Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa
File:                     1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa (raw, json)
Hash identifier:          UGULVJgulcS1kHiwh80wnlvR5YsVltaAiUK67CTWzYk=
Subject key identifier:   92:96:C8:31:40:91:86:33:72:C4:CD:53:0D:48:2D:D2:69:DB:C5:3C
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858491941881EC87B9ABF62BCDE00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     397601
IP address blocks:        2001:418:1456:b20::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:88:1e:c8:7b:9a:bf:62:bc:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=2bcaa320-6ab9-43bc-8dc6-58f6c7616de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5a:86:4c:3d:a3:0c:c5:f8:5e:d1:bd:11:78:
                    b9:04:8d:5d:4b:fc:ea:69:e9:dc:0a:21:65:c1:fd:
                    d3:6d:a1:20:cb:e4:44:da:5a:92:1f:10:05:e3:d0:
                    57:77:3c:2e:f3:7a:0c:5a:12:98:ef:24:f5:3e:22:
                    11:44:b7:26:0f:ce:43:3f:f3:84:0f:a0:b1:7d:8b:
                    f4:1b:bb:22:42:b6:6a:6c:e8:aa:b1:df:6d:80:b9:
                    33:a5:97:35:4d:a7:8a:b7:a4:e1:93:57:fc:d1:da:
                    0e:5e:60:88:5f:94:95:5d:80:cd:b9:03:2a:36:94:
                    6a:0d:3f:2c:cb:7b:e3:07:8b:58:64:08:10:6a:26:
                    87:b6:6e:ea:de:93:39:82:d2:0e:9e:ed:03:0b:a5:
                    f5:bc:4a:5a:04:97:10:39:99:b9:c7:44:4c:f3:d5:
                    f3:04:1b:5b:22:b4:ac:03:25:c8:9c:d2:74:79:91:
                    d3:9f:31:60:04:b0:3b:20:41:8d:36:dc:2d:cc:ef:
                    37:2a:ae:c8:fd:0a:df:84:50:66:c9:a4:2e:a3:70:
                    38:f5:fd:5d:34:11:80:db:25:b7:03:c8:3e:51:a9:
                    d3:56:6e:19:6b:13:61:a0:db:34:0b:f4:ee:2e:15:
                    cf:77:80:84:a2:af:2c:ca:5e:fb:72:d9:b6:29:77:
                    94:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:96:C8:31:40:91:86:33:72:C4:CD:53:0D:48:2D:D2:69:DB:C5:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b20::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:ba:2e:dd:13:8c:0e:3f:b6:80:1c:78:98:95:2a:e7:fe:f3:
         50:47:28:c5:a3:dd:4e:ac:11:95:cd:3f:f6:a5:19:ad:47:c6:
         bc:c7:51:26:ac:8c:3a:73:9c:61:f2:a3:4b:f9:78:a2:5a:36:
         0e:74:da:5d:03:1c:45:29:6f:10:e0:08:38:3c:47:40:bd:cd:
         b2:51:73:42:ba:19:67:31:43:94:b8:51:cd:81:14:13:b5:3a:
         38:df:f9:cb:ec:89:df:ac:1a:6b:85:63:fc:ae:9f:bc:8e:88:
         b7:10:be:8b:7f:67:85:91:98:bd:ff:0b:1f:44:05:24:72:2c:
         ab:05:03:0d:53:22:a1:77:c9:21:9c:23:0f:7b:de:fc:22:72:
         68:1d:89:b1:bf:6f:69:8b:58:a1:01:44:40:f1:11:98:74:73:
         69:a8:0e:60:54:0d:7f:4c:ae:02:ca:63:a0:ff:e9:99:83:61:
         8d:1a:a9:97:b8:af:d2:fe:d1:63:de:be:1d:53:35:9c:a5:8c:
         a2:16:cd:c5:6a:5c:f5:d4:28:69:1d:0a:d2:92:c2:da:d2:38:
         7d:03:07:a3:df:8b:79:59:29:ff:05:40:aa:74:99:a1:21:6c:
         4b:4c:4b:6b:7c:25:58:ba:66:82:44:fb:e0:4d:b5:e2:a0:bf:
         97:fe:e4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:12:23 2025 by rpki-client