Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/283840b4-e99c-3690-8d17-33af512cfe3e.roa
File:                     283840b4-e99c-3690-8d17-33af512cfe3e.roa (raw, json)
Hash identifier:          X1wu+yHDYTtGqyx/eedxi8vnGBagTNgfye8ZUNnt1x8=
Subject key identifier:   16:15:73:FF:AD:E5:25:22:2D:69:E1:11:35:A5:E2:7F:16:A7:DC:7E
Certificate issuer:       /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Certificate serial:       010D0C9F432858494CC942E8A3E5F735C7A2FB00
Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/283840b4-e99c-3690-8d17-33af512cfe3e.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     198100
IP address blocks:        2602:814:ffe0::/43 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:42:e8:a3:e5:f7:35:c7:a2:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=980f62f9-45f1-43cc-a970-9abc08a2388d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:8c:30:58:8b:d1:62:5d:09:59:ce:c1:b0:
                    26:22:46:e6:23:57:2f:2c:8d:30:1c:64:b0:24:fe:
                    16:b1:95:b9:2a:73:1c:5d:43:6a:84:a8:98:e6:8e:
                    52:57:e5:2a:27:de:59:41:6b:98:2f:a6:c8:0a:ce:
                    63:23:d7:96:1f:51:ef:14:b9:7e:2e:00:3c:cf:bb:
                    59:58:f8:f3:63:78:e4:8e:40:aa:8c:94:44:a6:ce:
                    7c:66:0e:41:f4:27:9b:86:4f:c4:c2:af:04:7b:49:
                    99:48:e0:2f:c5:a7:07:30:c7:e7:9a:46:5f:56:ea:
                    53:1c:f9:ff:16:4e:e2:ac:4f:12:83:88:b7:d1:8e:
                    86:a1:00:84:eb:db:0a:1d:1c:31:15:52:81:ab:dd:
                    da:38:e2:28:b9:a2:70:30:56:84:4b:19:98:83:bd:
                    02:91:a9:af:44:90:bc:f5:0e:f8:73:19:5a:d4:3f:
                    16:96:d5:17:df:e8:0f:fa:b8:fe:e2:e4:3f:77:e8:
                    c3:6c:54:bc:4d:75:30:9c:c1:88:43:99:54:6a:9f:
                    c3:13:20:74:de:3a:27:cd:99:95:7c:9b:e8:a7:1f:
                    82:51:0a:02:a3:03:dc:32:34:8a:9d:eb:91:18:4d:
                    e6:82:4a:68:51:4f:ed:bc:aa:78:e1:23:c6:c4:15:
                    c2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:15:73:FF:AD:E5:25:22:2D:69:E1:11:35:A5:E2:7F:16:A7:DC:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/283840b4-e99c-3690-8d17-33af512cfe3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl

            X509v3 Authority Key Identifier:
                keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:ffe0::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:95:5c:b7:16:6b:21:ab:18:d0:47:7f:3b:62:cc:10:a3:86:
         78:03:d0:0e:38:2b:6d:90:15:c5:1c:1a:0a:26:df:ce:d5:dc:
         fd:8e:5c:fe:0a:4f:b6:7f:6c:29:52:b9:02:ac:99:17:d3:c6:
         b1:7d:71:a2:89:ea:a4:42:82:3a:06:e5:78:f1:d0:dd:2f:b6:
         67:c9:45:89:c3:fc:86:b9:a4:45:cc:a8:d9:05:7b:f4:9f:4f:
         69:d3:9f:32:c2:34:58:22:21:90:53:c9:93:24:71:a5:31:ef:
         3a:2e:bb:eb:8d:a7:59:08:06:87:85:63:0f:f5:12:d5:51:ae:
         b5:bc:14:a9:8b:eb:f8:56:e6:84:c3:ce:06:6a:59:9f:1f:d8:
         8e:54:3b:aa:b8:f8:a2:e0:bd:26:71:8a:df:8d:3b:6c:6f:4c:
         82:0e:40:73:b6:cb:f1:4b:2c:2f:c5:cc:7b:00:d0:18:e1:68:
         2b:3d:7c:60:02:dc:54:fd:29:c3:f4:d9:ab:86:27:36:94:2f:
         4b:cd:76:65:87:2f:16:9e:2e:2f:b4:d7:e9:58:d9:d8:f0:75:
         dc:ff:67:f9:36:ee:5d:26:c0:90:03:e8:d8:d3:28:55:12:57:
         b3:90:76:a4:31:15:4f:7d:47:71:96:f8:14:aa:7e:5d:6f:7f:
         f4:70:40:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:49 2025 by rpki-client