Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e7e8f2b2-10fb-39a3-914f-943de1b56a50.roa
File:                     e7e8f2b2-10fb-39a3-914f-943de1b56a50.roa (raw, json)
Hash identifier:          BxWKNOEcrUCehBHQwiElOPhsXWYstr3u6/G2GvUedu4=
Subject key identifier:   81:C3:81:B3:3E:27:CA:18:AB:FE:E8:B4:45:6E:E9:9D:FB:3D:33:B9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037ADDB5EDEC248C40F24A00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e7e8f2b2-10fb-39a3-914f-943de1b56a50.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     33588
IP address blocks:        2602:10f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:dd:b5:ed:ec:24:8c:40:f2:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=7de004ca-faa2-4b7b-b67e-3078046f72f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:11:10:46:8d:cb:b8:c5:4f:f6:eb:2a:40:
                    34:21:f4:07:06:df:f7:6e:86:41:de:c0:52:2f:36:
                    ee:60:3f:ec:8c:9a:b5:7d:70:88:f8:c4:52:39:52:
                    58:65:e3:7d:87:12:a2:01:16:45:0a:fc:fc:66:b3:
                    12:aa:73:12:f7:2f:36:e3:b3:e3:f5:ef:c1:41:ad:
                    e8:3d:be:32:65:7d:78:6b:4d:22:22:71:b0:95:da:
                    2d:d5:ff:2a:d3:84:4c:da:e7:31:fe:3a:79:28:46:
                    b5:87:76:18:bd:da:1d:86:4d:84:f7:06:05:e6:a2:
                    e5:4b:83:ba:8b:dc:5f:75:88:ff:62:43:1c:51:07:
                    0b:0f:f8:8e:1d:f7:f2:00:62:17:ee:b9:0d:15:a9:
                    56:c7:ce:ae:fa:a6:48:25:53:61:c7:18:85:7c:81:
                    a0:f5:60:11:6e:46:6d:31:07:df:4b:b1:8a:a3:ee:
                    1f:1e:c8:8d:ae:18:32:6b:0d:5b:ae:b6:b4:65:e1:
                    09:07:63:21:a0:b9:c0:7b:cb:c2:16:16:a3:dc:a2:
                    96:e8:07:2a:e2:cf:ee:22:e7:a2:45:f0:48:7d:43:
                    a1:c0:14:81:e3:fd:83:34:4f:fd:09:9f:40:5a:99:
                    c8:71:c7:19:b4:50:8e:76:96:36:a2:9f:ac:73:3c:
                    32:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C3:81:B3:3E:27:CA:18:AB:FE:E8:B4:45:6E:E9:9D:FB:3D:33:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e7e8f2b2-10fb-39a3-914f-943de1b56a50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:10f::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:d8:d3:6e:84:50:ba:68:36:1d:86:dd:d7:42:08:48:78:ed:
         ec:b2:01:6f:0d:c4:7d:4f:be:a1:79:ec:86:6a:c5:6d:60:b5:
         b5:1e:7c:2d:f4:b9:53:e5:9e:71:0a:35:dd:d4:28:d5:a3:73:
         1c:f4:d8:88:1e:9e:11:03:38:43:e5:5f:7e:cf:3c:e1:23:9d:
         b1:53:45:7a:fe:2c:85:a0:ab:73:4a:97:9e:6e:f2:9f:db:9b:
         89:11:ba:22:b1:15:54:05:ef:3a:f7:38:22:7c:d6:82:7b:88:
         45:c9:4f:ec:98:48:42:3f:8e:63:90:03:13:01:48:a2:9d:05:
         bd:bc:0c:ec:ae:0d:f5:bd:e9:92:76:55:dc:87:1b:ae:46:56:
         74:82:64:96:b0:d8:d4:a7:8a:70:d5:e7:63:a6:77:29:17:c5:
         11:60:56:29:f4:51:c2:8f:8b:78:d0:83:db:1c:5a:48:c0:df:
         38:12:4a:2a:91:e8:6e:50:c9:c0:71:eb:1c:e3:b1:00:4c:2f:
         21:68:25:7a:ed:58:5f:39:0f:af:a7:e1:b7:39:48:03:fd:ab:
         c6:92:99:c8:40:d2:7c:7d:30:f1:62:7f:62:37:9c:9c:31:7a:
         12:67:83:b4:cd:2a:61:e0:d5:29:e0:e5:a1:1c:cb:ae:da:5f:
         c4:5a:60:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----