Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/ffad3f0d-df61-36b2-bf0b-ab3759c78ec0.roa
File:                     ffad3f0d-df61-36b2-bf0b-ab3759c78ec0.roa (raw, json)
Hash identifier:          g4GdI1cEYSdIvEjoqkAMuZ8bmeaFOnx/Xxjo25gV3BA=
Subject key identifier:   6B:74:35:74:66:8F:B5:21:12:D5:47:7E:4D:70:FE:B4:96:07:D8:61
Certificate issuer:       /CN=a4e67936-c857-487d-93df-2dff7fa79988
Certificate serial:       010D0C9F4328584FA42DDA832D498CA87C7FB540
Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/ffad3f0d-df61-36b2-bf0b-ab3759c78ec0.roa
Signing time:             Tue 27 Oct 2026 13:00:13 +0000
ROA not before:           Tue 27 Oct 2026 13:00:13 +0000
ROA not after:            Mon 25 Jan 2027 14:00:13 +0000
asID:                     19940
IP address blocks:        2606:8800::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a4:2d:da:83:2d:49:8c:a8:7c:7f:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988
        Validity
            Not Before: Oct 27 13:00:13 2026 GMT
            Not After : Jan 25 14:00:13 2027 GMT
        Subject: CN=6d808167-feaa-4407-a32b-79297dff3fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:47:5c:2a:5d:6c:52:8a:4d:7f:94:c0:fe:1b:
                    2d:6e:f0:a7:66:6c:8b:66:7c:37:2d:45:dd:7b:6e:
                    d6:fc:f3:03:2a:7f:85:fd:e2:91:e4:58:e2:30:fb:
                    c3:3c:5b:15:c6:18:f0:2d:23:17:4a:e7:1d:be:39:
                    c9:ca:7b:a7:8f:87:8a:ed:80:40:c0:01:f1:ec:07:
                    81:02:93:6d:68:aa:17:a1:f9:9d:30:ef:29:17:c9:
                    c9:d0:bc:48:0b:27:ea:6a:e9:55:ac:b2:c7:5c:71:
                    af:e6:f0:70:70:07:9a:b8:47:ba:b0:f1:ce:45:e3:
                    dc:eb:43:b3:e2:c5:26:3a:a8:23:36:03:06:99:8e:
                    95:9d:c8:c7:17:6b:42:d1:fb:3a:6d:b9:91:2f:00:
                    18:da:b8:fe:2c:cb:dd:b2:2c:e3:df:32:f6:a8:06:
                    a0:14:87:5a:2b:26:67:f9:56:79:92:3a:94:e6:56:
                    b0:85:d9:48:07:58:fd:7a:fc:3c:c7:90:fd:63:d5:
                    58:c7:21:37:21:dc:18:bd:86:62:2b:dd:f1:45:f4:
                    40:c2:f9:c8:59:37:9f:7a:97:30:1d:a5:8f:d0:a7:
                    40:62:64:a5:5f:1c:20:2b:fe:0c:ad:ed:d5:20:ca:
                    5d:8e:48:80:be:d3:94:15:56:f1:ec:a2:6d:f0:8d:
                    db:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:74:35:74:66:8F:B5:21:12:D5:47:7E:4D:70:FE:B4:96:07:D8:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/ffad3f0d-df61-36b2-bf0b-ab3759c78ec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl

            X509v3 Authority Key Identifier:
                keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:4e:ab:24:78:b5:a5:01:84:a0:2d:fa:08:b5:91:65:2a:d4:
         c1:4a:fa:e0:d8:7d:21:16:00:6d:9b:99:82:16:e1:4b:51:52:
         53:f8:4d:b5:ad:78:61:de:74:74:6c:1e:bb:3b:96:2e:76:84:
         4e:f8:fe:07:ff:5d:a3:99:5e:3a:8d:a0:1c:75:7c:c2:8c:db:
         cd:26:6f:e9:64:af:fd:77:a0:4f:a2:91:7b:8c:7e:43:0e:a5:
         67:e9:79:ed:64:22:1f:01:01:ab:6c:da:61:ab:a1:c1:4b:66:
         ab:7b:1d:38:56:3d:83:af:a1:c9:66:c0:c1:72:59:01:a1:dc:
         c7:e3:ce:64:54:59:e1:cc:30:3a:c5:ad:58:34:9e:7f:77:85:
         60:14:f3:f6:1c:f0:e0:ab:f3:d3:80:a3:d8:52:11:b8:9a:26:
         8b:c9:a6:68:d3:5f:b1:ae:a2:75:db:02:6c:ff:f0:98:00:d2:
         86:21:35:18:6f:c3:ad:dd:05:c9:a6:8e:25:b2:27:01:0e:08:
         c2:ae:aa:17:2d:56:ee:01:6a:c2:59:9e:f9:15:1b:3e:b1:b2:
         28:ff:a0:c6:62:38:74:f1:e1:08:f4:84:9c:25:7e:61:f2:3f:
         5b:24:10:b0:10:cd:1e:56:43:a2:8f:80:d3:11:27:87:d6:88:
         1b:cd:55:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----