Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/61fa3b7e-9320-3d30-aea2-938b200f9f76.roa
File:                     61fa3b7e-9320-3d30-aea2-938b200f9f76.roa (raw, json)
Hash identifier:          pNr1acSyBNkjn39ODj1fuN2eTiBxrWSkASI3obBtoPk=
Subject key identifier:   B9:1E:62:80:1D:A5:81:8D:29:1F:D2:F0:7F:3A:D8:69:98:67:B8:64
Certificate issuer:       /CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
Certificate serial:       010D0C9F43285848A996245CB79352E61A11CD80
Authority key identifier: DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/61fa3b7e-9320-3d30-aea2-938b200f9f76.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     26914
IP address blocks:        2001:1898::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:24:5c:b7:93:52:e6:1a:11:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=e0a41cfd-7838-46cf-927e-bb7f5f03ed07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:32:d7:0a:a4:b0:dd:52:d5:b9:76:bc:d0:e2:
                    ff:e4:af:a9:08:c6:19:76:30:3b:d5:ea:6e:53:8d:
                    59:df:c3:ba:b0:59:fd:be:40:95:0f:9e:7f:36:1e:
                    ec:05:ce:9a:5b:14:9a:08:89:91:ab:2e:75:db:96:
                    4d:b1:1f:9c:5d:50:35:3c:dd:a7:96:15:6d:b5:f8:
                    d3:96:24:47:0f:73:29:bd:69:da:68:9a:39:d7:3a:
                    46:9c:a5:e6:74:20:b8:41:54:eb:db:ba:54:9d:d4:
                    8a:41:de:7a:96:d6:b1:3d:fc:b6:46:3d:22:cd:52:
                    89:1a:2b:44:8e:2b:fd:30:2a:8e:98:67:f3:38:ce:
                    e9:b0:9c:88:16:7d:23:12:d1:58:ef:3e:64:b9:5e:
                    78:84:96:d8:55:5e:89:f2:d3:05:60:ea:7f:17:97:
                    26:02:26:12:8a:8b:12:0c:98:64:b7:8e:e8:d0:6b:
                    ad:a9:ae:b5:44:1e:89:79:b3:36:15:70:ae:d9:61:
                    64:5f:da:88:78:86:3c:ff:75:d4:d2:c2:57:2e:c7:
                    7f:fe:cf:ee:3d:3b:07:ec:57:45:a0:79:d0:cc:5d:
                    e3:a3:c8:46:41:55:c2:b1:ba:b0:33:86:2a:0f:2e:
                    a1:37:ae:b8:4f:34:6d:8c:13:2d:01:b6:1a:5b:62:
                    45:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1E:62:80:1D:A5:81:8D:29:1F:D2:F0:7F:3A:D8:69:98:67:B8:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/61fa3b7e-9320-3d30-aea2-938b200f9f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1898::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:4e:f5:c9:3a:67:ab:f9:af:96:72:f3:b4:b7:8f:59:14:53:
         90:92:f4:8b:4c:8e:d6:7f:24:2a:3b:e3:ec:5c:b3:bc:2b:d5:
         9f:fb:3c:dd:04:7c:cc:6b:bf:9f:80:88:fe:3f:d1:89:ac:9a:
         33:f4:75:84:ad:68:57:f0:9b:9a:d3:1b:9f:3c:ae:de:f0:7e:
         10:1c:00:8d:75:9c:b0:75:70:b3:b3:fd:a9:ec:7a:f0:9e:de:
         6e:48:b3:82:f6:94:9d:a6:ab:71:9c:53:1a:7a:33:2e:39:4e:
         75:26:fa:49:2e:3a:82:97:f7:57:0b:3b:42:95:73:ce:42:f5:
         aa:18:3f:b3:6c:d2:1c:ec:c5:a3:a4:c4:6e:81:d0:fb:18:2a:
         13:6d:d8:90:bf:20:e5:0f:d1:3e:28:f5:c6:24:82:c2:a2:b3:
         b6:6f:1d:21:2d:c1:01:50:ce:77:51:b6:4e:93:48:7a:cc:7b:
         e8:b1:df:26:35:4a:2a:c8:df:92:3f:5b:08:f2:26:6c:b3:28:
         ee:21:6a:45:4b:45:72:02:94:66:4a:d8:f5:ba:97:65:92:ae:
         38:fe:be:d4:3a:c5:f5:0b:9d:f5:48:83:ed:fd:1b:1f:61:02:
         d3:9b:e4:4a:7e:ce:9b:59:e3:db:5d:70:b5:1e:91:4f:48:bc:
         22:7e:c1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:52:44 2025 by rpki-client