Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/207960ee-276d-30ed-acec-3c918f295d67.roa
File:                     207960ee-276d-30ed-acec-3c918f295d67.roa (raw, json)
Hash identifier:          MB9vu6Lh/u0mcgzvoDj2Y7YApgSLEQWfv0+2Pg9llnA=
Subject key identifier:   BD:7E:0C:54:6F:F7:C7:2E:72:72:F5:20:FC:A6:BD:BB:E9:5A:28:16
Certificate issuer:       /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial:       010D0C9F4328584950F96B64162EA9E613CDF380
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/207960ee-276d-30ed-acec-3c918f295d67.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     22612
IP address blocks:        2606:5b80::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:6b:64:16:2e:a9:e6:13:cd:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=8df47fbf-bfd3-426b-b13b-5bdb34f2623b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:99:71:9d:8a:53:86:7b:83:b7:05:8c:dd:6a:
                    98:0e:da:69:70:50:37:2b:71:fb:a0:69:c9:a3:30:
                    c6:ec:51:94:c8:7e:bf:69:a5:83:56:5c:6b:31:47:
                    db:71:30:69:a3:bb:48:9f:4b:d3:73:1d:48:af:6f:
                    8f:4f:e7:c3:a1:42:c9:04:04:42:d3:e6:59:65:cf:
                    8d:d9:b8:b4:de:7c:70:fa:f4:e5:03:83:b7:e1:0e:
                    b0:cb:73:18:97:36:d1:74:4e:5e:bc:e2:2b:c4:bf:
                    a1:75:cb:bc:47:04:90:3c:2c:26:7a:78:f8:d0:1f:
                    15:68:0b:89:cc:d8:a2:62:01:9d:4f:67:ca:60:20:
                    37:fa:3a:2f:f4:82:81:00:b9:3a:cb:f1:7c:35:63:
                    f4:45:3c:e9:f3:02:d6:5a:6c:0f:23:b9:6f:d6:3e:
                    5d:74:65:07:ac:9a:f1:fc:ea:16:5f:09:8f:2b:ad:
                    62:19:1f:8a:88:fb:16:00:46:99:f5:b5:24:1d:c5:
                    1b:8e:46:12:af:66:ff:eb:f5:90:d5:ec:29:bb:81:
                    4e:d9:70:0d:33:20:a4:17:43:42:24:c5:7b:77:1f:
                    08:dc:72:96:ad:4a:f6:c1:b7:62:9c:f1:ea:51:51:
                    e1:f5:c1:23:73:41:ec:55:e3:04:9b:a3:10:e0:02:
                    bf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7E:0C:54:6F:F7:C7:2E:72:72:F5:20:FC:A6:BD:BB:E9:5A:28:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/207960ee-276d-30ed-acec-3c918f295d67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl

            X509v3 Authority Key Identifier:
                keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:eb:f0:bc:f6:74:b9:b9:12:84:57:6d:26:2e:db:66:51:cf:
         67:02:ca:a0:b6:88:c4:df:31:a2:f1:b9:4d:24:b7:b9:61:df:
         00:d7:8d:3b:36:40:43:70:54:bb:dc:18:7e:0d:39:83:60:bc:
         b4:2e:ce:bd:49:0d:0e:a8:3d:9c:cb:9a:6c:0a:38:4b:43:09:
         b8:06:5a:a6:30:f2:80:65:2f:1a:e4:60:0a:60:3c:ff:b7:68:
         4b:00:81:88:48:7a:79:ec:07:b9:99:c1:cf:21:7b:ba:24:24:
         85:40:ef:57:3c:db:5a:4b:87:61:0d:cf:0b:32:d8:e9:b4:4d:
         a8:d3:7e:2f:f4:8a:d3:75:e4:bd:ee:98:d8:b1:39:75:d6:a3:
         b1:84:e5:41:c3:6a:8e:1d:e7:b5:4a:f7:5d:50:ae:aa:86:fe:
         09:e0:35:37:42:75:48:95:0e:ae:a2:0f:d8:d6:8c:60:d1:bf:
         a3:15:c2:94:02:91:6c:cc:d1:b4:f2:f5:12:ab:40:a3:d2:33:
         b9:ed:a8:c2:7e:f1:34:03:df:f0:d3:e8:19:2c:a5:f1:63:ee:
         85:bd:9c:44:d8:8b:ab:5a:e1:39:48:3a:8e:b7:e9:4f:98:4d:
         56:3f:92:5a:f7:e0:26:ff:5c:7a:20:7b:28:ee:1a:20:14:05:
         5e:2b:78:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----