Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/9eab1dcf-bc89-3491-a5b3-bbb64133d9f5.roa
File:                     9eab1dcf-bc89-3491-a5b3-bbb64133d9f5.roa (raw, json)
Hash identifier:          OSAa+2+9fun1sS7Vka443xkWJk2UIsHJyJgJhHOeHsY=
Subject key identifier:   D7:0E:C8:EE:3D:AE:3F:9C:C9:33:38:70:88:5C:08:27:9D:D3:DE:5D
Certificate issuer:       /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial:       010D0C9F432858491246B961B2D323F351C14A80
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/9eab1dcf-bc89-3491-a5b3-bbb64133d9f5.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        2607:d540::/42 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:b9:61:b2:d3:23:f3:51:c1:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=d8575c15-2cb3-4254-affa-04dd67eac042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:30:ca:94:04:c9:e3:78:ab:29:fd:d0:09:f0:
                    57:33:96:7e:53:11:30:a3:14:91:8e:9b:93:e7:4a:
                    8a:0d:ed:c0:7a:00:a0:ba:c0:f5:27:7a:90:d3:a2:
                    12:4f:60:1d:b8:88:64:d4:35:62:7a:1c:e5:f7:c7:
                    26:33:3b:87:dd:06:95:0d:ab:07:5c:1f:59:7f:1b:
                    22:3d:61:9d:02:fc:2b:bd:5c:b9:d8:ec:74:fa:53:
                    06:d3:e0:ac:97:a8:89:a4:45:fd:8b:d1:f5:df:f1:
                    e8:85:26:f7:2d:ef:9e:9a:06:3a:6a:ba:8b:9d:06:
                    a5:7e:17:2f:76:18:4b:ca:39:d7:e3:0e:cc:01:96:
                    89:1d:13:85:94:96:c9:7e:aa:3d:77:38:c0:2b:af:
                    82:7f:61:96:a2:c3:cf:a6:6b:9f:19:7f:98:96:8b:
                    3c:19:98:2e:64:e2:43:bf:e9:19:1b:cb:2a:6b:17:
                    07:50:4c:d7:91:22:5d:00:8b:18:4c:a5:9d:be:c9:
                    46:1d:b0:46:22:d6:8d:c8:44:7c:7c:fb:1f:c5:3d:
                    17:06:9e:e9:87:26:7c:5f:99:c0:f5:3b:f0:11:58:
                    dc:91:67:2d:fd:2f:6b:2d:45:e0:88:b1:b8:f2:d0:
                    d6:e5:e2:4b:a0:34:61:5a:12:3a:d5:5c:28:f2:b7:
                    f3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0E:C8:EE:3D:AE:3F:9C:C9:33:38:70:88:5C:08:27:9D:D3:DE:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/9eab1dcf-bc89-3491-a5b3-bbb64133d9f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl

            X509v3 Authority Key Identifier:
                keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d540::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:8d:a2:c8:39:7a:92:c5:11:9a:08:52:b4:e5:77:40:d8:83:
         93:a5:c2:3c:b5:e8:e8:42:ad:7c:87:62:9d:c5:98:25:5d:e3:
         17:83:d5:bf:0d:e0:bd:8c:72:77:8e:4b:e6:79:c5:cb:12:bd:
         56:60:cf:b9:19:35:9a:0b:ca:59:2d:c1:03:f3:ef:ad:e9:f9:
         ec:05:85:4c:31:a5:7a:0a:48:0a:05:90:8f:88:93:07:27:9b:
         8e:bf:4a:8e:c1:d2:fc:ad:57:c6:86:24:00:b1:21:09:40:1a:
         37:2a:24:65:37:5b:fb:a4:ce:11:e8:d5:d2:10:0d:2f:68:cd:
         42:fb:29:f1:5a:d1:3e:6e:3b:75:29:07:01:16:ab:6b:1f:6d:
         ba:bf:89:37:38:a0:db:93:9c:23:07:ed:bd:a4:8f:dd:b1:57:
         44:04:f4:be:b0:af:56:ce:ef:f3:bc:fb:c7:d9:ff:f1:82:ba:
         2e:6c:e2:28:aa:e0:b9:2b:6b:26:4d:15:c4:74:4e:9d:64:30:
         b5:8e:20:32:72:c2:d0:e9:08:e9:5e:ed:54:dd:57:a0:ce:fb:
         03:42:3b:cf:a3:32:3e:32:90:cf:3e:06:fa:ca:ce:cf:2d:ac:
         be:72:f9:3e:bc:fd:11:b6:f0:5f:71:da:15:88:dd:f5:de:be:
         4f:4a:db:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:29 2025 by rpki-client