Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/90c35f33-6fb4-325d-87cd-5b500dce4db0.roa
File:                     90c35f33-6fb4-325d-87cd-5b500dce4db0.roa (raw, json)
Hash identifier:          vngCr0Bo1BctadIBCN9W1+aj+vSvVnNxOwrvJpEGYZQ=
Subject key identifier:   AB:FE:5E:43:58:02:66:30:1A:2A:DE:35:7F:5B:F0:29:DE:41:20:69
Certificate issuer:       /CN=71d0ad91-658e-4240-8d73-8592460b61a7
Certificate serial:       010D0C9F4328583FB91B14E5937728CE07FDE600
Authority key identifier: 2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/90c35f33-6fb4-325d-87cd-5b500dce4db0.roa
Signing time:             Fri 28 Oct 2022 18:06:42 +0000
ROA not before:           Fri 28 Oct 2022 18:06:42 +0000
ROA not after:            Thu 30 Jan 2025 05:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:e00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b9:1b:14:e5:93:77:28:ce:07:fd:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d0ad91-658e-4240-8d73-8592460b61a7
        Validity
            Not Before: Oct 28 18:06:42 2022 GMT
            Not After : Jan 30 05:00:00 2025 GMT
        Subject: CN=9e8668e1-add9-4a9a-a3d2-e95798fd4a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:70:86:71:9d:a3:ac:74:96:68:23:b1:8a:01:
                    2c:35:0c:dc:c4:c8:c8:dc:cb:54:c0:a2:ff:f7:89:
                    3a:fc:a7:a8:98:c0:75:d4:29:4d:ef:9c:97:e2:ba:
                    3e:00:26:95:b4:8a:97:ca:f6:2f:f7:5a:4d:0e:aa:
                    89:6e:d0:54:3b:4f:6b:f5:e6:8c:30:ec:1a:7a:ed:
                    cc:40:83:80:b0:64:f5:a3:01:a6:d3:6f:9d:d2:c4:
                    56:4e:73:67:5d:18:b2:4f:45:c7:40:a2:b9:51:10:
                    b8:9a:a7:e5:fd:ac:db:8c:6d:51:a2:da:74:42:03:
                    ce:38:57:4e:37:1c:31:bb:8a:bd:78:a8:ff:fb:b1:
                    39:d5:af:7c:2f:40:1e:04:05:70:51:ef:b3:f9:88:
                    44:ab:75:b6:14:22:73:46:14:4c:eb:dd:65:83:5b:
                    fe:b9:51:06:fa:e3:e8:40:bf:32:32:c7:e9:34:2c:
                    99:9d:6d:99:79:0c:09:35:2f:a8:e1:60:f3:38:64:
                    20:c5:fd:8b:71:0e:96:d7:5b:98:c2:eb:b5:af:42:
                    db:27:e4:55:82:58:24:1e:94:cf:91:64:89:8a:d1:
                    94:00:54:84:e1:13:ed:a9:d3:73:59:75:84:6d:da:
                    2c:da:30:e1:fb:b2:e7:c5:d0:5e:cb:f3:2f:7a:62:
                    8d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FE:5E:43:58:02:66:30:1A:2A:DE:35:7F:5B:F0:29:DE:41:20:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/90c35f33-6fb4-325d-87cd-5b500dce4db0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/71d0ad91-658e-4240-8d73-8592460b61a7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:e00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:44:aa:df:db:12:93:0a:19:17:07:47:a7:0f:05:f8:da:c0:
         fd:71:3a:7e:56:81:73:be:ca:f1:aa:1b:73:08:da:35:bb:c8:
         89:db:82:e0:32:78:3b:20:1e:f8:3c:a7:5c:4b:ec:2f:fa:1d:
         90:67:70:25:04:50:ab:ee:2c:86:cc:eb:06:a3:45:e9:ee:3f:
         ce:27:17:58:6d:8d:bd:65:af:d2:60:6c:8f:88:13:00:3f:69:
         88:b0:2d:32:50:3f:01:9c:78:c0:ed:42:fd:7b:91:1d:5f:99:
         19:d6:46:fd:83:c2:cf:ea:77:dc:8e:bc:9b:63:5d:ae:79:7c:
         2f:fe:59:cb:ab:8b:6d:75:d8:ab:d0:6b:4b:44:44:68:e7:d1:
         bd:ac:da:6b:4f:f3:d3:63:d7:d1:60:1c:81:a5:95:73:27:78:
         81:8b:97:cb:6b:26:5e:d9:58:d7:72:74:d5:1e:2d:61:36:18:
         71:97:14:4c:b7:d8:25:cd:a0:f3:3c:a5:e2:a7:b1:6e:42:6e:
         5c:e2:33:41:6f:ab:64:5b:7c:d2:87:50:b2:95:e1:36:92:17:
         9c:88:f3:5e:62:b9:7e:de:b0:78:d0:2a:df:6f:c2:70:9e:cf:
         68:16:70:65:6c:d9:6c:00:9b:3f:ab:2e:80:93:8d:1a:62:5d:
         e9:a4:1d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:47 2024 by rpki-client on console-ams.rpki-client.org