Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/82ebb8ad-d75f-382a-9773-56e5a8f924f4.roa
File:                     82ebb8ad-d75f-382a-9773-56e5a8f924f4.roa (raw, json)
Hash identifier:          c6yw9tRedOaR/3k5akj4MjDP9s13domsq28sLgst2KI=
Subject key identifier:   7C:23:CA:B0:EF:14:A5:0F:1F:1F:4A:0F:06:9F:43:A8:41:DD:B1:0F
Certificate issuer:       /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
Certificate serial:       010D0C9F4328584908816B479A686C15065C2DD0
Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/82ebb8ad-d75f-382a-9773-56e5a8f924f4.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     6939
IP address blocks:        2606:7b00:3fff::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:6b:47:9a:68:6c:15:06:5c:2d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=770be70b-843c-4b6b-aae7-057dbffa5ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bd:52:d3:07:4d:e0:7d:0d:72:07:10:0a:9d:
                    a0:bb:cb:31:75:58:bd:18:43:bf:4b:b6:ea:81:1b:
                    73:0f:2d:43:f3:0b:79:54:1b:19:aa:c9:ee:3e:f4:
                    5d:1b:45:89:6b:e8:0c:36:b7:a3:3d:bc:cf:22:40:
                    f9:e4:fa:49:82:78:96:cf:b1:86:1c:98:2d:20:9f:
                    a0:e3:48:c1:e1:8d:35:ee:96:ab:d0:bc:c2:49:cd:
                    db:6e:bb:59:cd:ff:e2:71:19:86:c5:1f:82:06:58:
                    eb:44:54:c2:de:04:9f:43:cd:71:72:ee:1a:de:52:
                    f2:e5:34:3d:91:d6:22:d9:bc:13:db:e0:29:52:51:
                    14:d0:fa:32:98:43:71:14:ef:fa:cc:13:f8:08:46:
                    8f:84:3f:0d:da:f4:d6:64:81:75:73:8f:f4:85:24:
                    a0:9c:13:81:51:aa:0c:f3:3b:4c:7d:4a:e9:a3:03:
                    cb:4c:9d:2f:07:13:da:30:11:ba:35:d1:fe:a1:eb:
                    51:53:54:87:81:71:e2:19:d7:c4:c6:c4:9e:ca:95:
                    b9:42:31:c8:db:2e:0b:86:79:1f:b0:fa:2d:5c:98:
                    b8:d3:3e:62:79:13:4f:72:a4:37:b5:38:e1:11:ac:
                    88:90:69:96:a6:18:ef:01:1b:e0:2d:b1:d0:17:f8:
                    a3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:23:CA:B0:EF:14:A5:0F:1F:1F:4A:0F:06:9F:43:A8:41:DD:B1:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/82ebb8ad-d75f-382a-9773-56e5a8f924f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl

            X509v3 Authority Key Identifier:
                keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7b00:3fff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:78:70:c9:4e:19:e6:a4:db:25:0f:a4:2d:8b:69:70:bf:bb:
         d4:7b:cb:a3:14:06:b9:3c:53:8f:53:c8:bf:d3:c2:60:09:8b:
         45:9d:79:5b:00:51:81:7c:45:35:85:e6:56:1f:9f:86:33:40:
         11:57:9f:b3:c9:05:c4:99:82:c2:50:78:cc:72:48:66:fb:74:
         7b:47:11:6a:c6:5e:ce:c7:40:0b:f0:f2:77:c7:a0:e5:7e:22:
         3a:e6:cd:3f:fa:f6:b5:bf:f8:23:76:20:13:12:f2:e2:57:a4:
         58:55:49:e9:0f:94:64:d4:af:80:13:97:0e:e1:be:ec:2a:d2:
         31:7e:30:f5:55:0d:2b:ff:5f:bb:09:87:f0:c2:57:b0:aa:9d:
         86:7c:e3:cb:e1:ea:a3:fd:bc:bc:88:3d:9d:f9:b6:b9:84:2b:
         c1:16:fc:23:3b:cd:ca:5d:ba:9e:83:55:07:3e:e1:7f:ed:0f:
         38:6b:ec:7e:de:4c:4d:ae:2a:50:2c:13:33:2f:51:e8:04:3c:
         f8:d4:c9:b5:67:bd:30:ab:da:41:6d:c3:b1:29:16:d0:73:ed:
         50:90:ed:f9:2b:3e:0c:07:b0:67:e6:70:de:fa:e1:75:8b:bf:
         dd:23:88:d2:c9:eb:75:47:d8:81:34:6d:0d:59:23:ab:3f:d6:
         2e:e6:35:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----