Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/0875ee4e-2dcd-3aa8-9e70-670392f1096d.roa
File:                     0875ee4e-2dcd-3aa8-9e70-670392f1096d.roa (raw, json)
Hash identifier:          wXCijlD5XiKV5M4EtvaQmLCK6cVvHJfW4L5SNBwUzUg=
Subject key identifier:   55:66:99:7C:FF:04:4F:0C:29:6E:4A:BC:AD:61:7A:D4:02:11:2B:CC
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F43285848DC54FF4BA5F8265D310B5180
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/0875ee4e-2dcd-3aa8-9e70-670392f1096d.roa
Signing time:             Wed 12 Feb 2025 18:15:59 +0000
ROA not before:           Wed 12 Feb 2025 18:15:59 +0000
ROA not after:            Tue 13 May 2025 17:15:59 +0000
asID:                     212780
IP address blocks:        2607:ffd8:ff01::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dc:54:ff:4b:a5:f8:26:5d:31:0b:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Feb 12 18:15:59 2025 GMT
            Not After : May 13 17:15:59 2025 GMT
        Subject: CN=ba45f08b-a43c-4e5b-9c2a-c13ae5526d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e0:27:23:0e:3e:29:1f:99:eb:0a:84:63:c0:
                    a9:54:c4:b2:57:63:4a:b7:0d:eb:02:93:40:89:4b:
                    5f:6b:2f:b3:f8:fe:a4:b5:8c:92:f5:a5:fb:e8:2a:
                    f3:5d:a6:96:e6:8c:03:bd:27:ad:7d:2e:57:ea:fb:
                    31:de:ff:1e:32:a3:4a:e1:5f:28:d3:f2:6c:65:82:
                    17:42:ec:eb:6e:9b:4c:cf:79:b4:53:5a:30:1c:0e:
                    5d:d4:1f:18:ec:93:f2:1a:0e:15:20:ef:77:b2:07:
                    06:9f:c3:0e:12:18:7b:5e:5a:35:f7:1b:d4:0e:85:
                    f1:28:64:8a:ba:f2:43:98:ac:bc:01:55:bc:1a:75:
                    e9:e5:da:91:cb:40:29:0a:13:51:ee:9a:f8:2d:d7:
                    9c:c8:16:a2:77:a6:12:2a:27:38:9b:35:e9:8a:00:
                    be:51:37:20:da:7f:02:b0:5c:24:4c:ad:b1:d5:68:
                    c6:6b:33:39:a1:29:69:f6:b5:98:8f:f0:49:3a:5b:
                    f0:2f:cc:e2:4d:42:27:f2:83:ba:77:98:8b:64:39:
                    36:62:51:2f:08:67:39:0a:2e:ae:71:a3:34:b2:0a:
                    92:f6:36:57:d9:bc:93:65:05:6e:7c:28:4f:7a:db:
                    ac:4d:e6:e4:9f:ca:43:f0:cc:04:bc:d3:92:93:98:
                    c7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:66:99:7C:FF:04:4F:0C:29:6E:4A:BC:AD:61:7A:D4:02:11:2B:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/0875ee4e-2dcd-3aa8-9e70-670392f1096d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ffd8:ff01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:46:5d:11:06:3d:1c:db:7c:c4:8f:e1:55:a2:c8:e6:d4:8e:
         69:dd:58:9d:e8:10:0f:6c:4f:4f:2f:05:8a:fd:ef:3f:bf:c2:
         8f:be:0c:5e:da:17:c9:ff:43:a3:b5:e9:31:52:07:3e:7c:4f:
         e4:2d:e7:2d:75:95:a6:1e:e9:c9:b7:f8:89:30:78:a8:d5:18:
         32:5a:d0:ac:5f:3a:79:af:db:99:e4:ca:60:fb:7b:24:55:a2:
         65:6d:26:90:a5:27:67:8f:93:6c:3b:86:83:22:b8:15:a5:c2:
         36:9d:4b:0a:62:03:a9:f9:b1:20:ea:97:70:c3:3f:4a:bf:93:
         93:ab:90:77:69:fe:48:e0:46:f3:aa:60:e0:6e:63:57:2f:dd:
         02:56:61:92:05:1f:cb:f7:1a:28:b8:73:1d:b0:4c:65:4e:be:
         61:51:03:c1:2f:24:c5:ec:81:ce:d5:aa:a0:55:40:af:d7:0c:
         01:00:a5:36:e4:22:aa:3f:c8:58:2f:15:fb:9b:74:99:d0:ec:
         b6:bc:d3:39:39:94:95:7a:19:f6:6d:59:e9:55:b9:63:72:46:
         f3:07:b7:ac:84:b9:c1:5c:43:fb:b6:c2:5d:53:06:57:58:43:
         25:34:2e:ee:0e:d5:09:d9:a4:b6:76:a4:96:56:f8:0c:a7:c5:
         06:de:3c:5b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjcVP9LpfgmXTELUYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0
Mzg4MB4XDTI1MDIxMjE4MTU1OVoXDTI1MDUxMzE3MTU1OVowLzEtMCsGA1UEAxMk
YmE0NWYwOGItYTQzYy00ZTViLTljMmEtYzEzYWU1NTI2ZDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+AnIw4+KR+Z6wqEY8CpVMSyV2NKtw3rApNA
iUtfay+z+P6ktYyS9aX76CrzXaaW5owDvSetfS5X6vsx3v8eMqNK4V8o0/JsZYIX
QuzrbptMz3m0U1owHA5d1B8Y7JPyGg4VIO93sgcGn8MOEhh7Xlo19xvUDoXxKGSK
uvJDmKy8AVW8GnXp5dqRy0ApChNR7pr4LdecyBaid6YSKic4mzXpigC+UTcg2n8C
sFwkTK2x1WjGazM5oSlp9rWYj/BJOlvwL8ziTUIn8oO6d5iLZDk2YlEvCGc5Ci6u
caM0sgqS9jZX2byTZQVufChPetusTebkn8pD8MwEvNOSk5jHCwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFVmmXz/BE8MKW5KvK1hetQCESvMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl
YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvMDg3NWVlNGUtMmRjZC0z
YWE4LTllNzAtNjcwMzkyZjEwOTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm
NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4
NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi
N2Q4ODQzODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf/2P8B
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGtGXREGPRzbfMSP4VWiyObUjmndWJ3oEA9sT08vBYr97z+/wo++
DF7aF8n/Q6O16TFSBz58T+Qt5y11laYe6cm3+IkweKjVGDJa0KxfOnmv25nkymD7
eyRVomVtJpClJ2ePk2w7hoMiuBWlwjadSwpiA6n5sSDql3DDP0q/k5OrkHdp/kjg
RvOqYOBuY1cv3QJWYZIFH8v3Gii4cx2wTGVOvmFRA8EvJMXsgc7VqqBVQK/XDAEA
pTbkIqo/yFgvFfubdJnQ7La80zk5lJV6GfZtWelVuWNyRvMHt6yEucFcQ/u2wl1T
BldYQyU0Lu4O1QnZpLZ2pJZW+AynxQbePFs=
-----END CERTIFICATE-----