Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/27a80d8a-e125-38cf-83e0-7b1d1e35101d.roa
File:                     27a80d8a-e125-38cf-83e0-7b1d1e35101d.roa (raw, json)
Hash identifier:          /cW026gd9w9WUcF5g+PzAxGMOgOweI1tpEwD5CvK1Dc=
Subject key identifier:   E6:1D:19:F8:AD:BA:7A:3B:CE:E0:4C:C1:D7:4D:D6:27:5B:1D:3D:C0
Certificate issuer:       /CN=f9962fb0-221d-459e-957d-b8a95fae9d35
Certificate serial:       010D0C9F4328584FCB611DDEE142C7D4FBABE040
Authority key identifier: A1:00:92:F7:EF:2A:12:4C:3B:96:13:F8:F7:22:E4:6D:B6:6B:E2:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/27a80d8a-e125-38cf-83e0-7b1d1e35101d.roa
Signing time:             Tue 10 Nov 2026 14:00:12 +0000
ROA not before:           Tue 10 Nov 2026 14:00:12 +0000
ROA not after:            Mon 08 Feb 2027 14:00:12 +0000
asID:                     402654
IP address blocks:        2602:f382:60::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:cb:61:1d:de:e1:42:c7:d4:fb:ab:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9962fb0-221d-459e-957d-b8a95fae9d35
        Validity
            Not Before: Nov 10 14:00:12 2026 GMT
            Not After : Feb  8 14:00:12 2027 GMT
        Subject: CN=b896e213-965c-4e1c-ad0b-68fb99872066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:9c:b7:7b:f0:55:29:22:c1:d3:76:ad:c4:
                    23:28:2b:c1:9e:38:f7:be:8d:12:50:58:06:af:9b:
                    41:1c:6a:c0:98:15:29:0c:ea:bc:cd:30:e3:ba:24:
                    b8:e6:06:55:2d:eb:20:6b:97:5e:ee:e8:48:54:cc:
                    be:cc:95:12:5e:45:f0:a8:03:4b:4e:28:2a:e1:c1:
                    4c:2b:c5:94:21:f0:26:8e:da:ee:fb:d0:89:e8:c1:
                    52:ba:14:a5:2c:a5:00:db:16:4e:be:56:8c:c2:28:
                    e4:27:ab:26:6f:61:11:7b:fd:88:6d:5f:25:09:13:
                    90:08:38:e0:99:0a:30:eb:46:fc:d3:af:bf:0f:f7:
                    2a:aa:c7:ab:35:7a:aa:ed:22:a4:6c:7e:76:e3:bc:
                    38:00:b3:86:d4:79:1e:7d:82:db:a8:10:49:d9:e3:
                    5f:fd:49:16:20:6a:a9:d9:cc:47:f0:f7:90:c2:54:
                    5f:a1:7f:a0:7a:e9:2a:27:52:d4:5c:37:01:7f:9a:
                    d2:a3:c3:c2:03:1b:0f:20:94:38:52:45:67:53:1d:
                    1c:dd:f2:c0:31:d8:06:3f:fa:eb:bb:00:6c:d9:0d:
                    2c:d8:e7:5e:af:8f:80:52:e4:2a:68:69:c4:14:bd:
                    91:43:31:41:81:6f:e8:ac:9f:ff:2b:89:9c:c9:ac:
                    5e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1D:19:F8:AD:BA:7A:3B:CE:E0:4C:C1:D7:4D:D6:27:5B:1D:3D:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/27a80d8a-e125-38cf-83e0-7b1d1e35101d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f9962fb0-221d-459e-957d-b8a95fae9d35.crl

            X509v3 Authority Key Identifier:
                keyid:A1:00:92:F7:EF:2A:12:4C:3B:96:13:F8:F7:22:E4:6D:B6:6B:E2:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f382:60::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:fa:1c:e7:ba:0f:d6:0a:e2:00:80:a6:18:76:d9:c8:f3:71:
         ee:a4:23:29:84:c1:37:77:a6:c7:bc:fa:e7:a0:3f:fd:ea:8a:
         3d:8d:1b:18:9a:5b:93:8b:3f:47:fa:77:2b:02:e7:ed:c4:97:
         cf:28:21:82:2c:12:5c:ad:fe:78:be:20:0f:4f:2a:8f:8a:23:
         70:2e:08:22:e2:1d:ad:2a:7c:a1:b2:16:2b:1c:24:09:27:05:
         47:b2:2a:8c:e7:78:93:94:df:e9:02:b1:1d:87:79:74:f2:25:
         c0:ac:6c:ab:32:af:b7:62:06:43:7c:ca:6c:ba:74:28:1e:3f:
         03:ce:ff:ea:ae:41:a3:38:55:f8:6d:e3:8d:01:50:d2:df:0d:
         df:ec:8d:fe:3a:b0:47:31:af:af:55:ad:e9:62:14:e0:c6:d3:
         a4:57:1c:f2:f0:90:c7:9a:49:62:7d:f1:83:bf:b0:35:29:89:
         f6:78:a2:83:24:65:91:0e:f8:00:0f:b6:74:1b:41:bb:19:91:
         66:5a:45:1b:5c:73:45:4a:a9:ff:a0:70:c8:6e:fb:83:09:7e:
         1b:17:ab:2d:6a:3b:0a:ba:91:86:40:29:c5:e3:76:e1:a6:c3:
         2d:35:57:e0:ac:bb:cf:01:dc:27:0c:58:37:65:e3:31:ae:ab:
         13:38:6b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----