Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/998c7a78-f332-37f8-b53c-b7e6b9cc8536.roa
File:                     998c7a78-f332-37f8-b53c-b7e6b9cc8536.roa (raw, json)
Hash identifier:          sj5Vkl7Wbv2Tmq81UODKTpsItTIN6s60CZCfJgtcDYE=
Subject key identifier:   D3:EA:DE:84:8D:20:FB:A6:DA:4C:4F:0E:C4:26:40:AE:9C:7D:7D:25
Certificate issuer:       /CN=be206701-373a-467b-8de3-29a82f348469
Certificate serial:       010D0C9F432858487E50688E82AEDE9804CE1A40
Authority key identifier: 95:A7:1D:64:F6:31:39:42:29:FA:63:D8:E5:7F:B7:EB:C8:0A:92:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/998c7a78-f332-37f8-b53c-b7e6b9cc8536.roa
Signing time:             Fri 10 Jan 2025 02:00:40 +0000
ROA not before:           Fri 10 Jan 2025 02:00:40 +0000
ROA not after:            Thu 10 Apr 2025 01:00:40 +0000
asID:                     62605
IP address blocks:        2607:c940::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7e:50:68:8e:82:ae:de:98:04:ce:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be206701-373a-467b-8de3-29a82f348469
        Validity
            Not Before: Jan 10 02:00:40 2025 GMT
            Not After : Apr 10 01:00:40 2025 GMT
        Subject: CN=4c223e86-973c-4239-a9f8-23e476ba8f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:02:b6:a2:e8:bd:55:19:14:8b:3a:de:fa:70:
                    c6:99:0f:b8:d3:5f:94:b4:98:bc:f1:88:d7:31:d3:
                    63:82:54:cd:b8:b0:22:f5:0f:f5:85:40:4d:bc:4f:
                    90:7d:a5:7a:c1:4a:1c:0b:74:42:c5:6d:88:d8:96:
                    2c:be:57:38:a4:69:09:e4:7b:9f:ec:a6:af:5e:55:
                    ed:71:ae:3d:08:97:6b:f2:28:f4:c3:20:c2:7b:35:
                    4a:4a:23:c2:4e:1e:de:c3:1d:da:36:e5:1c:53:65:
                    eb:6f:92:58:23:1b:29:c6:c5:76:b9:9a:23:51:a8:
                    fa:76:1d:de:49:15:fd:49:d6:e6:61:de:c9:bf:f5:
                    51:da:73:87:63:ef:6d:c1:3f:87:04:88:44:2b:91:
                    3f:0c:a7:ad:15:ad:3c:7c:6c:d3:93:81:2d:97:9a:
                    8a:9c:ab:8c:98:4a:ee:f4:b3:64:49:ae:ce:a6:ba:
                    91:04:bf:2e:53:a5:17:0e:74:90:d3:4b:01:25:75:
                    38:6f:8d:10:27:d6:68:df:3f:d1:25:d8:3d:61:f7:
                    fa:5c:7b:e1:bb:9a:36:a1:d1:d8:3f:24:a8:77:34:
                    8c:88:0a:d5:63:5b:59:dc:19:a7:02:bb:e6:2e:f6:
                    f2:4a:ac:ed:f7:be:28:df:6f:e3:44:df:7b:5e:9e:
                    d5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EA:DE:84:8D:20:FB:A6:DA:4C:4F:0E:C4:26:40:AE:9C:7D:7D:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/998c7a78-f332-37f8-b53c-b7e6b9cc8536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/be206701-373a-467b-8de3-29a82f348469.crl

            X509v3 Authority Key Identifier:
                keyid:95:A7:1D:64:F6:31:39:42:29:FA:63:D8:E5:7F:B7:EB:C8:0A:92:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:c3:c7:31:ad:62:af:e9:64:f1:a5:a1:ce:d1:79:75:c0:21:
         3e:1c:58:84:85:fa:a0:c0:e1:84:6d:84:19:75:ad:78:c0:ea:
         a0:a7:94:95:ce:7f:33:21:4b:b7:0e:d4:25:de:c6:89:3f:b9:
         34:41:c8:d8:e4:92:88:41:d1:c1:53:d0:a7:bf:9b:8c:9f:61:
         2d:44:87:32:64:27:78:e0:b9:73:b4:9a:70:ae:cd:91:fa:b3:
         b3:99:90:f4:6c:57:0f:81:72:8a:eb:67:3b:38:43:5e:93:77:
         6a:c3:6c:7b:7e:79:6d:b8:a6:f5:bd:13:bc:db:53:35:70:45:
         ff:85:d8:59:4f:d4:f2:c4:4a:aa:31:1e:17:84:40:d2:ff:09:
         1f:bb:79:72:5a:7d:ed:8e:72:6c:1c:15:4b:92:29:24:40:69:
         a4:56:26:87:be:d6:f1:fe:9c:a5:96:29:7a:75:3b:60:63:d4:
         2c:aa:25:fb:c9:1d:64:7b:12:e9:39:de:e8:72:7d:f7:c2:96:
         7f:0a:41:ca:bb:8a:6f:c6:c3:26:36:4f:57:26:64:4b:60:7e:
         2a:90:47:16:fa:2f:01:6b:1d:01:05:88:a6:f5:06:ad:5b:d9:
         97:e2:2d:02:c5:27:11:24:93:b5:1c:07:dd:56:64:a3:91:57:
         6b:66:d9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----