Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/aa6edd1b-b21d-3723-b648-9690764ac2c6.roa
File:                     aa6edd1b-b21d-3723-b648-9690764ac2c6.roa (raw, json)
Hash identifier:          gd7ElGJISTueX+JGLjfDMktOE0qUpVLGmmkbIbXQjkQ=
Subject key identifier:   F9:E9:0D:86:6C:15:3A:48:53:F0:C8:74:6E:4B:2D:FE:69:3C:C7:2C
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F43285848100A962D64BA2E4B40A91BD0
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/aa6edd1b-b21d-3723-b648-9690764ac2c6.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     19637
IP address blocks:        2602:275:568::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:96:2d:64:ba:2e:4b:40:a9:1b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=cb357d30-aee2-4de1-a726-5612a5cc2445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cf:7a:1e:e7:3c:f5:11:46:53:bc:c6:ec:02:
                    b7:54:c4:94:67:ad:2c:bf:ca:1c:9c:65:99:5f:d5:
                    c4:40:aa:7d:40:05:d7:2a:44:5f:da:01:e4:74:db:
                    bd:cc:cc:9c:67:80:6a:6f:bd:cb:92:7b:38:d1:8c:
                    ff:ac:75:a0:3e:76:6d:e6:a2:29:16:c9:66:d0:94:
                    af:3a:50:b2:0e:d4:a3:8e:7d:c2:2d:c2:0e:c4:bb:
                    f9:57:79:ad:2c:59:3b:44:c7:d9:c6:e2:f4:2a:0f:
                    94:ad:ef:69:1d:a7:f7:59:3c:f4:d6:0f:15:d9:eb:
                    92:87:48:5b:a2:90:d1:07:de:fb:22:0b:dc:a1:7f:
                    29:eb:af:38:00:57:fe:9b:bb:7d:ea:b7:10:ea:af:
                    f0:e3:35:a8:79:64:b1:74:98:e5:96:c0:a9:f1:c4:
                    c9:8b:a6:d2:a7:5b:89:60:19:d7:06:fc:c7:a8:ba:
                    f5:71:24:36:1f:d5:84:96:f8:57:50:70:fd:fc:df:
                    3d:b5:c2:2c:1e:f7:44:77:b2:46:1f:07:50:3d:9f:
                    73:27:60:9e:5a:dd:70:0f:f1:d3:ee:c1:4d:ef:e4:
                    5d:e9:93:41:6b:2d:a0:83:1b:ca:4e:3b:27:30:46:
                    07:75:f9:2d:a6:65:c2:59:62:ee:c7:4a:73:7b:48:
                    77:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E9:0D:86:6C:15:3A:48:53:F0:C8:74:6E:4B:2D:FE:69:3C:C7:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/aa6edd1b-b21d-3723-b648-9690764ac2c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:275:568::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:37:af:71:f8:36:15:66:e4:a6:8f:44:26:04:e6:9c:5c:40:
         04:73:00:b8:37:44:ee:96:93:df:92:0b:6e:fd:5c:a4:28:f5:
         ba:fc:24:b6:c9:c3:b1:08:3f:b5:28:d0:e0:c3:2f:25:f7:ad:
         49:0d:f8:8e:29:a2:e6:0a:20:a4:f0:f6:c6:1a:60:54:c8:9a:
         62:0e:3d:10:31:1b:b6:d5:eb:d6:40:48:ae:0f:bf:71:f0:47:
         cc:47:32:5c:c8:5f:26:00:68:95:bb:9e:4f:76:83:1b:22:43:
         30:01:ec:5e:4a:a4:77:ac:6c:33:3a:a5:23:09:4f:fe:01:d3:
         b8:b1:50:56:63:1f:3f:02:3a:e1:0c:8c:77:a2:fd:f3:51:51:
         8d:47:58:f9:d3:82:e1:fe:38:23:6d:f9:f7:11:37:5e:4a:67:
         91:af:d5:3e:f0:c6:a2:0c:65:ef:4f:74:26:76:4c:2f:7a:ff:
         4d:19:8c:71:d9:fc:ed:1d:72:a8:dc:0e:ac:ae:9e:fc:10:c7:
         1a:53:e1:4c:e4:cc:7a:1e:a5:bf:86:17:8f:1e:0b:53:3e:e7:
         21:79:91:09:94:25:d9:e8:45:30:86:3a:7d:49:eb:a2:26:16:
         ae:79:b4:9c:e3:da:d1:b2:2f:68:51:35:25:54:c9:2c:d3:13:
         89:84:33:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----