Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/e8b30198-1ebd-3d3c-ab4a-ac93c730621e.roa
File:                     e8b30198-1ebd-3d3c-ab4a-ac93c730621e.roa (raw, json)
Hash identifier:          G2RaVpDg7VMheNo2CwP9glIeC2IeaXc6JlJq5pMpWz8=
Subject key identifier:   30:53:BE:AD:49:71:0A:C1:79:89:11:43:F4:A5:96:4F:59:EE:33:78
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F432858488DAB3B5957BBD64FACAD2E80
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/e8b30198-1ebd-3d3c-ab4a-ac93c730621e.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     63150
IP address blocks:        2602:f988:89::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:3b:59:57:bb:d6:4f:ac:ad:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=829bab70-e723-4d61-9f7c-6f915fdd5d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d4:5c:7d:65:ee:a5:76:81:43:d1:bc:35:45:
                    56:4e:81:83:4f:5b:01:54:69:73:16:df:56:a8:7b:
                    5b:c7:a9:26:d7:1d:b6:cc:67:85:da:c2:3a:af:d3:
                    b2:5b:93:8b:0b:b1:7f:ae:01:a0:10:f8:bf:de:d0:
                    03:5f:71:93:e5:fe:c5:ac:ec:34:7f:af:5e:7e:ab:
                    ee:02:c8:1d:4a:22:e8:8c:dd:5f:20:8a:ae:66:41:
                    6a:f7:23:76:42:ed:68:e0:73:cd:1d:a2:fc:c6:e2:
                    86:2d:cb:8e:0d:f6:ec:69:65:0d:78:d5:f3:4a:b6:
                    5b:2b:7f:b1:01:a3:12:f3:ee:7a:e2:de:d1:d6:62:
                    c5:84:74:24:9b:67:39:ce:9a:62:0c:18:af:3f:6e:
                    76:02:e8:7e:a2:33:f4:4a:de:e8:26:38:f9:e0:d0:
                    61:cd:47:1b:af:9b:f1:08:03:b3:05:a8:47:ce:ee:
                    49:2b:a1:92:65:30:87:a4:65:e0:69:5c:bc:5b:b9:
                    3a:07:5a:28:aa:77:73:60:c2:ba:54:5d:d9:ed:45:
                    32:67:53:b3:2c:82:8c:7f:4d:11:e2:83:89:22:f6:
                    21:cf:77:34:8a:ed:38:1f:28:f0:38:20:dd:7c:d9:
                    92:be:03:db:43:7d:9b:ee:bc:06:9f:fd:92:50:cb:
                    36:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:53:BE:AD:49:71:0A:C1:79:89:11:43:F4:A5:96:4F:59:EE:33:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/e8b30198-1ebd-3d3c-ab4a-ac93c730621e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:89::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d8:60:2b:cf:db:8e:d1:c9:a3:92:2d:0a:56:68:04:5d:30:
         fc:33:ca:1b:1b:fc:7b:60:42:b7:45:9e:a6:94:df:0f:76:b2:
         2c:57:d8:b5:2c:ec:8d:c4:be:48:84:93:a8:3f:f1:c1:c8:f5:
         34:2e:43:0a:73:ac:3a:45:da:19:c9:d0:cf:7a:e5:0f:f0:c4:
         65:41:07:34:86:4a:51:14:0f:99:17:20:22:04:99:57:a4:11:
         a2:4f:10:9c:64:a1:a6:e8:89:c1:13:a0:82:bc:9c:d4:26:1d:
         29:b3:46:5b:25:99:92:ef:09:9e:de:d5:94:80:0e:89:58:0f:
         e2:73:bd:82:23:9c:8a:97:02:9f:2d:d8:76:ed:29:66:71:41:
         d3:39:ad:13:60:8c:97:1a:25:05:16:72:8e:e2:95:fa:9a:4e:
         19:40:b3:44:fb:b0:3f:f4:1e:bb:4b:c7:82:84:0a:6a:2f:39:
         ba:88:22:de:d7:e1:02:a4:ec:26:c4:43:c1:31:ea:8d:c0:0b:
         31:c2:18:36:e9:39:55:97:c1:fe:eb:a1:79:fd:3d:9b:d0:0c:
         06:54:a1:d6:55:58:7a:a5:db:06:06:2b:fe:7b:48:90:6a:74:
         32:22:54:1c:ff:09:af:ee:35:39:9c:2c:a6:bc:5d:ae:2c:c7:
         c8:37:ea:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:09 2025 by rpki-client