Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/c6168787-7d08-31f9-b35a-9ad3afc43a5b.roa
File:                     c6168787-7d08-31f9-b35a-9ad3afc43a5b.roa (raw, json)
Hash identifier:          Z87B3riQvyHYuaP93lCFtT4VYa50Kk15Lu7MkZdQ7uE=
Subject key identifier:   C8:38:F2:A8:A3:96:C5:8D:79:3C:BA:1C:8C:77:6C:4B:9B:99:4D:13
Certificate issuer:       /CN=e45b2423-bd81-480e-93e3-8cc66e601340
Certificate serial:       010D0C9F43285847B73E3BA25B682E10AA7CE700
Authority key identifier: A0:90:AC:4B:5C:E6:B9:28:EB:28:02:80:A0:B8:02:3D:D7:26:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/c6168787-7d08-31f9-b35a-9ad3afc43a5b.roa
Signing time:             Wed 30 Oct 2024 18:38:16 +0000
ROA not before:           Wed 30 Oct 2024 18:38:16 +0000
ROA not after:            Tue 28 Jan 2025 19:38:16 +0000
asID:                     399970
IP address blocks:        2602:fc3b:2010::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b7:3e:3b:a2:5b:68:2e:10:aa:7c:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45b2423-bd81-480e-93e3-8cc66e601340
        Validity
            Not Before: Oct 30 18:38:16 2024 GMT
            Not After : Jan 28 19:38:16 2025 GMT
        Subject: CN=50b0618f-5b4a-46a7-ad1b-18d4ce459020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:3e:2b:aa:b6:b1:09:0b:21:34:c5:bb:1a:
                    0e:10:cf:b8:d3:41:27:89:5c:6d:2a:fc:8d:2e:86:
                    d8:57:00:fc:da:55:6e:d1:ae:52:57:8e:91:56:9b:
                    b9:fa:3c:d1:57:8d:69:35:47:99:9a:45:1a:09:3f:
                    c9:cd:42:0a:30:4f:e4:12:5d:c2:5e:0e:ab:06:95:
                    c0:81:cb:48:d8:13:fe:9a:60:04:3d:09:1a:f4:69:
                    0d:e8:35:7a:cd:11:de:6d:7c:2e:9c:cb:69:63:67:
                    68:23:ca:e5:5f:33:53:72:ec:3a:bb:89:f0:8f:50:
                    61:a5:91:90:d7:5a:eb:70:58:c5:fd:cf:88:a2:83:
                    d9:cb:9a:e8:2a:81:c4:91:1d:5f:c6:ea:75:47:64:
                    5c:30:c5:3b:cc:92:75:06:58:f2:be:13:ce:15:f9:
                    9b:78:cb:b4:f5:9d:44:fa:6f:d1:b3:d3:62:f6:5c:
                    04:14:95:27:0d:0e:37:9e:36:72:31:59:04:89:c4:
                    1f:a5:17:37:36:89:2f:c4:e1:15:08:a6:90:2f:e9:
                    c7:f7:b3:31:ce:e9:91:4d:0f:96:5e:fe:35:98:00:
                    cc:81:91:fd:31:71:17:58:98:5c:5a:d4:eb:e9:b1:
                    af:d4:62:2b:60:88:b4:92:86:bd:a0:88:37:76:94:
                    de:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:38:F2:A8:A3:96:C5:8D:79:3C:BA:1C:8C:77:6C:4B:9B:99:4D:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/c6168787-7d08-31f9-b35a-9ad3afc43a5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/e45b2423-bd81-480e-93e3-8cc66e601340.crl

            X509v3 Authority Key Identifier:
                keyid:A0:90:AC:4B:5C:E6:B9:28:EB:28:02:80:A0:B8:02:3D:D7:26:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:2010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d9:3b:b5:a1:86:70:3a:76:a7:10:21:4b:1b:35:f0:f6:36:
         22:36:69:dd:c0:c1:c2:73:41:6d:49:de:7e:73:b2:67:24:8a:
         9e:95:13:c4:f0:b8:58:b2:75:66:40:96:9d:14:ab:45:74:e4:
         8e:0e:f9:3b:ec:de:f3:6f:15:27:22:4c:ce:b7:f1:91:d3:eb:
         57:5f:73:b8:de:df:09:02:1b:5c:b2:91:4d:ba:60:49:31:f1:
         10:94:99:3e:46:1a:f9:da:74:7b:9b:2c:32:35:ae:90:18:b2:
         e8:26:a8:1b:b1:38:a5:31:a7:1c:57:e9:c4:b1:94:c5:bf:6d:
         f4:9b:46:0e:09:f1:d8:cd:25:60:9c:7a:2b:b8:e5:49:0c:af:
         92:08:fa:3c:d7:02:75:f2:a1:11:bc:52:c0:95:28:30:ce:bc:
         44:03:46:eb:8e:30:3f:2d:f3:9e:da:8b:48:5f:d0:50:8e:d3:
         bc:4d:13:d4:fe:21:cf:5a:4a:1d:06:1c:af:b6:1a:6c:41:46:
         6c:14:92:f6:bd:04:42:b4:14:1e:e0:48:95:60:d6:10:77:34:
         0e:b0:b6:fd:cd:82:30:b7:fb:b6:73:08:68:9b:bb:06:8f:45:
         16:37:5e:4f:d6:5a:e3:f3:36:4a:95:bf:ee:d6:4c:c1:fa:c1:
         c3:d1:a6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----