Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Netiface/1/323630323a663931353a3a2f34302d3430203d3e203336363830.roa
File:                     323630323a663931353a3a2f34302d3430203d3e203336363830.roa (raw, json)
Hash identifier:          SBTJelkXGyQziEOdKy10y8N2y4UCzgpN0185fM04yzg=
Subject key identifier:   42:88:7A:3F:00:B7:8B:8A:5E:32:07:D1:05:31:50:05:6A:BA:6E:1C
Certificate issuer:       /CN=2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8
Certificate serial:       78D88D139314817C8C1590F773E6B1F1AB5E589E
Authority key identifier: FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer
Subject info access:      rsync://repo.rpki.space/repo/Netiface/1/323630323a663931353a3a2f34302d3430203d3e203336363830.roa
Signing time:             Sat 14 Dec 2024 12:45:15 +0000
ROA not before:           Sat 14 Dec 2024 12:40:15 +0000
ROA not after:            Sat 13 Dec 2025 12:45:15 +0000
asID:                     36680
IP address blocks:        2602:f915::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d8:8d:13:93:14:81:7c:8c:15:90:f7:73:e6:b1:f1:ab:5e:58:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8
        Validity
            Not Before: Dec 14 12:40:15 2024 GMT
            Not After : Dec 13 12:45:15 2025 GMT
        Subject: CN=42887A3F00B78B8A5E3207D1053150056ABA6E1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c7:e7:9d:a6:21:4c:2d:43:36:5b:10:25:67:
                    47:fd:cd:a4:44:af:ad:39:d4:e1:24:da:80:86:51:
                    5a:10:3f:ad:fa:8d:15:df:12:3f:de:e0:90:a6:aa:
                    5c:3d:46:9e:e6:39:35:52:d8:4a:6f:d4:0a:bf:84:
                    a5:62:ea:2d:42:93:e2:dc:e7:c7:ef:58:29:69:cd:
                    7d:e2:b1:15:57:f8:06:2d:d6:7e:6d:e1:83:5e:20:
                    18:16:28:ed:7d:95:01:f2:fe:97:75:55:5f:cb:4a:
                    16:67:75:e6:4a:48:8c:a0:5c:b6:20:7a:bb:fd:01:
                    6d:35:7d:8e:10:7f:4e:0d:70:3a:96:b5:f5:a3:d9:
                    13:64:8a:57:11:8e:9b:41:db:55:57:4e:cc:c2:9c:
                    27:9a:6a:67:68:fb:3b:ed:36:4c:9b:bb:3c:cf:49:
                    3e:a8:4d:b4:db:cd:f0:8e:ff:8d:a4:1b:1e:5f:f1:
                    f5:c5:55:29:4a:3a:91:b8:d9:86:c2:f3:9e:7e:38:
                    a4:ba:02:05:e9:84:10:3d:27:f9:6f:ff:c4:d2:b7:
                    39:a7:ab:c2:98:92:4e:dc:f1:1f:6f:5d:50:80:17:
                    40:ec:1e:b8:cd:fc:63:41:b4:4d:45:80:c4:8f:6f:
                    5a:95:21:2b:b5:e6:ba:08:ba:9f:01:3c:5f:93:b2:
                    26:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:88:7A:3F:00:B7:8B:8A:5E:32:07:D1:05:31:50:05:6A:BA:6E:1C
            X509v3 Authority Key Identifier:
                keyid:FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/1/323630323a663931353a3a2f34302d3430203d3e203336363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f915::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:7b:79:d3:26:a9:1d:74:ad:19:0c:97:2e:a9:78:19:37:99:
         ec:9b:05:dd:3e:b0:5a:18:cc:aa:5b:ae:a4:49:fd:d2:7b:04:
         44:00:ca:fd:3e:83:c8:a4:cf:83:0e:5b:ae:cc:88:3f:88:ff:
         29:60:94:5d:69:ef:df:d5:c1:b9:6c:18:68:5d:66:2c:a6:34:
         45:91:48:89:c3:e0:7e:40:8e:82:b8:9d:5d:b6:61:70:e8:10:
         35:d4:76:74:93:da:03:69:a7:14:1a:8c:7b:8d:00:4b:ec:37:
         cc:c9:db:e6:df:4b:32:d7:b3:42:5a:96:17:4a:45:cb:4e:94:
         6b:66:6e:26:cc:d8:6a:a8:cd:e5:f6:52:56:25:11:34:59:51:
         2a:35:60:20:a4:98:4b:19:4b:87:63:a7:64:96:44:3e:57:50:
         a5:f9:d6:a9:20:3f:ad:61:af:d1:f6:6d:32:5b:4e:ff:23:c1:
         17:91:15:a1:5a:c9:dd:60:84:eb:03:2a:d6:67:6e:5f:d4:ae:
         93:50:36:92:c5:ee:bb:e8:1e:17:7a:82:18:51:67:08:a1:77:
         e6:77:28:37:15:10:1e:42:47:11:f3:24:40:54:b0:76:aa:6d:
         49:fc:5a:b4:99:6d:2e:1b:13:7b:f7:3b:a5:93:b5:ee:90:8d:
         e6:e8:e7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:28:27 2025 by rpki-client