Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/020bd06a-b3dc-4d29-a79f-95b698c161c3/0f80b734-f4b4-337c-a248-034b30a6cbf6.roa
File:                     0f80b734-f4b4-337c-a248-034b30a6cbf6.roa (raw, json)
Hash identifier:          qVvpBPwUM8gahCNR8xH3/cajR6e356M7cOC1RoauWiI=
Subject key identifier:   17:4C:B5:7C:D0:0A:EC:43:81:01:6A:58:D5:5B:96:84:E6:D4:36:62
Certificate issuer:       /CN=020bd06a-b3dc-4d29-a79f-95b698c161c3
Certificate serial:       010D0C9F4328584596DF23968DD7656EDD3B0C00
Authority key identifier: 20:E2:49:61:BD:F2:DD:48:7E:FA:95:5B:E5:10:C9:4E:03:EF:6A:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/020bd06a-b3dc-4d29-a79f-95b698c161c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/020bd06a-b3dc-4d29-a79f-95b698c161c3/0f80b734-f4b4-337c-a248-034b30a6cbf6.roa
Signing time:             Thu 18 Apr 2024 18:46:55 +0000
ROA not before:           Thu 18 Apr 2024 18:46:55 +0000
ROA not after:            Wed 17 Jul 2024 18:46:55 +0000
asID:                     399970
IP address blocks:        2620:63:a000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:df:23:96:8d:d7:65:6e:dd:3b:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020bd06a-b3dc-4d29-a79f-95b698c161c3
        Validity
            Not Before: Apr 18 18:46:55 2024 GMT
            Not After : Jul 17 18:46:55 2024 GMT
        Subject: CN=b8a6eb90-b975-4430-8d46-1437a09683d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:17:0c:84:86:c5:36:7d:ae:15:47:44:d8:ec:
                    28:ae:12:ca:20:a6:b7:79:45:1d:1c:52:8e:2f:fb:
                    6c:0f:88:8b:06:6f:fe:2e:c2:38:7f:67:53:27:99:
                    c6:90:74:6a:61:ba:13:ad:2f:ac:5c:46:84:51:91:
                    9a:aa:a8:e5:4a:e8:74:e9:a7:0f:ec:f7:e9:fb:a8:
                    4d:89:f6:83:a8:10:89:80:63:d0:cb:64:86:07:d3:
                    4a:cf:c5:a9:f5:3c:10:e6:c4:e2:b6:41:93:a3:58:
                    b4:4b:b4:85:15:52:67:d1:29:80:fe:fd:3a:7d:61:
                    8c:b9:1a:a4:04:47:f1:1a:29:2e:85:72:ca:3f:a5:
                    15:63:dd:dd:75:8d:78:32:b6:82:b9:81:cf:4a:77:
                    45:e4:32:a5:53:6f:78:9f:a5:6a:5e:a4:a3:df:65:
                    b7:ac:a1:a8:e3:6e:df:11:46:9f:18:49:5a:e0:54:
                    22:67:11:ff:1b:76:28:29:15:87:4f:e5:8a:8b:4e:
                    45:11:f3:50:08:9b:4c:47:ab:b2:4d:b9:3c:cc:c2:
                    7e:97:20:b7:3b:a5:71:a3:43:51:44:20:f5:9f:6e:
                    e4:8e:7c:bc:5c:92:13:46:34:f1:16:51:c8:c2:dd:
                    0e:11:74:94:2e:50:7d:d1:8c:c0:06:22:62:f5:d9:
                    18:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4C:B5:7C:D0:0A:EC:43:81:01:6A:58:D5:5B:96:84:E6:D4:36:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/020bd06a-b3dc-4d29-a79f-95b698c161c3/0f80b734-f4b4-337c-a248-034b30a6cbf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/020bd06a-b3dc-4d29-a79f-95b698c161c3/020bd06a-b3dc-4d29-a79f-95b698c161c3.crl

            X509v3 Authority Key Identifier:
                keyid:20:E2:49:61:BD:F2:DD:48:7E:FA:95:5B:E5:10:C9:4E:03:EF:6A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/020bd06a-b3dc-4d29-a79f-95b698c161c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:63:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:71:96:cb:ef:d3:a0:c0:b3:e8:d2:46:0a:b5:a9:f5:fb:fc:
         0e:83:84:bb:8a:a4:b1:fe:2d:c8:92:3b:b6:6f:d0:fb:bd:8d:
         a0:f7:ff:82:28:83:08:d9:ba:1c:3d:1a:97:e5:00:67:6a:84:
         34:61:fc:24:b0:58:60:76:a6:18:c7:85:24:43:82:de:7f:e2:
         c4:02:e9:3a:ec:d7:14:60:c3:7f:a1:c8:4d:25:68:9c:63:ad:
         01:da:ae:81:ca:5e:28:90:7c:bd:6e:5b:0a:f4:a4:3c:1f:b5:
         21:4b:19:52:1d:b1:44:11:a6:ae:73:46:16:85:72:8e:04:b5:
         ee:e7:c0:15:5e:da:83:09:01:70:59:ee:50:b3:df:a1:74:c1:
         e2:a4:ab:6f:90:3e:2d:28:5b:8b:d2:2d:35:2b:d1:61:fc:3b:
         b8:b1:7b:cb:38:ac:f5:44:f7:ed:88:d5:73:13:9d:1d:f4:13:
         85:fa:40:e2:d6:b4:8a:8f:39:6b:26:97:08:40:49:d7:37:6b:
         e3:86:f5:47:10:c5:1d:d0:8c:8f:06:83:05:cf:13:0c:c8:ab:
         f9:5f:69:7e:75:6a:d3:9d:24:c2:66:37:ea:0d:eb:9d:53:cc:
         80:27:11:e5:29:e2:f4:00:c6:b9:b7:b7:6f:89:4d:53:c0:91:
         01:77:02:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----