Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/212b7173-baeb-33dd-9326-2a6b0e137290.roa
File:                     212b7173-baeb-33dd-9326-2a6b0e137290.roa (raw, json)
Hash identifier:          jCrWI+Y6Sed8oybzbo5116EzBX1PXJMepCgOTMTg5VY=
Subject key identifier:   8D:47:15:86:2E:0B:88:5B:3F:39:56:34:A9:F3:EC:19:4C:B7:46:91
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285848AF2B87A29F24A8D8E1252A80
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/212b7173-baeb-33dd-9326-2a6b0e137290.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     20253
IP address blocks:        2606:bc40:f201::/48 maxlen: 48
                          2606:bc40:f202::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:87:a2:9f:24:a8:d8:e1:25:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=4e96f15f-787b-4fb8-801e-7363750dc86c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:49:3b:a1:df:63:6a:5d:93:46:07:11:fa:2c:
                    35:db:10:b4:c1:58:75:4f:1e:d2:8d:50:33:1c:6e:
                    b2:da:dd:29:bb:8d:dd:28:85:0a:c3:7a:37:12:a6:
                    2b:89:90:9f:1c:46:18:87:54:32:7a:41:55:18:f8:
                    5f:08:4d:d6:fd:c2:a2:29:e0:42:79:35:11:6a:aa:
                    e6:f0:28:97:68:cf:65:06:83:8d:92:13:7b:28:f7:
                    1b:69:84:3f:48:58:ae:2b:a2:ee:1f:c3:10:08:0f:
                    fb:79:e7:79:ce:6a:d4:19:ee:4e:90:86:19:43:55:
                    b9:29:52:99:fc:a0:ee:d0:47:11:d7:5a:8f:56:bc:
                    0d:40:da:51:f3:a0:6b:7b:da:fc:3a:65:86:41:9d:
                    ea:ba:e7:54:71:30:af:37:9a:fe:9a:a7:dd:b1:0d:
                    20:6d:5d:21:da:22:88:2c:94:c2:47:63:16:e9:0f:
                    1c:93:bc:70:f7:44:45:e8:21:49:e5:17:50:c1:eb:
                    55:91:0b:36:4c:97:90:fe:84:fc:64:d0:7f:13:8a:
                    82:6b:0d:6e:98:d8:13:64:b0:a2:1b:33:84:52:c5:
                    f2:b5:27:44:e0:bd:df:ce:37:50:6e:ac:db:b4:a5:
                    d1:60:05:a1:72:c6:d8:d3:90:61:0b:c8:5e:e1:1d:
                    18:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:47:15:86:2E:0B:88:5B:3F:39:56:34:A9:F3:EC:19:4C:B7:46:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/212b7173-baeb-33dd-9326-2a6b0e137290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f201::-2606:bc40:f202:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:7c:53:76:06:55:a8:c6:1a:43:55:e6:43:63:b0:26:5f:5a:
         9a:7e:69:a1:cc:33:19:d9:b7:a5:5b:f8:6c:48:8e:e3:4f:e2:
         b1:f0:bd:0a:59:21:76:a9:9a:8f:3f:f8:34:69:ff:99:d1:7c:
         3f:ab:16:de:56:14:6a:1f:ff:03:db:a7:00:5f:8b:12:a1:8a:
         16:b9:21:7b:b5:01:ca:01:e6:a4:54:61:25:1b:b3:88:ef:32:
         f2:9e:af:a0:c2:0f:cc:26:24:48:ee:b1:07:06:19:19:26:8d:
         73:2e:7d:4e:30:d8:16:0e:2f:f1:57:92:2a:ce:eb:5d:5a:c9:
         55:50:41:b4:28:42:17:bb:54:1a:9e:8c:40:ac:6b:f5:24:a8:
         8c:c5:9b:b9:20:0f:4d:b1:f4:36:94:e6:8f:cc:5f:41:bc:67:
         e3:5c:ce:11:c6:c4:dd:ce:36:a1:95:bf:cb:7e:6e:da:98:32:
         ed:f7:9b:61:31:fd:9e:eb:b5:e0:d7:6c:f3:18:52:61:92:b7:
         78:db:f6:c3:55:3a:b5:9f:92:5b:65:23:c1:5e:8d:08:ef:76:
         50:e2:f6:23:8d:b7:84:f7:7f:a5:c9:6a:3c:86:cd:3d:9d:b6:
         54:8f:32:31:c0:61:b9:8c:c8:ba:12:44:41:2c:fa:ef:5d:29:
         84:e6:a2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----