Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9e293180-9035-3d49-a9e9-e8d32de86fb2.roa
File:                     9e293180-9035-3d49-a9e9-e8d32de86fb2.roa (raw, json)
Hash identifier:          ZhJUJYQZVH8H+yb8v+WO+6SMkZEk+q/hUXr2kqgJxOM=
Subject key identifier:   2F:FF:5D:BA:24:D8:8D:FB:55:C7:B1:72:08:7F:D5:73:78:71:84:BB
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584940396384C4B3AAAECC533800
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9e293180-9035-3d49-a9e9-e8d32de86fb2.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:4350::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:63:84:c4:b3:aa:ae:cc:53:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=44499ce9-d62e-40e7-9f40-ab7fd1f8ca15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:91:3a:e1:57:cc:11:f9:ed:e7:78:cb:51:05:
                    79:bd:c2:c3:5b:5d:f7:4d:60:e2:96:e6:3a:6d:28:
                    b9:dc:e1:99:0b:14:fd:17:2f:04:22:ca:60:e0:49:
                    14:4c:b9:9c:a6:fc:70:3c:06:46:51:6f:4b:60:c5:
                    7c:b1:4b:7f:02:71:1f:ff:df:f2:a7:a5:0e:fb:2b:
                    e6:45:fc:3c:22:50:d7:9e:5b:c8:0f:63:03:37:5b:
                    45:c6:92:fb:3e:3b:f4:58:5e:4a:0b:03:3f:d3:81:
                    23:8a:a2:ef:07:10:3d:1c:64:43:36:a5:1f:16:87:
                    85:0f:46:00:60:e0:5b:cb:ec:ee:5e:fd:f1:71:57:
                    cf:ce:8a:c3:bc:54:8e:9a:6c:56:f4:3e:50:50:5d:
                    f7:b3:58:13:b8:31:03:35:81:9f:bf:07:ff:f7:35:
                    5e:44:4d:cc:15:b8:b3:15:71:27:62:4c:12:06:8a:
                    c5:e0:06:35:3f:ed:2c:fa:7d:9f:08:3b:22:93:9e:
                    1c:d8:61:fb:e3:05:41:ff:81:ca:47:47:58:e3:5b:
                    0f:0f:2d:15:62:01:43:20:18:7a:3e:7f:af:df:18:
                    23:4d:e5:b7:97:57:ce:63:d2:72:b4:63:de:87:a7:
                    b0:53:03:62:38:35:29:35:5a:e8:ec:74:79:4b:18:
                    75:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FF:5D:BA:24:D8:8D:FB:55:C7:B1:72:08:7F:D5:73:78:71:84:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9e293180-9035-3d49-a9e9-e8d32de86fb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4350::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ae:04:95:2b:6a:92:4a:e9:9e:60:c4:a7:91:da:ff:38:73:
         12:4a:44:45:70:40:06:63:2f:e0:ab:e3:f1:ba:44:cb:9a:e5:
         35:61:f7:d6:b6:7d:a1:56:cc:3a:8e:01:c7:80:1b:64:1d:ea:
         ab:5d:fe:79:65:43:a3:f8:97:93:99:ca:70:1a:58:5f:05:15:
         10:78:bc:b5:b8:ce:c5:b2:d6:4a:e8:af:7b:f5:19:7e:dc:15:
         1c:37:41:9e:1d:7d:7e:1c:ab:50:e5:ee:93:24:f4:fc:c3:e3:
         82:d4:f2:b6:4b:62:3b:2d:75:ea:a4:9a:b5:02:9f:4b:19:48:
         03:6f:7b:25:ae:ee:3c:7f:26:3f:55:db:c5:e2:6a:c1:dc:80:
         94:cd:61:0c:fd:4a:1b:5b:b0:57:1d:47:a3:5e:4b:44:d6:c2:
         1e:ba:f1:bc:b4:0c:7c:4e:2b:b9:52:6c:25:1e:b0:a1:52:90:
         9b:21:ce:97:7c:cc:7e:4b:0b:f1:7d:c3:b8:c5:eb:a3:d4:40:
         87:a6:c7:52:28:c5:f5:ac:f8:00:55:53:8e:65:9e:29:cb:9f:
         47:f3:b2:82:56:bc:ef:ee:58:7c:fc:d8:e2:63:c8:4a:db:ab:
         65:40:d8:af:77:5e:d6:60:7d:11:de:d5:ab:cf:a2:ce:9b:1f:
         fe:6b:fc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:47:22 2025 by rpki-client