Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/239bd553-03a2-3225-90fa-315cf5127374.roa
File:                     239bd553-03a2-3225-90fa-315cf5127374.roa (raw, json)
Hash identifier:          5gc/2gbmAIK+0W2nOgqg17BZQY4TIHhrD8G1AJR5eeo=
Subject key identifier:   8F:E0:B0:6A:D6:1F:F7:D9:6A:D8:E7:25:BA:1D:A0:AA:78:9C:8D:51
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F432858482BF554BD3CFA269A95A50600
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/239bd553-03a2-3225-90fa-315cf5127374.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     63213
IP address blocks:        2607:6b80:66::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:54:bd:3c:fa:26:9a:95:a5:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=e1413533-39a8-4537-8e65-559f7b931f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:12:5a:80:44:a3:a5:b7:bc:3c:23:64:8a:53:
                    67:dc:c7:05:e7:c7:b5:39:a7:9a:bb:57:f9:da:90:
                    d1:1e:8f:87:6a:ca:0d:bf:b5:9e:e3:60:a5:8d:4b:
                    e6:44:58:1d:92:aa:06:a3:46:bc:8a:21:c7:90:68:
                    e1:c8:33:8b:39:87:d9:e8:13:2f:26:c2:31:3b:ab:
                    e3:21:75:d6:6c:06:31:3c:da:99:e1:26:7b:97:d0:
                    08:3f:27:3b:4a:80:eb:86:62:82:0a:33:62:68:47:
                    e7:89:9b:3f:6d:d9:5d:2f:d5:3b:02:6d:4c:67:ab:
                    1f:8d:ee:9c:c0:96:b7:8c:01:df:2c:49:ef:ea:06:
                    03:8b:fd:9e:70:34:6f:05:50:49:75:21:47:45:cf:
                    b0:19:24:0b:86:be:48:16:97:64:c4:94:46:f6:14:
                    ea:ea:75:42:78:2e:ba:40:7d:8e:8d:0d:d8:6d:5d:
                    e6:86:7e:b2:5b:0e:b6:a0:87:90:11:49:b4:7a:a9:
                    bd:53:1c:90:c7:2f:d1:19:d1:9b:6d:a0:40:76:96:
                    31:46:56:aa:dd:92:70:10:7c:d5:ac:07:fb:0a:3a:
                    ee:14:da:32:50:03:13:66:02:4c:0a:db:15:21:65:
                    46:96:b0:bb:2c:19:83:ff:ee:d4:21:88:47:87:02:
                    c0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E0:B0:6A:D6:1F:F7:D9:6A:D8:E7:25:BA:1D:A0:AA:78:9C:8D:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/239bd553-03a2-3225-90fa-315cf5127374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:66::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:c2:b0:90:61:c2:c1:9d:43:5d:40:f9:ad:1d:46:e9:7d:d9:
         30:0d:d0:cc:f1:7a:27:9b:ca:97:87:8f:ad:3e:6c:b8:38:46:
         68:88:36:ab:ef:80:04:92:bd:42:48:8b:e8:94:ab:ec:94:4a:
         03:a5:1c:5f:5a:27:e9:56:38:89:9f:bc:f3:d0:d5:b5:79:d6:
         86:01:c3:94:3d:03:63:22:1d:b1:fe:44:d1:b1:a2:a3:5f:10:
         fc:f0:7e:bf:c6:a4:ef:d5:99:52:35:6f:08:b9:24:7e:d8:70:
         9f:6f:21:22:7f:fe:d6:dd:b3:b8:7f:de:06:c3:35:d1:46:89:
         39:20:a0:80:ab:90:94:cd:0c:da:0f:1a:43:cb:4c:3a:80:eb:
         6f:51:75:f9:4b:b7:6a:fc:93:d3:46:2a:4d:20:92:2e:9a:9a:
         bf:12:e0:7a:b4:20:d4:bc:de:e0:0f:3f:93:3b:d4:e2:9e:42:
         aa:2f:9f:af:2b:85:cc:3b:fd:7f:37:2b:81:6b:5d:20:59:a4:
         cc:7f:e1:e3:eb:8a:05:5f:f2:10:70:4a:ec:77:7f:9e:cc:4c:
         bf:01:f5:b2:49:fb:5f:21:28:8c:8f:b6:af:d5:75:95:8a:b4:
         64:72:75:77:2f:31:64:83:04:5f:3d:2b:9e:bf:c3:a7:ce:8e:
         a8:1c:2f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----