Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a353030303a3a2f34342d3438203d3e20323134363735.roa
File:                     323630313a316430383a353030303a3a2f34342d3438203d3e20323134363735.roa (raw, json)
Hash identifier:          ADoP0EfFHBplI0EeJK5cd2XGbW2KVGMKM1aM1oJgvz0=
Subject key identifier:   EE:FB:5D:0F:25:D3:F2:25:FD:77:AD:58:2F:72:91:7D:9F:1B:93:A8
Certificate issuer:       /CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
Certificate serial:       2A84B82C36E2EAD2A330905322B20486EC95F245
Authority key identifier: 9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a353030303a3a2f34342d3438203d3e20323134363735.roa
Signing time:             Sun 21 Jul 2024 12:50:39 +0000
ROA not before:           Sun 21 Jul 2024 12:45:39 +0000
ROA not after:            Sun 20 Jul 2025 12:50:39 +0000
asID:                     214675
IP address blocks:        2601:1d08:5000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:84:b8:2c:36:e2:ea:d2:a3:30:90:53:22:b2:04:86:ec:95:f2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
        Validity
            Not Before: Jul 21 12:45:39 2024 GMT
            Not After : Jul 20 12:50:39 2025 GMT
        Subject: CN=EEFB5D0F25D3F225FD77AD582F72917D9F1B93A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:57:85:5f:96:11:26:d2:d3:65:52:22:a8:
                    ec:2b:59:e4:f3:3c:42:87:bf:1c:1d:bd:96:3c:49:
                    0f:22:b0:58:54:1b:95:92:61:86:b2:25:9f:6d:59:
                    b0:e3:d9:74:0b:bc:b4:93:98:19:f3:2d:cc:d5:40:
                    b5:70:b6:3e:98:51:5e:d5:c0:8a:3e:b5:c9:23:b6:
                    88:8b:8f:75:62:e0:01:80:9a:43:60:f1:e3:39:c4:
                    c3:80:b7:c5:33:b5:6f:ae:62:17:20:01:78:bd:4a:
                    3b:72:54:a8:cf:72:0d:4a:a2:31:e9:f6:4c:f0:c2:
                    ad:32:09:b5:89:13:ea:d5:cf:5d:04:e2:da:f1:a0:
                    ab:98:aa:39:fe:89:cc:f9:ab:a3:ff:a3:c1:e6:e8:
                    f7:39:ab:ee:60:35:31:ff:03:91:fd:4a:d2:4d:6a:
                    b0:80:c7:01:0d:d2:39:82:91:f9:a8:e5:7e:62:57:
                    c9:15:3c:c7:d9:fc:1a:cc:14:f9:a4:a5:31:03:72:
                    63:e3:be:60:38:08:86:0b:af:33:59:90:0d:0a:37:
                    32:3a:fb:53:2d:13:70:d3:ef:7e:99:fb:6f:7e:86:
                    59:18:d0:f9:f4:ef:79:16:c3:b8:30:fe:a0:a9:21:
                    69:20:ed:cd:03:3a:a5:80:15:fd:d3:ee:69:10:75:
                    51:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FB:5D:0F:25:D3:F2:25:FD:77:AD:58:2F:72:91:7D:9F:1B:93:A8
            X509v3 Authority Key Identifier:
                keyid:9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/9A51D6D7D484FA0FC85568FB6B86E91D8DF6F4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a353030303a3a2f34342d3438203d3e20323134363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d08:5000::/44

    Signature Algorithm: sha256WithRSAEncryption
         a3:d6:3f:43:05:8b:a4:d6:a7:ae:55:3f:fe:c3:3f:bd:27:33:
         aa:c2:2f:07:54:9e:be:e4:0f:d2:e2:f5:f8:87:7f:8f:8c:7a:
         c6:6d:f6:dc:27:08:cd:12:d8:89:ca:9d:6f:38:fb:bb:7d:5e:
         f6:df:b1:90:26:07:e0:66:ae:d9:e1:c7:3d:2c:eb:cd:8a:81:
         b5:27:62:0b:8c:44:3c:78:48:cf:fc:a1:b3:94:c9:83:88:80:
         68:2b:88:49:75:e7:9c:1e:65:c2:fa:c8:75:ac:14:e5:ee:bc:
         1f:2a:50:61:09:d2:26:d5:45:1a:ef:9b:53:19:98:56:28:d8:
         13:f9:bb:bb:00:26:74:b3:2a:5f:9f:a9:b8:c5:92:05:69:57:
         3f:90:87:de:da:4f:53:90:2b:c8:8b:a3:f8:c2:91:7b:c2:29:
         85:6c:84:50:26:87:dc:d6:a9:85:5c:08:03:26:40:2c:10:e8:
         01:ab:9d:71:d4:ec:c0:8e:e1:c0:e7:02:d3:5f:3d:5b:90:77:
         05:35:00:7c:b5:8b:54:06:5b:f5:a0:72:b1:b3:ad:d7:43:92:
         b9:cd:f6:34:b1:fd:21:f6:6a:46:35:84:18:83:05:fe:15:24:
         cc:32:3b:41:6c:cf:20:f3:15:03:c8:65:3f:94:11:86:4b:8c:
         51:89:ff:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----