Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/d5317dbc-5d9a-34fa-a6fd-e14d6df00eb3.roa
File:                     d5317dbc-5d9a-34fa-a6fd-e14d6df00eb3.roa (raw, json)
Hash identifier:          PUu2uxm0J/7YV53tGMfuhw0kNDagnaw14YmD+pw5wn0=
Subject key identifier:   01:3C:50:1F:FD:F6:CB:06:D6:99:99:04:81:95:AB:4E:89:73:3B:A6
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F43285848A830ACD5AC076994257673C0
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/d5317dbc-5d9a-34fa-a6fd-e14d6df00eb3.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     398395
IP address blocks:        2602:fb54:146::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:ac:d5:ac:07:69:94:25:76:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=0e75044f-d50d-4e4e-9a13-cfb9e2bfe560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0f:f9:fb:28:8f:9c:86:5f:91:fb:62:46:e2:
                    7a:b2:7e:74:58:d6:27:16:f8:ce:b9:50:ba:b0:58:
                    b5:f1:c0:8a:0d:17:c0:b6:e0:3c:01:e8:8a:e5:1c:
                    6f:8e:9b:e0:b0:8d:ef:60:7a:fd:ca:11:da:c8:0e:
                    bc:f5:2f:c1:43:79:8d:00:49:13:ae:98:bc:97:db:
                    42:8a:60:89:7f:d9:7c:7e:df:86:40:3c:ce:c3:a2:
                    16:b7:22:66:f3:a4:58:e7:9d:97:ae:e0:d9:a2:fb:
                    ce:30:20:d0:c5:c3:16:b1:d4:73:d7:c1:bc:31:c5:
                    87:37:92:cb:0e:5a:d0:5e:2a:f6:fc:54:c9:70:e5:
                    83:3b:85:58:d9:ce:6d:3a:0f:48:68:05:96:16:52:
                    4f:a6:38:bd:e2:48:7e:6a:f5:1b:a8:a1:0f:65:09:
                    a9:77:b3:5c:7a:f3:9a:58:f6:66:73:b1:eb:51:b3:
                    a4:0c:f7:4d:e3:d6:a2:63:4a:2d:a5:44:60:80:97:
                    62:6d:71:89:83:c6:a2:f0:3d:9a:f7:63:a8:80:45:
                    48:07:e0:10:ab:b7:f4:f3:2c:02:fa:37:ab:23:d2:
                    bc:5c:92:09:52:d7:d3:1e:df:27:af:d3:5a:b7:b7:
                    04:62:38:5e:f9:12:be:8f:9b:09:3d:19:79:3a:2e:
                    34:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3C:50:1F:FD:F6:CB:06:D6:99:99:04:81:95:AB:4E:89:73:3B:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/d5317dbc-5d9a-34fa-a6fd-e14d6df00eb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:146::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:86:63:56:db:46:95:14:c5:b6:71:3b:eb:95:11:70:ec:c6:
         8d:6d:82:9a:6e:cc:86:f1:0b:3a:b4:ef:ba:97:77:f4:90:c0:
         de:c1:75:82:44:82:81:f1:98:30:3a:b3:da:fb:95:53:13:61:
         76:69:f5:6d:d6:c7:96:8d:2f:6c:14:b3:90:03:ea:be:8f:ee:
         26:9a:23:7f:b8:6c:e9:30:1b:1e:a9:73:8c:15:33:0e:09:86:
         2f:8c:e5:bc:0d:72:e5:a5:4f:d7:bb:ec:19:14:7d:bf:a3:a8:
         a6:be:ca:9f:4e:4d:df:76:43:70:67:9b:ba:e0:a2:f2:c6:8a:
         bc:80:29:05:c0:59:af:ce:6b:2c:58:66:a4:10:d5:7f:2a:c1:
         df:ba:55:9c:6b:75:04:ca:60:ab:2f:70:ec:0d:d4:05:17:60:
         15:64:e3:d5:c0:84:4f:bf:00:02:c3:7f:81:3d:33:e0:37:29:
         9d:9b:75:97:a1:2a:bc:89:4e:8c:3b:e1:8e:ea:f8:81:f1:35:
         ea:67:22:e1:1c:63:94:23:8c:cd:ab:78:68:12:1c:f4:f2:1b:
         9f:92:26:c3:80:f1:20:e3:c8:0f:c8:88:42:5d:c0:bf:ef:0a:
         18:a9:2d:1e:a8:37:15:5b:3f:d0:65:aa:18:42:0d:03:4b:9d:
         32:25:a7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:48 2025 by rpki-client