Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b606ed5-22f4-3c52-aa04-c656fa060ad8.roa
File:                     6b606ed5-22f4-3c52-aa04-c656fa060ad8.roa (raw, json)
Hash identifier:          3U7t0z4mexpDJJaCvqeH8OUadFNMWaAieNT2WIKqH/c=
Subject key identifier:   CF:BC:04:BA:CF:04:BF:82:88:FC:4B:4D:32:9B:EB:43:0D:44:DD:16
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584917DC365F6144B355182F4880
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b606ed5-22f4-3c52-aa04-c656fa060ad8.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     1225
IP address blocks:        2001:418:1456:b11::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:36:5f:61:44:b3:55:18:2f:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=633c0f53-85d5-421d-8fd0-0eca2e337ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8a:81:74:a9:c1:7f:f9:42:74:0c:fc:85:72:
                    49:3c:21:e8:21:d9:8f:57:8d:7d:fd:16:2d:96:95:
                    85:f9:7a:6f:59:d0:00:2b:6e:52:86:4e:18:56:9a:
                    11:35:fc:2d:0f:75:33:1b:00:2f:d9:f6:0b:0d:b4:
                    af:7e:15:4b:c1:cf:87:ea:e3:89:55:95:79:6f:30:
                    f7:62:30:db:84:f9:25:f1:5e:1f:8c:e1:b6:7a:b5:
                    d0:32:36:66:c4:bd:3c:5d:34:6f:45:b2:66:fb:ab:
                    fd:af:18:1b:79:fb:1e:ae:92:2a:b8:94:a7:d8:1b:
                    5b:18:b3:a4:9f:1f:ba:00:c4:41:40:fe:66:f5:da:
                    51:a2:3e:e8:53:c6:b3:90:31:eb:2c:ea:e5:86:64:
                    fb:36:cc:e4:86:16:d4:ba:53:bb:b0:1f:12:4c:c6:
                    29:19:ab:85:2e:55:b1:ba:64:42:aa:74:4a:ca:45:
                    ad:e4:ce:53:69:b3:79:69:f9:8f:ae:59:54:54:72:
                    04:07:38:cc:31:cd:ff:7b:15:fe:eb:83:ed:5c:e5:
                    f0:73:44:cf:83:70:6d:dc:17:6b:27:43:70:c2:a0:
                    34:62:ee:a6:49:b3:0e:32:35:0e:3d:f9:ab:11:ce:
                    cf:a1:91:bc:24:1f:fd:10:09:60:84:7e:7c:9d:ee:
                    9f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BC:04:BA:CF:04:BF:82:88:FC:4B:4D:32:9B:EB:43:0D:44:DD:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b606ed5-22f4-3c52-aa04-c656fa060ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b11::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ec:15:f6:5a:f4:d4:e9:de:c9:34:ae:8f:62:74:a3:5e:32:
         f9:a1:86:b5:5c:50:44:2c:e0:74:2c:eb:b6:73:bf:cd:f5:3d:
         e4:fb:3f:77:7f:1e:49:a9:bf:d8:40:5a:0e:60:02:b0:a0:1b:
         3c:78:35:fb:cc:58:be:95:da:7d:65:57:e8:9a:02:27:cc:60:
         78:65:07:d2:74:83:7f:6a:e5:74:4f:a4:2d:56:cb:79:58:d9:
         1d:03:43:7c:cf:43:24:8f:b1:f1:c0:8f:83:4a:83:35:a9:e3:
         52:1d:3e:39:d9:ed:47:bc:f4:a6:ca:0f:11:44:2e:57:6d:12:
         bb:80:d3:be:bc:47:72:3b:c4:af:99:a9:4d:95:2f:fa:30:5f:
         de:31:89:6e:45:21:bc:c7:cd:b2:b2:cc:85:1d:78:ba:8c:c7:
         0f:1b:2b:ff:f6:fa:95:41:c9:72:0a:79:aa:62:3b:18:b8:93:
         63:a2:7e:fe:cd:2d:f5:c8:60:f2:82:73:55:d2:01:de:0a:f6:
         67:4f:a1:a5:0d:55:f8:ee:8c:6d:ed:b7:95:b4:e3:ca:17:c1:
         11:52:f5:ad:5f:f1:a1:d6:47:40:8d:1e:d0:54:8e:de:f4:4a:
         59:ed:74:6b:75:cc:9c:15:17:03:ee:7e:0a:04:2b:2f:a6:e0:
         39:18:1a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:16:13 2025 by rpki-client