Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3d17c561-ea87-3032-81af-6559c2402369.roa
File:                     3d17c561-ea87-3032-81af-6559c2402369.roa (raw, json)
Hash identifier:          CusoQJcndeVh6YVDUnkRiu9L0kw76XaJaCPt+V0ujoU=
Subject key identifier:   53:04:77:85:DE:9A:74:F0:56:F6:BB:5A:25:71:B8:2E:DB:46:DC:E6
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F432858491246A6AE6259B5EFD7A13F40
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3d17c561-ea87-3032-81af-6559c2402369.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     20454
IP address blocks:        2607:6002:171::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:a6:ae:62:59:b5:ef:d7:a1:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=964fc5e2-74b1-4d12-b991-bb9cc3ca5012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4a:83:57:f7:64:b2:df:3a:39:27:86:f2:7f:
                    f0:98:a3:fa:71:7f:67:62:63:8b:3e:ff:fb:3e:7b:
                    99:fb:9f:2b:d7:e3:f4:bb:41:9d:2a:de:58:b4:cd:
                    62:3b:b2:cd:4b:f6:4a:61:ff:6e:4d:b4:c7:3b:5a:
                    9c:fb:70:96:b8:e1:4d:d4:27:6b:df:be:41:79:05:
                    c6:4d:b0:1e:01:e0:de:5c:d5:c7:d9:35:bd:34:65:
                    a0:0d:69:06:a3:46:c4:50:ba:9e:78:25:88:93:28:
                    42:9c:69:b4:85:e0:83:ea:06:cd:82:6a:83:2d:2c:
                    d6:ae:53:7f:5c:f0:df:e5:0b:f9:5e:e2:fa:f1:c8:
                    5b:e4:8d:b3:02:a7:f1:2f:d0:77:66:ea:77:91:16:
                    25:7e:9c:8a:46:12:44:4c:c5:41:3e:da:ca:d5:b5:
                    d0:f5:c0:65:3f:32:6c:37:2f:85:8b:b1:39:5e:36:
                    f1:d7:3c:fd:da:74:8b:25:14:8b:90:bd:49:f3:06:
                    dd:fe:8f:f4:db:d2:4b:b5:12:1f:a5:59:7c:81:2f:
                    a5:18:77:7c:cb:d9:07:3c:bd:21:32:84:f7:fa:58:
                    e5:93:01:e7:4f:3a:17:b9:22:da:bf:62:98:fb:23:
                    d5:73:5b:e5:c3:7d:7b:80:1a:44:09:53:38:6f:c6:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:04:77:85:DE:9A:74:F0:56:F6:BB:5A:25:71:B8:2E:DB:46:DC:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3d17c561-ea87-3032-81af-6559c2402369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6002:171::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f9:7b:f0:3d:0e:29:d4:63:4e:ad:db:8d:79:6c:0b:65:fb:
         9a:1b:d5:44:23:fc:b9:4d:e1:99:15:88:95:03:66:aa:8f:e4:
         51:93:69:61:97:d6:3f:86:a3:5a:f8:75:47:89:c9:54:01:bd:
         94:9f:75:ba:cd:df:8a:97:3c:ca:2f:9b:26:0e:c1:2c:d3:d1:
         d0:2b:a4:49:04:3c:b8:43:6f:e0:3a:33:cf:66:e1:53:db:9d:
         89:04:2f:d7:dc:65:c8:b4:fe:5b:f4:f1:08:1c:1c:71:77:70:
         cc:c9:e5:8a:09:c5:c3:b9:07:fe:3e:34:7c:98:80:36:f8:53:
         76:c8:94:5f:2e:8e:fb:4d:42:0a:84:bd:31:d2:3a:92:91:a2:
         e4:5a:96:1b:f9:bd:24:38:06:10:4e:2c:e5:bb:c1:fd:f8:48:
         74:8a:c2:bb:88:f0:42:6c:a4:33:dc:aa:c4:92:0c:2a:b5:7d:
         95:b8:33:98:91:a8:39:d8:de:72:0e:a6:22:4e:bc:8f:64:65:
         68:1d:02:90:71:cc:76:c4:1b:4d:1a:a2:df:3a:7f:d0:a1:f8:
         d4:49:b9:b0:05:34:74:dd:73:3a:05:e9:52:99:b1:d1:aa:3d:
         83:80:22:c5:51:6f:ae:be:26:ea:0c:79:67:13:9a:15:56:a8:
         bb:dc:80:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:04:25 2025 by rpki-client