Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/10a4ae85-a3a7-3e82-8fe2-4844df5f5016.roa
File:                     10a4ae85-a3a7-3e82-8fe2-4844df5f5016.roa (raw, json)
Hash identifier:          prfh0IbolzrQ1KqXu12qYxrgrNLl48HkQqFrJN/PBSM=
Subject key identifier:   91:B7:21:51:1A:A0:57:41:2D:34:F9:82:EE:2E:C7:A7:35:AC:9D:07
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849403972BBC1EE4FA7602B56C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/10a4ae85-a3a7-3e82-8fe2-4844df5f5016.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:5740::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:72:bb:c1:ee:4f:a7:60:2b:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=6dff630d-dd7d-4bab-9f49-41126f1f04f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:16:4a:cf:27:56:85:3d:a6:24:63:be:b4:fc:
                    03:ef:7c:3d:bf:16:62:8c:ed:a6:19:ce:7d:fd:d9:
                    b8:a9:b1:59:ec:74:dc:a2:4c:8c:11:7a:ee:93:7a:
                    42:62:f7:0b:13:3d:1f:d4:ba:23:68:65:3f:ac:f0:
                    42:dd:5e:fd:44:80:0f:d6:64:ad:53:0e:2c:f4:55:
                    48:14:ce:66:20:75:9e:c5:81:dd:d4:96:24:d8:62:
                    ae:a9:ae:b7:f5:9e:35:2b:aa:ac:ff:1a:fd:ca:02:
                    80:85:dd:11:cc:13:e5:26:ab:7c:d3:fb:3a:21:33:
                    dd:ee:de:42:9f:c1:42:c0:03:d0:15:ac:43:15:42:
                    96:f2:49:2f:43:32:36:3d:93:3a:08:53:af:74:f8:
                    f6:58:2f:cf:fd:04:ef:84:b8:01:75:f7:08:6b:88:
                    a5:72:e3:d4:ba:d5:3a:be:aa:86:8d:29:17:4a:97:
                    c0:f3:c6:5a:ef:b5:33:f6:cd:9d:12:02:b2:c7:d5:
                    97:85:7a:ff:27:94:e1:4b:cd:a6:85:6d:0c:2c:b5:
                    bb:a5:6f:b5:23:d3:d0:42:28:de:31:e0:8f:3f:47:
                    1a:fb:d5:ba:52:b3:57:1d:fc:c3:d0:f2:45:ec:a2:
                    17:23:6c:4f:22:a5:1e:62:0b:1c:22:9b:32:61:b9:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B7:21:51:1A:A0:57:41:2D:34:F9:82:EE:2E:C7:A7:35:AC:9D:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/10a4ae85-a3a7-3e82-8fe2-4844df5f5016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5740::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c4:85:40:4e:8e:48:e2:46:47:fa:e8:24:f7:5c:3b:13:82:
         48:84:12:93:c8:c4:3f:1f:1f:3e:b3:80:82:bc:20:f0:a6:99:
         4d:5d:7a:c5:5a:b4:df:9d:e7:13:aa:cf:3e:66:87:06:72:05:
         f1:79:38:5f:ad:05:b8:8d:66:90:ad:ae:d3:b9:3b:49:57:ab:
         f6:4c:e4:05:a5:f4:a8:12:ef:31:c7:d6:4a:ab:94:a7:bd:6f:
         c3:cd:07:cb:f3:55:d2:b4:1b:16:e0:8f:0e:15:1a:62:ec:57:
         08:69:e8:1b:e7:fd:71:b2:10:aa:5e:44:d3:4e:4a:6a:83:ad:
         3c:d0:c5:ea:4e:1b:e5:b1:c2:2a:22:a2:ba:af:f6:5c:cd:ae:
         10:52:72:61:be:e8:48:7f:f2:31:a0:8d:fe:22:4b:71:08:30:
         d0:d5:ce:ee:be:b0:38:e9:34:23:85:9b:a3:00:6b:96:39:53:
         91:1c:13:58:cf:75:fa:10:b6:2a:72:8e:43:df:ce:24:d8:c5:
         78:c1:d2:b6:6a:7b:8a:18:8e:b4:ba:ae:33:ec:8c:e1:10:14:
         bf:6a:14:4f:6d:15:93:fb:c4:04:39:07:3a:ed:2d:21:7f:2d:
         06:9c:82:66:78:e2:5f:4e:2f:34:c5:63:74:71:b4:0e:ad:44:
         5d:a3:16:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:39:22 2025 by rpki-client