Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/18/323630313a316430383a613030303a3a2f34302d3438203d3e203437343439.roa
File:                     323630313a316430383a613030303a3a2f34302d3438203d3e203437343439.roa (raw, json)
Hash identifier:          428+2IhxX2A3SZBDglvqH3d5u7uJr3Y2GeDEqoPZ+1E=
Subject key identifier:   07:60:E0:63:07:BF:59:1F:AD:D5:B6:53:EF:5C:BE:EF:E8:BC:F9:1C
Certificate issuer:       /CN=cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c
Certificate serial:       251E93A4C59EFACCBE16D460FE7E75517E5D027A
Authority key identifier: AC:AA:F0:41:B8:BE:93:E9:AC:0A:06:EB:F5:9F:DC:21:EC:23:40:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c.cer
Subject info access:      rsync://rpki.co/repo/AS945/18/323630313a316430383a613030303a3a2f34302d3438203d3e203437343439.roa
Signing time:             Sat 01 Jun 2024 18:51:37 +0000
ROA not before:           Sat 01 Jun 2024 18:46:37 +0000
ROA not after:            Sat 31 May 2025 18:51:37 +0000
asID:                     47449
IP address blocks:        2601:1d08:a000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1e:93:a4:c5:9e:fa:cc:be:16:d4:60:fe:7e:75:51:7e:5d:02:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c
        Validity
            Not Before: Jun  1 18:46:37 2024 GMT
            Not After : May 31 18:51:37 2025 GMT
        Subject: CN=0760E06307BF591FADD5B653EF5CBEEFE8BCF91C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:16:d6:0c:03:ff:4c:dd:dd:ac:55:46:c5:c0:
                    69:6a:92:57:04:24:b6:11:97:0a:37:2f:3c:42:f6:
                    61:aa:9e:63:ae:4b:f3:72:44:bb:8b:fd:ea:21:f2:
                    54:b8:3d:58:36:f1:78:91:e8:6f:11:56:ac:9c:0d:
                    fc:ba:c1:cf:a2:37:76:c8:26:c1:60:5a:a9:77:a7:
                    70:e7:13:19:30:9b:06:31:cf:bd:f3:ed:12:1e:85:
                    dc:ed:73:a1:a6:4d:ed:41:2d:15:32:84:10:12:db:
                    4d:25:0d:33:62:de:0b:64:c3:b6:e8:67:bc:1a:4d:
                    5c:a4:11:ef:10:5e:51:f4:7f:91:17:28:b1:f0:4a:
                    02:75:77:c6:c8:34:5e:9b:e5:9d:2a:6e:42:8b:d7:
                    c8:19:dc:33:81:73:a4:cb:cc:a2:b0:a7:f5:5d:6f:
                    5d:ed:98:60:69:2f:08:c1:21:7e:3c:d5:cc:d6:eb:
                    35:c9:4f:b9:a9:d0:87:1e:8b:5d:7f:01:9c:87:85:
                    a8:4e:14:52:51:cc:bd:f3:0a:7d:2b:00:62:bf:59:
                    ce:cf:ec:08:79:cd:4f:68:e0:c7:dd:c8:a8:ac:46:
                    24:dc:8d:94:be:b3:c7:e2:a0:e4:fa:77:0f:9b:56:
                    e4:da:ea:33:f3:7e:31:1c:e0:4a:44:17:2d:bd:2d:
                    b3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:60:E0:63:07:BF:59:1F:AD:D5:B6:53:EF:5C:BE:EF:E8:BC:F9:1C
            X509v3 Authority Key Identifier:
                keyid:AC:AA:F0:41:B8:BE:93:E9:AC:0A:06:EB:F5:9F:DC:21:EC:23:40:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/18/ACAAF041B8BE93E9AC0A06EBF59FDC21EC2340B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/18/323630313a316430383a613030303a3a2f34302d3438203d3e203437343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d08:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:ce:cc:fd:df:46:a7:7f:db:33:5b:0a:3e:7f:55:7a:5d:08:
         94:ee:0d:37:e5:e5:56:2f:64:94:ad:75:c8:5e:12:db:d9:d9:
         c7:ab:4c:32:3f:9b:3a:67:f2:00:b1:82:71:13:8e:e5:c1:d0:
         ce:c8:f7:7a:a4:58:5a:07:7b:91:fc:aa:d8:cc:18:b5:27:0b:
         7d:51:06:80:3d:8f:5a:fd:b0:b0:16:3a:23:de:84:06:83:ce:
         10:08:86:89:ab:4d:55:de:1b:02:fc:97:e9:c9:01:95:54:d8:
         ae:99:99:eb:1e:09:a8:de:9e:fa:db:3d:9d:e6:75:40:d7:66:
         88:33:f0:95:70:91:3d:55:3e:a0:1d:22:9a:d4:e1:b4:a6:13:
         f3:c5:da:d0:fb:5f:e6:fe:2f:1d:e3:1c:87:73:4f:92:82:36:
         da:c3:4c:52:40:d6:e0:6f:ad:d5:77:c7:35:c3:5b:33:37:4a:
         5a:db:1e:5a:74:28:a6:1e:b5:ef:33:80:b6:9c:8b:66:97:0e:
         c3:80:99:ef:ee:f7:19:d5:d0:ff:fd:12:75:0a:b0:ef:53:e7:
         3c:52:01:e5:ce:69:45:95:be:ac:45:57:a1:64:2e:90:21:da:
         7c:1a:5f:b4:d1:70:8e:d2:f2:8e:29:5c:48:21:fe:d0:b3:fa:
         50:bb:68:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----