Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64/9f8d514a-735f-3977-94a1-f80c859a248b.roa
File:                     9f8d514a-735f-3977-94a1-f80c859a248b.roa (raw, json)
Hash identifier:          dNeATNwu8Y41K1yapyvvfEVuhz4dP94scPYCfNBnU1s=
Subject key identifier:   1F:82:81:C9:BC:FD:D3:AD:F7:A8:AB:63:D5:4D:4E:1D:BB:3A:1A:4F
Certificate issuer:       /CN=b566ce9f-e3cc-460b-b121-95e5f4415e64
Certificate serial:       010D0C9F43285849393E6F186C32CF6631A0C7C0
Authority key identifier: F9:57:AF:7C:0E:B3:5E:48:B7:3C:D0:C8:A6:66:21:B7:21:FD:9C:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64/9f8d514a-735f-3977-94a1-f80c859a248b.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        2602:fb7b:3f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:6f:18:6c:32:cf:66:31:a0:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b566ce9f-e3cc-460b-b121-95e5f4415e64
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=21c6fe01-bb00-41ed-b122-c1e28c6c2685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c1:f8:94:e7:72:4d:86:4a:72:10:5f:5a:02:
                    b3:03:ac:99:57:bf:7a:90:2b:04:fc:8f:70:65:cc:
                    91:b9:a4:5c:55:b5:31:7c:a0:03:52:f5:9a:71:23:
                    3f:d1:66:ab:5f:fe:c4:24:28:6b:07:99:19:db:91:
                    ba:5f:7d:d9:51:5c:e0:7b:a4:0c:20:ea:ab:d0:c7:
                    e7:d1:67:7b:e1:27:ba:a7:77:79:67:15:c4:85:7b:
                    77:4c:a4:3c:a0:8c:8f:84:5f:92:33:b2:9d:f8:49:
                    ed:68:98:7a:90:14:4c:00:86:c3:c4:62:24:ef:a1:
                    7e:e5:5f:09:db:9f:99:41:db:54:b0:dc:0f:49:ea:
                    56:81:71:68:e6:32:d5:5c:9a:4e:d0:36:47:f7:fb:
                    e5:fc:d8:ae:82:5d:f0:ae:6d:ca:2b:aa:c2:ab:0c:
                    45:9a:2f:29:46:57:e0:13:d3:3d:65:3d:7c:80:1c:
                    0e:c3:e5:1d:19:c2:96:dd:70:28:5a:65:25:1e:51:
                    95:cb:f4:6e:13:34:26:82:8d:13:f0:11:fa:5b:0c:
                    e7:93:69:89:93:36:85:49:6b:58:4c:5a:61:67:5a:
                    7c:10:b7:58:6d:ab:1c:59:aa:a3:55:7c:78:b7:9c:
                    ea:33:d6:cb:8c:65:91:40:05:d1:91:34:4d:a9:83:
                    e6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:82:81:C9:BC:FD:D3:AD:F7:A8:AB:63:D5:4D:4E:1D:BB:3A:1A:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64/9f8d514a-735f-3977-94a1-f80c859a248b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64/b566ce9f-e3cc-460b-b121-95e5f4415e64.crl

            X509v3 Authority Key Identifier:
                keyid:F9:57:AF:7C:0E:B3:5E:48:B7:3C:D0:C8:A6:66:21:B7:21:FD:9C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb7b:3f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:aa:c2:74:f8:b9:cd:05:45:c3:f4:5e:38:4e:2b:ab:03:9c:
         c9:b9:b3:ed:2d:5d:7f:fa:38:11:40:55:27:09:d0:2d:2f:aa:
         29:a1:73:58:4c:f1:0b:78:cb:c7:d3:3f:45:87:b0:f4:a4:57:
         16:b7:a6:80:8d:67:36:48:a9:28:bd:bb:80:38:0b:aa:20:9c:
         54:f2:4c:02:c8:88:04:0e:dd:f6:30:40:5f:10:32:f3:a7:3c:
         a8:ff:30:2b:f7:67:00:4e:6b:7e:3b:b9:82:3b:6f:00:2f:e5:
         ce:2a:47:a0:c2:fd:8b:59:c8:ba:8e:30:0b:7d:7a:f2:e9:b3:
         04:53:42:a0:3c:6d:1b:b0:a2:0d:89:06:23:81:bb:ca:59:51:
         79:30:a1:fb:84:c1:f2:d2:4c:cf:6a:15:6f:f1:38:72:2d:81:
         3f:d7:53:31:9e:65:12:db:8b:26:a3:db:47:21:70:ad:cd:11:
         91:13:11:75:26:30:2a:41:6e:d6:53:2d:5e:d3:ac:8d:e0:b9:
         62:49:0d:1e:19:9b:27:3e:20:07:5a:77:e7:2a:ea:5e:87:d3:
         ba:36:c2:1a:b1:6f:25:86:e6:d2:0a:27:5b:2f:93:22:53:c1:
         06:73:c4:37:da:97:ad:49:5d:4f:ac:c7:7a:f4:63:ae:72:b3:
         e8:35:86:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:01:19 2025 by rpki-client