Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/197cb297-246d-3dcd-a263-7f612f5bb9ca.roa
File:                     197cb297-246d-3dcd-a263-7f612f5bb9ca.roa (raw, json)
Hash identifier:          VloQ9qPOsxD+pRARRMGKoZs7Oy0RtOdQQhFlj3321qY=
Subject key identifier:   E3:84:A9:3C:C4:9E:06:F7:5A:B1:71:F7:65:5F:8C:57:E4:30:84:D1
Certificate issuer:       /CN=9e36dcff-6526-450f-a9d4-367f2c2d4a7f
Certificate serial:       010D0C9F43285847B6B62AF32F23493BA5810B20
Authority key identifier: 84:F9:60:4D:69:2E:F4:73:8B:1B:24:A6:73:C0:85:78:58:DE:1B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/197cb297-246d-3dcd-a263-7f612f5bb9ca.roa
Signing time:             Wed 30 Oct 2024 14:04:07 +0000
ROA not before:           Wed 30 Oct 2024 14:04:07 +0000
ROA not after:            Tue 28 Jan 2025 15:04:07 +0000
asID:                     7764000
IP address blocks:        2602:fc3b:2010::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:b6:2a:f3:2f:23:49:3b:a5:81:0b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e36dcff-6526-450f-a9d4-367f2c2d4a7f
        Validity
            Not Before: Oct 30 14:04:07 2024 GMT
            Not After : Jan 28 15:04:07 2025 GMT
        Subject: CN=ca3c5b18-ccad-4f85-8565-fd559cd60492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d4:5d:df:26:4b:9b:a0:15:e3:8c:1f:35:61:
                    a0:12:65:a6:01:f3:92:15:e1:f1:fa:58:70:05:a4:
                    e3:52:88:65:f8:76:cc:61:ec:35:e6:ae:be:9e:f3:
                    76:24:6f:5e:07:6d:10:da:b2:a0:26:ba:ba:a2:df:
                    40:fd:7f:3a:57:a9:d1:56:3b:93:d6:ba:13:1d:14:
                    0f:89:74:28:33:d6:70:c4:44:92:ac:d7:e2:6f:8c:
                    73:3f:87:d0:88:a4:27:ae:7f:50:32:48:c3:fa:b6:
                    5a:d2:1c:3f:de:c4:56:60:1e:f1:a9:45:a1:7b:d4:
                    cb:66:df:ff:39:7e:89:1e:6e:81:39:a7:84:54:a8:
                    1b:df:0f:37:85:36:d5:46:e1:f5:de:4b:e1:db:0a:
                    61:c7:c5:60:67:f5:2a:63:26:f6:84:59:a0:cb:43:
                    28:eb:2e:90:f1:d4:c4:d7:72:c9:b6:1d:94:15:30:
                    5e:0b:59:77:c6:be:66:9c:66:a6:b0:7e:ee:94:0b:
                    a5:a9:e6:be:c5:bb:65:42:bd:7a:2d:3b:e6:e8:72:
                    8f:df:84:b0:5b:64:27:40:88:c6:3a:5d:43:a0:d0:
                    64:ae:8a:14:bb:50:a4:5f:3c:34:57:61:c5:a9:99:
                    9f:35:3a:32:51:46:49:01:f4:6b:2b:9f:5e:f9:dc:
                    f7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:84:A9:3C:C4:9E:06:F7:5A:B1:71:F7:65:5F:8C:57:E4:30:84:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/197cb297-246d-3dcd-a263-7f612f5bb9ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/9e36dcff-6526-450f-a9d4-367f2c2d4a7f.crl

            X509v3 Authority Key Identifier:
                keyid:84:F9:60:4D:69:2E:F4:73:8B:1B:24:A6:73:C0:85:78:58:DE:1B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:2010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:90:cc:7a:0b:d2:d6:ba:23:85:36:4b:40:a4:13:03:e1:ab:
         07:1c:c1:2b:90:df:d1:81:91:d0:78:2d:5f:de:c4:0c:ba:14:
         37:f3:6f:43:25:13:ab:24:05:88:f3:0a:18:03:7b:2f:61:e5:
         86:db:50:0f:8e:42:a2:ba:40:72:40:5f:c0:b6:4f:5f:da:20:
         ce:b1:c1:76:71:b9:b0:17:ac:65:e5:c9:16:cb:bc:62:43:6e:
         4a:14:29:81:da:25:81:26:3e:bc:32:97:41:76:9d:e0:8d:c6:
         81:e8:fa:c1:07:bb:a6:18:63:16:cc:10:28:d9:34:29:d2:4c:
         67:90:83:41:0a:0b:21:37:28:49:ad:3d:ed:57:6c:fc:68:32:
         a8:09:84:f9:13:98:f4:7b:9a:da:95:41:a2:e9:09:da:b8:1f:
         91:93:4e:7b:39:11:56:84:74:f5:af:0b:4d:25:39:47:ac:d7:
         ec:fa:f0:76:07:d0:d5:9a:02:2f:9d:e6:22:eb:74:51:5f:36:
         90:6e:f5:bc:b3:1e:27:3d:b8:63:81:de:92:fa:50:f4:da:40:
         2c:88:aa:d5:20:d7:d5:7c:de:40:81:97:c2:e7:a0:4b:ab:e2:
         bc:62:38:f1:b0:c6:c0:45:b4:ed:fb:b4:38:73:fb:50:ba:c8:
         0f:13:6f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----