Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/ecb54580-5abc-3eea-8a4f-14d2a5154d6f.roa
File:                     ecb54580-5abc-3eea-8a4f-14d2a5154d6f.roa (raw, json)
Hash identifier:          /5GqcoBgg/MA8LTNV09UodOoSqqDX6vjc+GU/PDZgTw=
Subject key identifier:   F9:FE:8E:60:53:28:F7:05:39:BA:C7:1F:2A:B3:46:0F:CE:12:67:E8
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584940397B3E74A07FD667C7BC40
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/ecb54580-5abc-3eea-8a4f-14d2a5154d6f.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     45396
IP address blocks:        2607:f4e8:ac2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:7b:3e:74:a0:7f:d6:67:c7:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=b08c8e80-8aa5-4acd-a685-8cb0d487d39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5d:9b:c5:ab:22:47:f5:ba:43:c1:a9:b5:ba:
                    1f:62:2d:44:38:31:d1:7a:38:bc:88:ef:8b:f8:3d:
                    54:c8:27:82:34:4b:9e:62:4c:c6:f1:b3:ec:01:a4:
                    39:ed:af:91:c3:82:c9:df:49:17:02:40:ab:93:93:
                    bf:7c:fa:48:bf:3e:96:15:f3:31:01:f9:67:36:0e:
                    1d:85:dd:5d:10:8f:1b:41:9f:38:4d:0d:f1:c0:5c:
                    78:7c:b9:9d:68:ac:1d:64:c8:7a:da:02:2f:79:4b:
                    71:98:ae:a8:ff:91:6f:bb:79:46:a7:fc:dc:87:bc:
                    62:cf:14:61:70:8a:0e:fb:c5:0f:4d:b3:ac:13:6d:
                    fa:68:2e:43:15:88:8c:4a:64:4d:f4:7c:6c:eb:78:
                    68:28:fd:da:86:ee:fa:56:48:1f:68:23:dd:9b:33:
                    e8:78:d6:6a:29:c3:c8:13:37:83:cc:29:ec:88:78:
                    d9:ce:12:de:50:65:e7:10:d4:14:ef:d4:71:47:e5:
                    5e:9c:a6:84:90:ae:c4:48:05:b1:e3:8b:4f:4d:4a:
                    63:a3:ce:1a:51:cb:8e:25:44:d1:d8:f0:51:f5:6a:
                    55:09:b5:7d:1a:8c:1a:3f:b8:27:e1:29:9e:97:7d:
                    aa:6e:e5:5c:89:c9:ff:15:38:6f:94:19:51:2c:e7:
                    52:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FE:8E:60:53:28:F7:05:39:BA:C7:1F:2A:B3:46:0F:CE:12:67:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/ecb54580-5abc-3eea-8a4f-14d2a5154d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4e8:ac2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ce:0c:24:96:dd:c0:ef:51:ea:0a:af:d6:37:b5:46:d3:6e:
         f5:f7:db:c0:3b:fb:50:fa:7e:93:0c:88:8d:91:2a:ff:49:98:
         4a:75:3e:1e:7a:4a:64:39:e2:25:ba:12:09:fb:f1:f2:67:67:
         54:24:7d:b6:bd:2f:5c:b0:31:34:b0:b6:e9:9b:a2:7a:27:b5:
         c5:cd:1a:03:ad:1e:c6:be:4e:08:88:7e:05:de:20:15:48:99:
         4b:1f:62:5c:ec:06:24:83:ad:0e:e3:e9:f6:c0:28:37:58:3d:
         b9:f4:0d:13:64:10:a3:a7:eb:70:03:71:5e:e9:a2:b5:8d:49:
         32:49:89:9a:eb:9d:c7:77:ec:31:c7:34:c2:56:81:3d:ab:ec:
         57:75:25:5f:da:4e:ea:85:a3:cc:20:df:9a:68:a6:19:a6:4a:
         ae:78:81:a2:78:cd:00:8e:19:de:68:9d:58:28:ad:01:6c:16:
         1f:56:1e:05:b4:78:32:33:32:b7:ab:b5:67:55:43:37:6c:2d:
         1d:8d:41:e5:ec:04:36:2f:07:b0:e1:12:13:38:09:92:b6:1e:
         2e:95:c1:ad:02:70:2b:06:0d:20:10:db:d2:28:92:21:42:2b:
         7f:44:67:6f:18:94:89:f8:d7:ee:f0:a2:4a:7f:bd:51:54:b8:
         9c:39:98:fb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOXs+dKB/1mfHvEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw
MDdjMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
YjA4YzhlODAtOGFhNS00YWNkLWE2ODUtOGNiMGQ0ODdkMzlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx12bxasiR/W6Q8GptbofYi1EODHReji8iO+L
+D1UyCeCNEueYkzG8bPsAaQ57a+Rw4LJ30kXAkCrk5O/fPpIvz6WFfMxAflnNg4d
hd1dEI8bQZ84TQ3xwFx4fLmdaKwdZMh62gIveUtxmK6o/5Fvu3lGp/zch7xizxRh
cIoO+8UPTbOsE236aC5DFYiMSmRN9Hxs63hoKP3ahu76VkgfaCPdmzPoeNZqKcPI
EzeDzCnsiHjZzhLeUGXnENQU79RxR+VenKaEkK7ESAWx44tPTUpjo84aUcuOJUTR
2PBR9WpVCbV9GowaP7gn4Smel32qbuVcicn/FThvlBlRLOdSWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPn+jmBTKPcFObrHHyqzRg/OEmfoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2
OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvZWNiNTQ1ODAtNWFiYy0z
ZWVhLThhNGYtMTRkMmE1MTU0ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk
MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk
MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0
ZjFmZDAwN2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf06ArC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACDODCSW3cDvUeoKr9Y3tUbTbvX328A7+1D6fpMMiI2RKv9JmEp1
Ph56SmQ54iW6Egn78fJnZ1Qkfba9L1ywMTSwtumbonontcXNGgOtHsa+TgiIfgXe
IBVImUsfYlzsBiSDrQ7j6fbAKDdYPbn0DRNkEKOn63ADcV7porWNSTJJiZrrncd3
7DHHNMJWgT2r7Fd1JV/aTuqFo8wg35pophmmSq54gaJ4zQCOGd5onVgorQFsFh9W
HgW0eDIzMrertWdVQzdsLR2NQeXsBDYvB7DhEhM4CZK2Hi6Vwa0CcCsGDSAQ29Io
kiFCK39EZ28YlIn41+7wokp/vVFUuJw5mPs=
-----END CERTIFICATE-----