Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/b2837f54-ee64-3401-a183-f00d193d2ef4.roa
File:                     b2837f54-ee64-3401-a183-f00d193d2ef4.roa (raw, json)
Hash identifier:          s4ItF4VxS7/VYjpcN/ZOq688c1CnnIizcxhqhxXYC6c=
Subject key identifier:   80:87:0E:E0:8A:28:67:F8:89:8A:3D:D7:40:C5:6D:50:1F:C1:14:63
Certificate issuer:       /CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Certificate serial:       010D0C9F43285846C94A91D695E32F79A92DD9E0
Authority key identifier: 0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/b2837f54-ee64-3401-a183-f00d193d2ef4.roa
Signing time:             Tue 06 Aug 2024 13:00:38 +0000
ROA not before:           Tue 06 Aug 2024 13:00:38 +0000
ROA not after:            Mon 04 Nov 2024 14:00:38 +0000
asID:                     33333
IP address blocks:        2607:f5a0::/32 maxlen: 48
                          2607:ffd8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c9:4a:91:d6:95:e3:2f:79:a9:2d:d9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
        Validity
            Not Before: Aug  6 13:00:38 2024 GMT
            Not After : Nov  4 14:00:38 2024 GMT
        Subject: CN=97aa0145-2cec-4623-a471-cfc82cdf4771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a2:db:76:fd:3c:2f:6e:a8:12:ac:b2:22:73:
                    7b:16:07:67:aa:9b:77:14:2b:83:5a:56:a6:c1:5c:
                    fc:b8:7f:5c:af:56:8d:c6:b2:d6:9b:39:a6:cc:40:
                    94:32:85:b7:b5:66:4b:ab:81:bb:da:84:0e:e2:26:
                    22:c2:ad:ea:59:7d:25:b7:e0:85:92:ae:f6:22:65:
                    51:d5:6c:85:45:12:5d:d3:8d:c5:91:b6:54:13:b8:
                    65:1f:ad:cd:ea:25:05:94:ee:8d:ed:af:e7:4a:57:
                    6d:8d:51:b5:0e:59:c8:35:58:0c:b8:a0:99:3f:9f:
                    23:83:5b:cb:ff:6c:30:6a:3f:1b:af:83:f1:5c:b8:
                    32:38:bf:3f:9f:85:89:d7:00:0a:b5:be:95:0c:4f:
                    a9:f9:72:be:8d:7d:86:3e:18:1f:1c:1d:50:04:33:
                    45:24:5f:6b:53:48:3d:2c:86:6d:9e:14:1b:03:ad:
                    a6:fe:9d:a7:90:24:ea:c0:58:71:83:9a:0a:02:d8:
                    c8:ed:6f:ba:d2:71:26:b8:37:83:d2:72:bb:d4:cb:
                    5b:75:c1:da:88:ae:93:39:50:51:d0:30:f2:0f:1f:
                    79:e7:b6:41:ef:c3:57:db:03:66:8a:dc:f5:2a:0f:
                    0e:f3:69:42:16:ad:61:54:a0:ad:8c:82:bc:cc:91:
                    e4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:87:0E:E0:8A:28:67:F8:89:8A:3D:D7:40:C5:6D:50:1F:C1:14:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/b2837f54-ee64-3401-a183-f00d193d2ef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl

            X509v3 Authority Key Identifier:
                keyid:0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5a0::/32
                  2607:ffd8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:12:0c:2a:77:77:c7:68:34:ae:8c:d1:fe:1e:0f:6f:92:9b:
         d8:53:62:0b:57:28:bf:06:9c:e8:d8:34:27:f2:0c:f2:51:f3:
         38:a7:ae:f2:85:31:47:dd:f3:86:51:70:db:e6:1d:e0:af:a0:
         c9:74:3f:68:73:92:af:04:20:eb:37:63:3c:a0:f0:d3:55:26:
         29:6a:3c:92:be:4a:fb:ab:f6:91:73:5f:b2:a8:fc:cf:5e:2c:
         76:c8:f2:c0:6c:4e:23:fb:c8:e6:d5:a5:79:3e:46:08:83:95:
         7d:9e:25:fe:b7:dc:c2:b3:2d:af:b3:14:28:8a:79:eb:b6:92:
         06:d4:84:d9:f0:4e:6c:56:05:57:f9:59:c7:0e:4f:ea:f2:f9:
         39:27:4f:22:14:53:47:0e:b1:ec:f3:06:76:32:ff:22:ef:22:
         56:3f:d2:25:dd:34:35:47:63:8f:dc:cf:61:5d:61:76:72:03:
         8e:11:cc:46:2d:f9:01:9e:e1:65:af:2d:0d:eb:ad:f5:b5:b8:
         c7:66:a6:4e:84:c0:3e:59:c7:bf:7e:80:be:21:bf:27:e8:65:
         57:48:4e:ac:77:52:a1:ec:e6:10:79:a7:8e:c0:f7:00:2f:af:
         a7:24:19:94:a5:58:19:bb:22:2d:63:26:13:2b:1d:88:82:1d:
         2e:3d:ca:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----