Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/0e66e1a0-d526-33c0-8259-90113fc406d1.roa
File:                     0e66e1a0-d526-33c0-8259-90113fc406d1.roa (raw, json)
Hash identifier:          8rQdOvo/1ZKgLeotSxQI17IEUaN6/EeJfsf9WufqeOs=
Subject key identifier:   84:E8:C6:F6:82:AD:79:D4:94:CE:30:75:92:43:E3:F0:D2:E8:4F:82
Certificate issuer:       /CN=9d987b62-9839-4512-aad7-9f5b9ce600c6
Certificate serial:       010D0C9F4328584913AC390B788F9E948976E400
Authority key identifier: 55:EC:CB:74:8A:57:AC:5C:1B:9F:F0:4F:E4:4F:28:55:E3:0F:E4:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/0e66e1a0-d526-33c0-8259-90113fc406d1.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     138997
IP address blocks:        2602:fada::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:39:0b:78:8f:9e:94:89:76:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d987b62-9839-4512-aad7-9f5b9ce600c6
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=2c8059c2-393e-4ae6-a27d-68d951651cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:49:84:e5:9e:64:0f:2e:de:6e:dc:f0:88:eb:
                    83:80:3a:a5:1c:f3:38:0d:76:56:3f:d8:2d:d8:87:
                    ee:da:30:29:b3:ce:1c:82:73:58:f5:04:c4:6d:27:
                    83:0d:00:43:c4:ba:98:be:e8:25:d1:31:09:37:fc:
                    b3:a8:62:56:d7:f0:11:db:b5:a8:0d:42:b3:0f:84:
                    2f:3e:31:6e:99:be:7d:b1:35:ec:d3:7d:32:16:50:
                    28:69:7c:22:1c:67:d8:af:79:a4:17:1a:6d:fd:e2:
                    ee:e4:39:6a:75:b3:28:c6:e8:09:a3:5d:64:6f:c5:
                    bb:50:73:7b:a6:d2:92:00:1d:2c:df:07:fd:aa:ae:
                    a6:90:07:5b:21:9b:3a:17:dc:1f:38:40:b5:68:43:
                    aa:04:13:63:0b:74:95:9d:ea:98:53:5c:dc:84:3d:
                    38:2f:a5:59:f8:58:db:23:15:cf:77:c4:20:c2:bd:
                    7c:f5:f4:70:73:84:14:bb:e6:93:dd:0c:94:14:54:
                    fe:75:b6:3f:55:64:c2:ac:15:28:c3:c1:e2:3b:ab:
                    35:af:01:ee:3e:4f:ed:43:1b:50:39:6a:a0:7f:ca:
                    df:51:77:00:df:ad:e8:88:6f:94:51:17:9b:78:b4:
                    a2:70:83:b8:d4:f4:57:db:48:ea:5c:dc:fd:3c:95:
                    79:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E8:C6:F6:82:AD:79:D4:94:CE:30:75:92:43:E3:F0:D2:E8:4F:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/0e66e1a0-d526-33c0-8259-90113fc406d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.crl

            X509v3 Authority Key Identifier:
                keyid:55:EC:CB:74:8A:57:AC:5C:1B:9F:F0:4F:E4:4F:28:55:E3:0F:E4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fada::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:4c:6f:de:a9:0d:f7:9a:8b:01:4a:fa:d4:1c:5a:53:a2:ba:
         2a:bb:4a:de:ee:80:af:8e:99:24:e1:e7:20:a1:bc:58:ad:2b:
         a4:84:10:dc:11:cc:49:a5:f5:2d:be:4d:12:c1:d9:61:d6:de:
         c2:50:f1:9f:b3:fc:76:b3:3b:e4:12:24:cf:db:73:ca:9d:86:
         81:e1:6a:c8:ee:d9:44:ec:61:46:e5:01:85:5f:a9:46:ac:cf:
         87:63:19:5b:f4:ae:40:db:96:d5:bb:b3:a4:bb:bb:8b:de:2a:
         cd:56:dc:d3:a5:1c:a7:a3:ce:f2:54:f6:c6:bc:ef:83:ba:1c:
         8e:34:7f:28:c4:49:1d:0e:03:25:3f:83:36:dd:cf:6a:07:cb:
         2d:7f:c5:46:29:c8:b7:36:06:3d:31:46:5e:2c:0a:0b:34:db:
         f2:15:be:7a:25:ff:9e:07:f2:be:9b:58:08:4d:bf:bd:b2:da:
         b7:4d:c3:b4:50:32:20:d0:aa:e9:af:3c:14:84:5f:85:5f:d0:
         84:f7:1a:78:4f:ae:c4:ad:16:3f:76:bf:dd:8d:9e:d0:3e:1a:
         5b:d4:0a:25:76:c0:89:e4:60:f5:5d:9e:50:82:b8:a7:57:11:
         87:9a:54:2b:fa:bd:13:e8:50:6c:ba:e7:0f:5d:03:da:ec:26:
         a4:5c:2f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:46:54 2025 by rpki-client