Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/3a06015d-fc73-3ba0-bdc3-dfc52063b987.roa
File:                     3a06015d-fc73-3ba0-bdc3-dfc52063b987.roa (raw, json)
Hash identifier:          nJaegvtISR9oy2YZg4TpC75lY8KAFsWUVQynoMEbM3I=
Subject key identifier:   09:13:29:4D:50:48:16:A3:DA:34:A0:B5:EC:D0:2A:28:29:0D:E7:0B
Certificate issuer:       /CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
Certificate serial:       010D0C9F4328584930DE78F55AD043E212822100
Authority key identifier: 52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/3a06015d-fc73-3ba0-bdc3-dfc52063b987.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        2602:fca7:12::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:78:f5:5a:d0:43:e2:12:82:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=c8a357cd-0e5b-4d46-903b-3b8a2bdd68e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a7:78:14:b1:c3:43:46:98:b1:c6:44:5e:50:
                    81:93:a8:37:73:ab:75:ee:71:15:41:6e:b1:d8:39:
                    3b:c2:94:2d:3c:4e:48:6c:8c:62:15:01:bd:6b:08:
                    86:22:e0:78:c2:51:7e:89:b1:1c:29:18:7d:fe:2d:
                    96:1d:2e:f4:77:b4:ce:cc:f4:29:f9:74:45:19:f5:
                    0c:8c:0a:1f:4d:07:b2:84:01:7e:dd:2a:43:71:45:
                    c7:7d:b9:2c:9a:66:78:01:4f:1e:7b:fe:e0:29:81:
                    30:8a:05:6b:22:49:79:85:42:ec:7d:95:95:68:eb:
                    5f:b9:55:d4:35:02:a3:55:4d:b1:ef:69:90:53:f0:
                    f1:05:52:f0:4f:7e:22:70:9f:ef:9d:48:53:3e:7c:
                    f1:f1:ca:02:c8:02:96:b5:b8:0c:98:69:c9:79:ae:
                    87:72:0c:06:ff:46:14:8e:a8:7f:a8:d4:d7:23:0f:
                    3c:ed:22:ba:80:ea:8a:fb:21:33:4e:46:77:ea:d2:
                    74:f4:9f:97:e7:96:93:31:58:7b:91:d3:2a:c1:da:
                    08:c9:99:fb:b1:6e:fe:a4:72:79:d2:bc:d5:72:14:
                    12:88:7a:fd:73:53:4f:84:52:ff:b9:24:e4:16:0b:
                    7c:20:de:7e:e7:ec:12:b6:5c:86:25:5e:d4:a0:28:
                    bf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:13:29:4D:50:48:16:A3:DA:34:A0:B5:EC:D0:2A:28:29:0D:E7:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/3a06015d-fc73-3ba0-bdc3-dfc52063b987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl

            X509v3 Authority Key Identifier:
                keyid:52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fca7:12::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e2:66:88:6a:be:65:a0:53:0a:fd:16:d2:11:b7:3f:ca:40:
         b2:2b:80:19:97:6d:54:8f:cf:7e:69:4a:c3:12:fa:8b:a4:49:
         7c:3e:0e:57:d3:96:73:f2:88:c2:f6:2a:c3:a3:58:63:52:97:
         1c:88:86:3e:f1:34:c4:3c:64:17:2d:0b:f9:bd:6e:5f:bc:62:
         70:4f:47:3a:0c:47:d9:8d:71:b5:ba:01:9e:40:83:3c:04:04:
         93:d0:21:5f:6c:c9:a5:ad:e5:a2:f9:6e:a2:5f:35:b0:63:51:
         da:45:b6:32:fe:db:29:75:2b:34:c1:4d:ea:22:c8:6a:4e:cd:
         a3:ff:5f:20:1f:8e:32:b9:9e:90:aa:e4:ed:f1:7b:f2:69:0b:
         a2:09:b8:13:b6:56:29:1f:7c:34:84:31:1b:01:cd:bf:ee:87:
         6f:6f:a1:f6:8b:57:24:50:ed:3c:f2:6a:52:7f:c6:e2:cd:3e:
         3c:31:9c:c7:27:e1:88:a9:ab:0e:53:c3:4d:e7:40:fd:f2:14:
         de:7b:9e:c0:50:9a:79:1b:de:ee:9b:b4:ca:da:43:04:50:6d:
         ed:b7:fe:95:a7:25:fe:5f:fe:07:cf:eb:a9:d9:4a:83:e4:97:
         c7:c1:01:6f:b7:37:8a:ca:d7:b2:59:f0:f4:28:30:18:d6:29:
         20:4c:aa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:21:53 2025 by rpki-client