Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d5087f-7e88-419c-92e3-fac6b1d22132/cbef5ea1-683d-3477-b7b8-c44019304205.roa
File:                     cbef5ea1-683d-3477-b7b8-c44019304205.roa (raw, json)
Hash identifier:          MwM5brvyps3TW42gWVGNo7k5m4YkNttbwDgGJncaWaI=
Subject key identifier:   6E:EA:24:D7:0B:BB:C2:DB:82:44:9A:5B:D2:F4:B6:77:D2:C8:8A:66
Certificate issuer:       /CN=a5d5087f-7e88-419c-92e3-fac6b1d22132
Certificate serial:       010D0C9F43285846B88A785992D719FEE2B7DDC0
Authority key identifier: FB:2E:72:D8:D2:6B:CB:09:5E:56:90:A4:FF:06:42:9A:EC:15:68:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d5087f-7e88-419c-92e3-fac6b1d22132.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d5087f-7e88-419c-92e3-fac6b1d22132/cbef5ea1-683d-3477-b7b8-c44019304205.roa
Signing time:             Wed 31 Jul 2024 13:00:38 +0000
ROA not before:           Wed 31 Jul 2024 13:00:38 +0000
ROA not after:            Tue 29 Oct 2024 13:00:38 +0000
asID:                     62164
IP address blocks:        2602:fb24::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b8:8a:78:59:92:d7:19:fe:e2:b7:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d5087f-7e88-419c-92e3-fac6b1d22132
        Validity
            Not Before: Jul 31 13:00:38 2024 GMT
            Not After : Oct 29 13:00:38 2024 GMT
        Subject: CN=815f06c7-8e6d-4d2f-81ff-6b43290a6bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:f1:d8:0f:b8:f4:e1:94:d4:6c:3c:84:05:
                    44:06:ff:e4:7f:30:ab:e8:e3:eb:44:f1:c5:a4:e8:
                    f2:51:59:6a:84:55:90:6a:39:70:15:6a:16:ba:44:
                    ba:d5:06:e3:56:fa:2c:16:21:6e:25:9b:48:49:6a:
                    69:6d:2f:e5:64:30:fc:92:bb:dc:f2:e8:b3:e8:2b:
                    a6:6f:3b:64:b0:3e:12:af:19:3b:16:a8:09:80:89:
                    e2:60:95:3e:d5:37:53:b9:b1:88:57:ba:26:4b:68:
                    dd:64:af:6d:c6:a2:89:32:ee:d3:f2:ef:55:66:b4:
                    7a:61:c0:08:dd:b0:6b:b3:c0:d8:05:d6:7e:7e:2b:
                    2c:de:7d:0c:c8:fc:e5:6c:68:ea:d8:5e:6b:6c:18:
                    f1:c6:18:e9:09:34:34:ad:30:ad:be:d8:4a:f8:c3:
                    ae:77:d0:64:27:a1:fb:f7:c5:1a:a1:35:d9:61:c1:
                    b9:f7:7e:0b:af:96:1e:4b:72:45:65:eb:fe:09:08:
                    15:ba:03:9a:8d:1b:e6:41:08:55:ea:64:0a:d0:90:
                    db:d8:9a:e2:91:65:52:33:4d:4b:29:92:26:c7:b1:
                    3f:82:45:d7:a4:60:91:8f:7f:5c:53:aa:b9:52:ef:
                    6e:9b:b0:64:14:4e:5b:ca:80:fb:71:af:20:72:f9:
                    fc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EA:24:D7:0B:BB:C2:DB:82:44:9A:5B:D2:F4:B6:77:D2:C8:8A:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d5087f-7e88-419c-92e3-fac6b1d22132/cbef5ea1-683d-3477-b7b8-c44019304205.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d5087f-7e88-419c-92e3-fac6b1d22132/a5d5087f-7e88-419c-92e3-fac6b1d22132.crl

            X509v3 Authority Key Identifier:
                keyid:FB:2E:72:D8:D2:6B:CB:09:5E:56:90:A4:FF:06:42:9A:EC:15:68:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d5087f-7e88-419c-92e3-fac6b1d22132.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb24::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:36:36:6b:dd:c2:ce:b2:7b:c4:02:d7:ba:ad:f5:1f:20:f6:
         28:72:6d:bf:bc:67:c3:b7:f8:b2:4a:26:40:a7:b8:dc:0f:ef:
         ee:a0:3e:5a:8f:f6:99:41:fc:32:fa:a2:3a:7c:7c:28:55:cc:
         af:92:02:61:72:86:6f:6a:50:1b:a1:96:63:20:33:78:71:1c:
         2d:a9:5b:dc:16:16:11:be:44:97:1c:10:0e:cf:91:4b:e7:fe:
         c6:ea:b4:15:26:35:e4:c3:4b:ad:5c:2b:3a:4d:c6:17:e5:9a:
         86:ad:e5:9d:2f:a0:60:7c:9f:ec:1f:82:61:a2:a5:15:b0:78:
         b9:24:8c:5c:06:c0:48:e5:3d:4e:94:ce:73:74:32:00:1d:31:
         5c:75:5e:58:5c:9c:4c:aa:92:f7:82:09:9c:28:e6:aa:f0:ff:
         13:5f:74:28:b9:06:05:b5:ae:9e:6d:63:e9:30:e2:fd:a6:a8:
         5b:e7:91:d8:0f:1c:50:42:c3:f2:36:b7:31:64:03:c6:f8:37:
         95:93:5b:6f:50:1e:5a:1b:6e:4d:1d:ca:3c:1b:ec:68:a3:30:
         d2:3c:fa:04:96:e9:12:a9:14:6c:1a:d0:88:0b:dd:5b:60:58:
         99:11:03:af:81:bf:e9:70:5f:fe:86:67:08:cc:04:e4:a7:4f:
         dc:09:42:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 20:25:39 2024 by rpki-client on console-ams.rpki-client.org