Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/2f54aa0b-708e-32bc-ad5b-da33179b6aa9.roa
File:                     2f54aa0b-708e-32bc-ad5b-da33179b6aa9.roa (raw, json)
Hash identifier:          qbIPbIzBlSrR/8p8mcjuqB4nSZL6GJ5g09y1yT24aco=
Subject key identifier:   43:69:BD:08:84:81:0C:A4:42:2D:B0:B4:F0:54:A3:D3:42:76:63:31
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584940397CAC650EC1C6C64300C0
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/2f54aa0b-708e-32bc-ad5b-da33179b6aa9.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     26506
IP address blocks:        2607:f4e8:ac2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:7c:ac:65:0e:c1:c6:c6:43:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=5105678d-e112-4f1d-a5bc-dde11d2cb950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:51:eb:80:ef:7c:dd:36:67:4c:c5:ae:ac:90:
                    e6:ab:87:7f:6d:ab:2e:c8:3e:da:3c:a5:b3:7f:3d:
                    20:84:88:36:53:c8:ad:e7:b2:1c:30:10:b5:19:7c:
                    91:f0:c4:d8:63:c5:22:30:96:41:34:41:b8:31:5f:
                    50:ba:79:4b:7a:ae:2e:71:6e:3b:49:a1:1f:0b:38:
                    bc:c8:b2:f8:b5:4f:d1:b0:12:e3:15:bf:34:2d:64:
                    f3:0b:1a:54:17:7a:9f:c5:de:12:5e:14:b6:69:e4:
                    8d:bb:e0:29:b7:6d:cc:02:be:4f:e6:0c:fb:7f:ec:
                    2c:44:1e:f2:5d:25:fb:09:82:33:d3:d9:78:39:be:
                    3d:d8:be:a3:88:ec:9d:8e:dc:50:d2:ea:55:0d:29:
                    ea:89:32:d9:a3:c1:c5:48:f0:66:e2:71:49:dd:0f:
                    0b:4c:fd:31:57:ed:4b:51:7a:7c:40:d6:2a:d1:40:
                    35:66:e1:30:de:1f:88:96:6c:48:28:39:ef:6f:08:
                    5b:36:bf:5c:cb:5a:df:2a:50:58:0a:f3:4d:00:aa:
                    60:17:0b:bb:90:31:d0:ab:61:a9:6f:85:bf:8d:67:
                    3e:f0:39:38:e5:d7:bc:79:2b:2c:aa:88:50:2b:e1:
                    54:b1:c8:ec:e5:54:70:5d:69:84:10:8a:fe:77:e1:
                    e9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:69:BD:08:84:81:0C:A4:42:2D:B0:B4:F0:54:A3:D3:42:76:63:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/2f54aa0b-708e-32bc-ad5b-da33179b6aa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4e8:ac2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:2d:67:70:9e:d1:c0:1f:f1:93:53:89:96:ec:bd:38:16:f0:
         83:69:56:95:e2:11:d0:af:96:28:0d:e6:29:81:1e:6a:69:b8:
         bc:e2:ce:94:d1:c7:69:21:a8:f9:ce:65:d1:f6:19:de:6d:38:
         5e:5d:9a:1f:c7:27:8b:fc:e6:2d:cb:bc:9b:e7:58:85:d4:bd:
         90:da:ce:78:3d:87:92:1f:75:46:ab:b7:78:6a:a1:99:8b:77:
         c4:d1:16:40:40:1f:13:d7:79:3c:c5:c9:4e:ff:2e:c5:d2:1e:
         7e:93:19:a3:5e:05:05:ba:3b:31:9f:23:60:b6:d8:10:b1:96:
         f5:c8:88:39:9c:36:47:fd:1d:ed:ea:95:16:3f:ec:37:f5:b8:
         c6:f9:ec:20:4f:3e:0b:e3:1f:f0:13:ea:61:5d:d4:a1:e7:4b:
         4d:7d:8b:6b:9d:dd:85:45:55:0a:ca:b7:13:9d:fb:26:cc:6a:
         e3:12:aa:e1:6a:b5:47:83:22:69:1a:86:16:52:f3:89:18:3c:
         a3:cd:42:34:2b:67:2c:7d:d8:0b:e1:98:5f:a9:d5:10:4c:33:
         bb:81:d4:a9:37:36:0d:b3:67:2a:80:80:2a:97:2e:59:ae:39:
         9e:0a:c9:32:cf:f0:eb:8e:07:e1:6a:ad:04:ee:88:c3:a1:4b:
         b5:b0:d0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----