Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8333a007-1b4a-3ea6-bbc0-c37ac5d450ee.roa
File:                     8333a007-1b4a-3ea6-bbc0-c37ac5d450ee.roa (raw, json)
Hash identifier:          wuOp2VZDrjGgCtwV8MDGIEIU2cYgXE/HrxtmupLd0Ao=
Subject key identifier:   73:DF:E9:12:F6:E7:41:EE:E5:7D:93:36:9C:A4:9D:C3:0F:30:1B:B8
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849403958522460505C167F1540
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8333a007-1b4a-3ea6-bbc0-c37ac5d450ee.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:4ff0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:58:52:24:60:50:5c:16:7f:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=ce3f0dd5-e2a7-48ed-95f0-8f3e479c56cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:b7:25:08:f9:40:3f:60:68:47:b3:11:7d:
                    bc:e7:a3:52:ec:83:e7:9a:3c:e8:c8:f1:46:e8:07:
                    27:a0:68:60:bf:ca:b2:e0:23:b3:90:32:a7:71:79:
                    41:ae:bd:ad:c0:c1:32:56:5b:f6:19:b5:b5:e5:4a:
                    d0:ef:74:74:40:d7:32:8d:e7:53:fc:42:8c:02:4b:
                    de:ee:d2:14:16:97:88:b4:6e:10:03:39:a5:92:d0:
                    a5:19:09:1e:b6:14:21:fb:c8:12:20:9f:c5:81:d1:
                    76:0b:4a:b6:9b:06:89:49:d2:0a:8c:08:f1:17:ce:
                    93:18:ca:75:b3:83:3e:95:19:f9:5c:df:45:c5:fb:
                    5a:53:65:c5:89:53:9e:f8:64:bc:84:b9:6a:bd:41:
                    4c:f9:11:46:2f:b3:12:7a:d6:2e:90:8e:71:95:f7:
                    40:e4:12:75:ad:ed:3a:20:38:39:7c:d8:7d:29:e6:
                    1b:00:d4:54:8d:36:33:9a:37:21:c8:ba:ec:71:d5:
                    9a:3c:09:28:4c:92:a8:9f:dd:d3:3a:8b:39:0a:d0:
                    3e:9c:fc:4f:2c:54:46:81:fb:be:f8:91:43:60:49:
                    67:ee:4f:f0:2c:82:d4:7c:2c:d3:a9:8c:2f:7b:47:
                    14:0c:59:59:08:2c:42:1a:e7:ed:4e:ed:6c:b4:4b:
                    09:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DF:E9:12:F6:E7:41:EE:E5:7D:93:36:9C:A4:9D:C3:0F:30:1B:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8333a007-1b4a-3ea6-bbc0-c37ac5d450ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:bb:15:0f:0c:98:4a:ff:95:30:8e:3a:b9:bc:d5:89:b9:b2:
         fb:99:f9:ed:de:43:3d:94:40:14:ac:ce:b8:4f:3f:c8:88:1d:
         30:9b:db:e7:b8:a3:fe:95:6f:9e:4f:d2:db:be:17:ac:c9:6b:
         03:ac:20:4a:81:8e:49:3a:ee:bb:33:11:8e:0b:01:dd:3b:2a:
         63:60:df:9d:4a:9d:11:c3:75:90:5d:7f:44:6d:65:eb:c2:b9:
         f9:6c:0b:a3:7f:21:13:63:37:c8:49:74:7d:d4:0a:11:0f:cc:
         5c:ce:68:85:46:4e:00:4b:76:79:b0:4d:a6:bc:19:10:ab:4a:
         e1:7a:3d:5e:d5:5d:21:fa:ad:37:63:3a:9b:2b:60:f8:f2:da:
         3c:ea:86:03:d6:32:a7:d3:2f:24:b9:0b:b1:c7:6c:4f:0e:7c:
         56:84:f2:f1:c4:0f:af:23:1c:e6:ce:86:05:b1:c4:2e:44:ce:
         ac:bc:a2:72:c6:45:9b:27:f7:e6:79:de:a3:ee:a2:ac:ba:b8:
         b8:de:eb:19:b0:e5:7a:e4:9b:96:76:de:66:95:25:6b:b3:87:
         31:09:0a:49:fc:71:f8:b2:e5:d7:89:86:70:13:75:32:f4:c5:
         a7:a5:ce:a7:1e:f4:21:5b:42:d4:86:09:4a:40:68:2b:d1:10:
         62:b1:58:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:46:38 2025 by rpki-client