Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2aca9835-2362-3d49-9ba5-59ad5b0f72a5.roa
File:                     2aca9835-2362-3d49-9ba5-59ad5b0f72a5.roa (raw, json)
Hash identifier:          Lc6YzhUpJk1N/O+vM6H4i2by4Phk86qByWo5XG+gAj8=
Subject key identifier:   28:80:3F:BA:81:46:62:22:A6:98:32:B5:C6:81:12:8C:66:06:2F:A7
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F432858489340A6210722B03D18438500
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2aca9835-2362-3d49-9ba5-59ad5b0f72a5.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     5769
IP address blocks:        2607:fa4c::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:a6:21:07:22:b0:3d:18:43:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=cea1977d-740b-4d7f-a1c2-9568db578e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:4f:d3:06:d1:13:2b:65:19:53:04:04:5c:
                    fe:9a:7c:11:84:e7:9a:87:54:c4:03:e5:32:e8:37:
                    6b:ef:b9:7e:75:cd:7d:00:63:4a:3e:b0:bd:2f:cc:
                    cf:ca:52:09:df:59:c0:98:3e:bd:21:36:9e:76:fa:
                    bf:61:de:b7:41:c4:78:28:1c:63:fa:4f:a7:36:1e:
                    cf:f9:d9:c0:18:63:1f:37:c3:74:04:a0:1e:a3:af:
                    10:50:53:8a:ce:c6:4a:c8:b6:93:4d:c2:ff:80:da:
                    24:3a:af:b4:c7:d9:12:81:25:6a:a1:2b:26:95:c0:
                    00:9c:74:5e:99:81:67:01:81:f8:cb:d4:4d:63:2c:
                    25:f8:d8:c3:c8:f9:e1:99:73:57:5c:82:8f:a0:78:
                    ad:5a:8b:c0:34:e7:f5:a2:7a:23:69:73:f4:58:18:
                    b8:f2:50:05:c4:f5:c3:d3:07:e9:d1:af:20:08:82:
                    bf:53:5b:9a:eb:b5:3d:3f:76:d6:4b:0a:37:40:aa:
                    95:dd:b9:82:e2:3c:87:c7:a7:b7:4a:28:b6:04:3a:
                    ea:db:ee:20:df:61:0b:95:2e:ba:19:a9:b2:b4:1f:
                    7c:9d:ac:27:48:1f:bf:14:5e:26:10:b8:51:7a:c6:
                    ed:30:75:b8:30:b8:cb:12:8b:0c:7a:90:61:aa:9a:
                    a3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:80:3F:BA:81:46:62:22:A6:98:32:B5:C6:81:12:8C:66:06:2F:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2aca9835-2362-3d49-9ba5-59ad5b0f72a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa4c::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:ee:74:fa:9d:7b:de:1e:85:29:31:61:1b:51:8d:a4:cd:5a:
         32:0c:8a:61:93:ce:51:f3:87:51:11:f4:ea:13:5c:c7:c9:92:
         72:0e:ff:28:be:98:da:5f:b7:0e:7e:d0:89:cf:aa:95:58:da:
         7f:a4:ba:4d:69:0f:8f:29:0d:e6:b3:e5:48:2d:00:07:19:15:
         15:bd:f1:81:02:6b:5d:7a:24:54:9a:03:c3:d9:61:40:bf:f9:
         4e:ab:91:47:98:2a:74:85:bf:31:47:99:62:a6:a0:0c:87:1a:
         a7:cd:38:19:26:3e:b1:27:bb:20:0d:c8:d5:39:d0:26:3d:ea:
         0e:2b:e5:92:8a:7c:3f:ac:0e:e2:aa:a5:89:9a:6c:57:5a:e3:
         5d:5e:e0:54:ea:61:eb:b2:46:fa:bd:df:9c:7f:ca:97:9c:78:
         58:6f:ad:7d:9b:8f:67:8e:26:3f:01:a1:df:07:7f:08:7d:94:
         e9:a7:57:d9:dc:f0:2f:09:12:fd:2b:d7:41:ad:34:2e:60:7c:
         cf:ae:c3:f9:f0:fb:6b:51:fd:c6:70:94:71:0d:5d:d7:c5:b9:
         a5:80:3e:da:48:46:4c:fb:35:51:44:d2:52:68:98:d2:9a:69:
         04:51:fc:e4:55:d6:a6:07:9c:9a:21:00:98:2b:34:cf:e8:74:
         54:40:60:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----