Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/8b84c134-7de9-3053-8d3a-7c66ce6a4ba3.roa
File:                     8b84c134-7de9-3053-8d3a-7c66ce6a4ba3.roa (raw, json)
Hash identifier:          7wz4tfy+VtwP/XAdHPjw6ZK6UtT8qYWCwE17QtFhs1E=
Subject key identifier:   40:C9:3C:66:CE:D7:17:14:B4:3B:39:E9:00:2E:73:BA:D5:C1:08:EE
Certificate issuer:       /CN=bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f
Certificate serial:       010D0C9F432858487FB5D705DF73640F490EE280
Authority key identifier: E7:5A:9B:72:A0:DA:D3:14:B8:AF:D2:D5:58:D4:5B:AA:2E:62:ED:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/8b84c134-7de9-3053-8d3a-7c66ce6a4ba3.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     399761
IP address blocks:        2602:fc63::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:d7:05:df:73:64:0f:49:0e:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=4848976a-6fc6-4ffe-811e-7d5dc1585250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:e0:8b:4d:f1:a9:fd:e9:7c:3e:91:32:ce:
                    ca:97:b7:2e:b8:fe:30:f4:9f:dd:bc:88:4a:03:94:
                    85:f5:f2:09:4a:9e:e6:be:7b:5c:bc:d0:be:79:33:
                    1e:6a:c2:ea:7e:8a:6b:67:f9:ec:9c:4a:15:56:b7:
                    1a:7d:86:3f:b9:89:ac:99:ea:73:f9:f9:94:02:a8:
                    0b:b3:16:91:dd:b3:15:62:cf:e1:73:01:73:bf:64:
                    af:58:b1:b5:5d:82:d3:a6:df:25:4a:e6:d8:ee:30:
                    b3:25:f4:c8:87:9b:76:2a:64:9f:10:43:78:76:d9:
                    3e:91:0e:0c:37:7e:3c:a6:47:be:c9:ac:d8:1e:ad:
                    57:81:d8:2d:65:fb:3f:23:26:6a:6e:62:35:72:aa:
                    d1:0e:3d:a3:f2:fd:c1:18:6e:36:86:34:48:e1:38:
                    b5:b1:67:ce:00:71:f5:8f:88:5c:63:dc:10:79:ca:
                    b5:d6:ca:ad:64:b9:27:48:ca:6a:2a:35:9f:06:ed:
                    57:f9:7c:14:54:80:29:9b:53:88:f9:93:b7:34:4b:
                    c9:58:58:43:49:c4:0f:fa:b7:6f:3e:16:94:3a:3e:
                    ca:d8:a2:a4:d7:45:a9:61:40:eb:39:f0:ab:de:92:
                    37:96:f6:47:ba:11:5a:0b:00:25:53:54:00:39:f8:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C9:3C:66:CE:D7:17:14:B4:3B:39:E9:00:2E:73:BA:D5:C1:08:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/8b84c134-7de9-3053-8d3a-7c66ce6a4ba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.crl

            X509v3 Authority Key Identifier:
                keyid:E7:5A:9B:72:A0:DA:D3:14:B8:AF:D2:D5:58:D4:5B:AA:2E:62:ED:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc63::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d0:2e:5b:f9:c3:f4:37:10:16:2c:d7:6c:51:8e:8d:df:bf:
         9f:bb:ac:d5:6d:a0:9e:ad:d5:a7:0e:32:a5:36:f4:03:97:87:
         b5:d2:40:f6:3b:7f:6a:e8:65:0f:c5:4f:89:8a:ba:be:c7:37:
         d3:5a:b7:41:5b:a3:f3:5c:d8:66:27:ac:79:70:76:34:eb:0e:
         27:b3:2a:e6:76:2c:b9:38:dd:f2:44:e8:d7:3f:da:51:7f:28:
         d2:ba:cb:66:00:1a:1d:b5:13:50:fa:5b:85:dd:9b:d3:9f:ba:
         60:e8:93:48:4a:39:44:08:56:bc:b0:fd:8a:f9:52:ef:23:94:
         ea:25:12:27:1a:d6:d7:95:75:6c:40:f0:7f:8e:6a:7e:47:bd:
         55:2f:7c:5f:53:82:fb:b2:82:3f:f3:1f:9b:9e:88:ed:55:40:
         db:b4:bd:96:12:ec:44:7f:17:97:8d:0b:f6:e7:b7:5b:70:2b:
         78:77:15:5a:7f:e0:19:c4:78:bc:0d:e2:10:b7:76:ba:10:b6:
         5d:31:06:76:bc:c8:38:d2:78:a6:a3:27:aa:b4:34:8f:35:58:
         06:f0:6e:34:4a:23:f1:11:4e:19:5d:7f:cb:29:b7:0a:75:2d:
         15:b1:0c:f9:b7:4c:90:67:c0:59:ef:54:a4:f6:e3:02:80:f5:
         b3:f9:98:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:46 2025 by rpki-client