Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/ea128ee5-92a4-30c5-bbd2-b4d04e1fdd6d.roa
File:                     ea128ee5-92a4-30c5-bbd2-b4d04e1fdd6d.roa (raw, json)
Hash identifier:          4JzR+bkGCRKqZj3mJWEpurkEMwq8sdjyj8EZ02/G4dE=
Subject key identifier:   38:92:79:33:65:2D:A5:45:29:E9:D8:E4:0F:93:C9:4E:A2:26:42:9F
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F4328584940397C36C204896C62829200
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/ea128ee5-92a4-30c5-bbd2-b4d04e1fdd6d.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     47065
IP address blocks:        2604:4540:80::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:7c:36:c2:04:89:6c:62:82:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=603e0dcc-a9f2-4a75-8ecc-3fb8934e44af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c6:7d:27:a3:c7:35:13:b7:0b:21:70:a7:07:
                    e2:44:4d:1f:fe:e9:e1:7e:e6:ae:4b:53:7f:a2:d5:
                    4a:12:2f:81:0c:c0:5b:11:a0:33:7b:11:8f:84:eb:
                    38:ba:26:82:7d:c5:62:36:04:b0:ee:5c:06:ae:df:
                    22:e0:8c:f5:27:35:86:ce:7e:49:0f:2f:9f:11:00:
                    e6:65:96:8c:1c:1e:33:aa:bf:3c:11:31:37:2d:77:
                    03:b5:22:52:ba:a3:eb:d0:11:bd:d1:59:3c:09:fb:
                    10:dd:46:0c:77:6a:c6:58:d9:48:16:92:c7:d6:31:
                    da:c2:f7:14:30:cf:82:0f:fa:bb:19:8a:7d:6a:29:
                    0b:52:3d:aa:4b:9f:05:49:ff:e4:50:9f:d0:2e:78:
                    04:c4:f0:72:bd:8c:31:1f:75:59:36:2c:3d:13:d5:
                    27:4c:93:5c:21:c3:17:3e:4b:d7:de:7d:36:6e:e2:
                    ca:55:e6:82:19:a7:2a:ec:d1:d6:52:6b:62:c9:fa:
                    3d:e0:89:de:4f:90:5a:7e:df:d2:d0:02:59:0b:66:
                    67:63:f3:68:7f:1b:fb:a0:a8:00:05:67:8a:89:a8:
                    7d:6e:3b:e6:5d:d3:d4:4b:2c:63:dc:c6:f8:27:21:
                    50:26:66:a3:bb:e2:c2:b8:b3:d5:ec:64:6e:b2:b9:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:92:79:33:65:2D:A5:45:29:E9:D8:E4:0F:93:C9:4E:A2:26:42:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/ea128ee5-92a4-30c5-bbd2-b4d04e1fdd6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4540:80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f0:dd:46:9f:dc:02:ea:60:cd:ae:95:e3:d7:e7:12:27:fc:
         a2:34:d4:b2:61:1e:53:fb:24:b5:49:d1:68:10:a3:1c:98:11:
         72:2d:0a:73:91:d7:5b:b8:2a:f7:c2:d5:5e:a4:fb:e1:1f:8f:
         e4:c4:50:35:cd:7c:5f:3a:d5:20:9e:cc:63:18:ac:31:7f:6f:
         3b:62:29:f6:1d:d0:ef:46:76:7a:28:54:24:36:c5:ce:06:0a:
         bc:ad:c9:26:c0:db:63:6e:17:d9:f6:e3:a9:b4:d2:60:d2:21:
         63:b3:fe:5d:1e:6e:30:5d:48:76:cc:1a:54:e5:08:b5:52:68:
         1e:19:e8:15:b0:09:f2:c0:5b:a6:ad:bf:1a:f5:68:4d:dc:dd:
         d9:72:97:e3:03:1c:19:b8:85:42:65:83:ff:b5:77:7d:77:a7:
         66:6a:84:61:06:6e:63:dd:5d:1d:e2:d6:f2:b5:77:e0:25:98:
         4a:7c:48:37:b9:53:a0:0a:9d:c9:77:52:0b:53:71:2a:40:f8:
         95:0e:10:0d:17:ad:7f:75:a5:b6:ad:ce:b8:10:e7:6c:a5:47:
         c1:34:40:3c:83:89:fa:3c:88:4f:c1:3d:fd:fe:f2:be:74:48:
         ba:24:b7:3a:e9:81:6f:3b:76:ed:13:97:d9:38:43:a6:a5:48:
         7b:a0:10:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----