Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/dfa2a4ef-89da-35ba-ab64-debb8f1d8c0c.roa
File:                     dfa2a4ef-89da-35ba-ab64-debb8f1d8c0c.roa (raw, json)
Hash identifier:          LmVECIiR0A/XizC+BQUJ718Z03C+On84AhEWBGjEVYE=
Subject key identifier:   42:FD:B7:ED:F2:1B:04:E9:97:56:79:D9:A8:53:2F:56:17:FB:B7:FC
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F432858488AE0A470CC07AA241DDC6E80
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/dfa2a4ef-89da-35ba-ab64-debb8f1d8c0c.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     2000
IP address blocks:        2602:fa2e:200::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:a4:70:cc:07:aa:24:1d:dc:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=95be700d-f8fd-4534-97f4-62cd34e23ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f2:9c:88:3f:7e:fb:12:21:62:ea:90:05:33:
                    6f:2f:68:3d:f9:76:0b:51:b4:a9:dc:6a:b2:28:ab:
                    f4:aa:24:95:dc:a5:68:e6:fd:ca:d6:f9:d4:9b:3a:
                    9a:e9:6c:9e:5a:5f:f6:75:36:5e:6e:9b:07:a0:af:
                    8f:c8:68:70:13:64:4d:f6:7d:19:01:4a:bf:5c:7c:
                    97:70:48:45:d4:d5:8c:03:4d:35:fa:ac:f9:89:6a:
                    bc:02:6c:41:c0:49:d0:c9:73:38:f7:a5:62:25:e3:
                    7e:23:39:bb:69:53:96:4c:8d:0e:0f:f6:46:64:25:
                    1b:06:d9:62:b0:89:62:aa:d3:c8:f9:f8:1b:67:22:
                    a4:cd:2a:e7:e4:75:e6:93:98:cd:14:0a:ba:94:fa:
                    ed:b4:97:d9:7e:1f:58:12:6b:cd:59:18:4e:47:23:
                    34:30:48:4e:b1:db:c2:db:1d:de:92:d8:58:e7:8b:
                    af:c8:82:47:f2:14:40:ae:da:b9:1c:56:54:59:5a:
                    68:9b:3d:d2:3b:64:ab:ba:96:c7:42:5f:4b:bf:38:
                    0f:72:f9:04:1d:41:3f:6a:6f:4f:51:d5:a7:09:3b:
                    2e:06:2d:d3:53:c8:3d:68:41:8e:79:b1:9c:1f:6a:
                    37:02:89:93:26:2f:dc:8a:b7:99:4b:0d:03:97:4d:
                    ad:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FD:B7:ED:F2:1B:04:E9:97:56:79:D9:A8:53:2F:56:17:FB:B7:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/dfa2a4ef-89da-35ba-ab64-debb8f1d8c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d7:78:4e:bf:f7:57:e4:b2:fc:cb:b7:c5:c7:8d:f7:6f:39:
         f4:d4:64:4f:6b:aa:91:f0:d4:bf:f4:29:a3:d2:68:1a:ba:de:
         0b:1b:2b:5a:aa:56:f7:16:56:4b:1f:7f:c8:92:c9:a5:00:0d:
         db:08:dc:2c:35:5d:f5:9b:f8:dd:4d:9a:7e:4e:6a:1f:ad:92:
         2a:74:32:75:f8:8f:8d:74:d6:47:e9:e8:c0:db:36:d2:f5:72:
         a6:34:1e:71:84:b9:87:f0:47:11:1b:3f:13:8b:53:06:54:e6:
         95:f7:95:a2:3e:49:14:7b:42:51:a8:7f:5f:dd:c0:70:c0:51:
         f0:f0:4f:c8:84:96:7f:28:46:ef:a4:8f:6f:98:e8:61:3e:92:
         0b:ae:f1:68:ff:11:2e:37:3c:59:5a:c2:0e:21:45:39:e2:73:
         71:7a:62:35:e4:6e:70:46:31:e8:13:a4:6c:9d:ca:eb:97:ac:
         d6:f1:2c:20:39:66:78:bd:76:5d:8d:89:94:e4:68:3a:45:5b:
         9e:c0:f1:e4:7c:cc:82:ef:13:c4:8a:2d:78:92:b3:69:95:2b:
         8c:32:0b:cc:fc:6b:77:29:88:e1:84:da:af:a3:06:3d:b4:2b:
         2a:f1:38:31:b8:a4:ac:bf:91:2c:10:e4:fe:76:0e:24:ef:df:
         72:8b:e9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----