Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cc66d5f-065c-3668-b530-8ed5bce2c5d6.roa
File:                     8cc66d5f-065c-3668-b530-8ed5bce2c5d6.roa (raw, json)
Hash identifier:          peEDZMDBKDV72fHbaG8xMpEr8fjRfs58boPpOzBJlwk=
Subject key identifier:   C8:12:F4:B7:B2:14:29:9E:CD:86:2E:D0:25:B6:B3:BF:74:AD:53:2C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584827C53798C4112669DDDA4BB0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cc66d5f-065c-3668-b530-8ed5bce2c5d6.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     24319
IP address blocks:        2600:1413:8000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:37:98:c4:11:26:69:dd:da:4b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=3bf97063-2c61-4e50-a877-fb1ea670da2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:24:46:51:22:52:86:de:3a:a2:44:57:f9:
                    6c:71:1a:72:4c:ad:43:dd:ff:5c:7e:9d:f3:dd:61:
                    d7:a4:9c:c2:a4:49:88:c1:b3:62:b8:43:55:41:e1:
                    c8:56:56:23:7c:be:89:56:83:00:a0:34:05:a9:f7:
                    e5:99:27:38:c6:bf:12:ac:49:d6:b1:8a:89:24:8b:
                    ec:99:5a:33:b2:86:b2:dc:d9:d4:01:bd:78:0a:b4:
                    03:e2:ed:c0:93:c4:72:3f:64:9b:37:b2:b1:8b:5c:
                    77:c3:c6:eb:0e:f5:e2:1b:84:9d:d8:89:60:0e:1e:
                    ea:eb:16:6b:f7:5b:f0:b7:7d:ce:94:36:a5:82:73:
                    00:f0:74:27:e3:e7:e9:92:6e:bd:78:5d:64:d3:0a:
                    86:c2:66:78:57:d4:b1:ec:8a:60:8d:65:0c:2d:7a:
                    a4:dc:d8:33:97:4a:10:7d:b2:8f:e3:5c:a8:26:ad:
                    29:e0:ef:93:a3:88:00:48:9d:86:10:4e:ab:6e:07:
                    09:54:15:06:aa:9e:8e:4c:0f:6c:31:22:65:37:6d:
                    d2:05:a7:c8:cb:90:4c:c2:4f:a6:33:7f:f2:2e:c0:
                    69:58:e3:ba:ad:f5:4e:ba:16:9c:7a:2a:ac:09:9d:
                    38:af:0e:cf:d5:72:f9:20:48:e7:47:48:64:da:16:
                    e3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:12:F4:B7:B2:14:29:9E:CD:86:2E:D0:25:B6:B3:BF:74:AD:53:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cc66d5f-065c-3668-b530-8ed5bce2c5d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1413:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ae:83:cf:ad:27:64:c6:7f:8f:92:80:b7:94:da:13:24:13:
         ab:5a:03:9d:77:3d:ee:0a:1d:ff:86:28:85:cc:06:62:d1:26:
         0d:f2:73:32:8b:f7:6d:06:a9:35:c7:06:d3:76:08:54:5c:b8:
         0c:68:67:ad:e1:76:3c:c6:b6:f3:5a:da:a8:82:86:8d:26:5d:
         a7:48:2f:c6:1d:15:06:b2:c5:59:7e:17:eb:3d:d4:3f:75:e9:
         83:d7:96:25:d4:c1:99:e5:0a:15:77:a5:9b:07:33:79:03:27:
         a2:15:da:c1:e7:fd:d4:0a:d5:bb:7e:1d:b3:b7:fc:42:c2:b2:
         ff:ae:a4:6f:ed:cd:29:57:4c:71:64:a3:96:0c:10:f1:a7:41:
         fc:14:a5:d9:3e:a2:16:dc:f5:1f:92:6c:9f:30:1c:32:04:d7:
         27:4d:48:7d:20:7a:5c:53:1c:b6:84:2c:b1:5b:ef:cb:40:35:
         8b:41:be:6d:3d:10:d8:93:ed:8f:cb:e8:48:40:a4:2c:00:28:
         2a:39:4b:99:78:6c:63:91:63:df:78:14:fc:c7:6b:b9:6c:f3:
         6e:14:7c:dc:69:58:50:e9:f4:d7:78:2f:61:af:42:a6:0e:5b:
         a5:1a:7a:36:33:26:ca:13:20:11:b7:b3:ac:18:0c:f9:18:52:
         65:99:0c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----