bd:17:4d:69:c9:8d:b6:d0:56:94:72:
         5b:28:3c:de:e1:64:15:72:f6:8e:86:ed:81:bf:6d:f4:fc:01:
         bf:4a:03:a3:dd:36:f6:76:00:b3:f9:7c:c2:2a:6e:c2:2b:b5:
         a2:00:48:33:1b:cc:15:86:b8:c9:8d:b6:d5:08:64:d3:c7:3c:
         06:a4:33:dc:f7:50:da:b8:c4:54:16:ac:68:70:c6:aa:c4:53:
         b0:36:88:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----