Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/192515e8-a126-37d0-8568-8560484ba501.roa
File:                     192515e8-a126-37d0-8568-8560484ba501.roa (raw, json)
Hash identifier:          ODfp/V3qw8BE4qAJGZszuy4ZDmsTip4iK0+g6WxOItY=
Subject key identifier:   78:A4:8B:DE:B1:E2:02:58:DF:35:8B:48:56:41:E6:ED:0B:21:18:D2
Certificate issuer:       /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial:       010D0C9F43285848A29B4951FF2D2BC5A8771580
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/192515e8-a126-37d0-8568-8560484ba501.roa
Signing time:             Thu 23 Jan 2025 02:00:40 +0000
ROA not before:           Thu 23 Jan 2025 02:00:40 +0000
ROA not after:            Wed 23 Apr 2025 01:00:40 +0000
asID:                     31786
IP address blocks:        2602:fba3:f00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:9b:49:51:ff:2d:2b:c5:a8:77:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
        Validity
            Not Before: Jan 23 02:00:40 2025 GMT
            Not After : Apr 23 01:00:40 2025 GMT
        Subject: CN=19366337-02f2-42d3-b5ac-48ced9bc5169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fa:f4:9f:0f:09:94:48:6f:95:20:21:db:96:
                    6c:f8:ce:f0:90:21:75:03:d7:8e:61:46:62:68:75:
                    32:11:84:24:76:3d:69:cf:79:6d:19:3c:33:df:44:
                    f6:fe:27:77:fd:96:f1:04:a2:48:d9:fa:4a:62:3e:
                    9d:ed:5f:4b:9e:15:4e:a0:c8:e1:b0:26:73:97:00:
                    c8:5d:ed:8d:6e:d5:7e:d2:ea:52:11:11:62:c7:6b:
                    d1:fe:e2:15:3c:c4:8c:6d:e3:48:be:51:7d:8c:c7:
                    d2:ef:5e:46:ab:1d:11:c8:a3:34:bc:e9:66:8f:b8:
                    1f:d4:4a:08:b6:ad:14:26:6c:d0:3a:c8:36:dc:63:
                    e9:fe:ce:6c:5f:41:6d:f3:0e:ef:57:36:99:2c:e1:
                    d0:04:e9:e8:93:72:16:f0:d0:19:cf:c5:1d:5c:0c:
                    3d:b5:3c:ba:fe:7e:4d:20:d1:7f:5e:f3:34:b6:83:
                    00:21:95:6c:b4:3a:4b:d9:04:90:19:9a:99:8f:9a:
                    cc:68:6f:53:e7:14:21:a6:af:51:15:8f:20:ba:a3:
                    5c:04:54:b3:4a:75:e8:0b:dd:1e:5b:e2:cf:83:78:
                    1b:3f:e9:d7:f0:f0:f9:cf:41:cd:54:45:71:73:64:
                    9f:bd:c3:53:ae:e5:d8:c3:22:7a:6c:83:55:e6:27:
                    b9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A4:8B:DE:B1:E2:02:58:DF:35:8B:48:56:41:E6:ED:0B:21:18:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/192515e8-a126-37d0-8568-8560484ba501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl

            X509v3 Authority Key Identifier:
                keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba3:f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e4:f1:8a:7c:dd:20:b8:9f:90:04:9b:1d:6f:48:39:24:d5:
         cf:c8:06:65:e2:fa:f0:00:18:10:57:ec:75:01:b6:02:88:7e:
         f8:e6:22:fb:88:0e:c4:ca:9e:8a:b3:02:fb:2b:53:55:76:14:
         70:d3:c2:14:8a:5f:2a:66:af:8a:fe:47:5d:de:28:c7:ba:73:
         96:b3:83:23:24:e2:4a:f6:2b:62:5c:0d:b1:49:3a:9a:be:e4:
         96:f5:a1:e9:93:dc:82:93:56:46:e7:ed:1f:9c:61:5a:f1:2f:
         09:4d:a7:c6:08:33:3a:33:d5:53:20:30:64:70:b4:01:5a:83:
         01:3c:b2:3d:ac:19:e0:09:01:fb:e3:c0:0e:9b:1b:d8:8c:4c:
         f9:98:ea:33:bb:dc:5e:25:b0:98:a5:fd:d9:32:f0:a4:de:54:
         b3:13:21:cf:0a:fa:3d:af:70:8d:3a:d1:49:2e:fd:b8:26:42:
         e4:f3:55:e2:7d:a4:ee:1b:cc:75:8e:02:a1:92:ba:33:c9:3b:
         b3:93:1b:a4:1d:ba:ca:7f:f3:94:f7:fb:90:08:43:b5:91:aa:
         5a:99:90:73:4a:03:3b:1c:48:2d:92:15:ab:2a:ea:9a:6b:22:
         6e:86:fd:3e:ab:6b:bf:30:96:1a:b9:91:4e:68:3b:eb:31:e1:
         f3:cf:98:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:01:55 2025 by rpki-client