Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/ca5f6813-066e-3e44-86a2-84ddf46b4431.roa
File:                     ca5f6813-066e-3e44-86a2-84ddf46b4431.roa (raw, json)
Hash identifier:          OWKNz43KvTBR46ZUhNyA1nBYfF1JQmTYTpnU85VhLXQ=
Subject key identifier:   4E:E5:BA:0E:1A:30:DC:B1:CC:1A:31:C2:81:19:E8:8F:16:B5:C3:DC
Certificate issuer:       /CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5
Certificate serial:       010D0C9F43285848530AE9F2803194CFE0A9F680
Authority key identifier: 72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/ca5f6813-066e-3e44-86a2-84ddf46b4431.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     6649
IP address blocks:        2606:5240:2445::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:e9:f2:80:31:94:cf:e0:a9:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=643f1b95-b50f-4cb9-87b7-a35f22dc0656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:43:34:b0:27:79:58:c9:19:fc:39:b2:eb:0d:
                    47:c3:9f:7f:e4:83:71:45:0d:d2:7b:24:34:e0:a2:
                    97:58:08:68:e8:f2:f4:ed:bc:78:aa:a1:27:53:d8:
                    e2:ee:45:ab:68:73:e5:f5:f5:30:cd:f3:e2:5a:2d:
                    c4:34:df:e7:26:04:eb:3f:e0:e1:0a:21:36:46:f9:
                    d4:95:f0:9d:df:1f:ee:bf:1d:69:8d:ee:2b:de:51:
                    48:98:26:61:ab:46:5d:e7:c0:c2:d3:04:5f:b9:c7:
                    cb:64:3e:64:f1:70:b0:c5:08:c5:78:ba:1a:0b:b7:
                    f8:e7:7f:b7:77:21:19:15:83:7d:82:1c:09:70:2e:
                    b0:7b:1a:09:7d:d2:30:4d:76:bd:e3:21:22:4f:82:
                    d8:b4:24:9a:1a:1d:8b:40:d8:32:a1:dc:6f:29:37:
                    91:85:97:3a:1b:57:5c:1c:a9:91:a4:6e:4c:1d:0a:
                    5a:b8:f5:24:58:f3:30:7c:32:4a:17:54:0f:60:5b:
                    f3:f1:f3:a6:9b:ca:03:c9:f5:a0:6e:3d:73:ea:d8:
                    bd:47:75:d1:7e:5e:d9:12:d1:94:fc:12:f2:f6:78:
                    55:54:2b:2d:bc:2b:28:77:28:62:d9:d7:a7:6f:0b:
                    13:9c:dc:55:98:64:22:ed:5d:e2:68:1e:87:70:ad:
                    3a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E5:BA:0E:1A:30:DC:B1:CC:1A:31:C2:81:19:E8:8F:16:B5:C3:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/ca5f6813-066e-3e44-86a2-84ddf46b4431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.crl

            X509v3 Authority Key Identifier:
                keyid:72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5240:2445::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:33:ec:c5:46:43:ac:7a:39:b5:75:12:c4:2c:6c:8c:2e:a2:
         10:cb:df:50:44:e8:4b:37:c0:c7:ec:a5:37:ed:b0:13:88:d5:
         72:25:16:5a:16:e3:bf:8d:18:36:6f:a1:4b:dc:be:43:1a:10:
         b7:4d:13:ec:b6:2f:ea:53:0c:2d:fa:59:55:c1:68:c0:f7:df:
         63:a5:6a:19:d0:06:b5:75:a4:1b:90:4a:a7:ed:15:70:e2:46:
         37:0a:59:29:34:47:5f:ee:66:dd:18:e1:6c:f7:6e:c6:1e:dc:
         ff:00:29:ac:81:20:d0:ba:cc:93:0a:be:98:2f:71:68:f8:a0:
         d0:f8:9c:1a:ea:0c:d4:6c:9c:09:b7:d4:82:d8:c3:7a:64:15:
         d9:74:72:45:fb:36:95:38:93:ac:4d:58:2d:fa:30:10:33:e4:
         9c:54:f6:f2:5f:be:5b:3a:37:e7:71:a5:bd:d0:97:fe:db:5e:
         20:b7:61:89:15:29:37:ad:6f:cb:bc:72:0a:f4:32:30:86:79:
         ef:ca:51:be:9e:36:93:c0:4d:1b:d3:fb:1f:4e:e7:f3:a6:e7:
         71:16:76:0b:02:b2:76:ed:fc:3c:16:54:4c:9b:b2:0a:74:78:
         d0:89:50:80:70:05:55:7c:0b:e0:8f:8b:f6:d8:62:0d:8c:a9:
         17:0f:57:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----