Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/400ab649-3959-3e08-8eb1-04630167fca9.roa
File:                     400ab649-3959-3e08-8eb1-04630167fca9.roa (raw, json)
Hash identifier:          tJxSd8R3ZKBu/WlXf1ZtmtpUwPArP1x1ZOcCqJ2CkhY=
Subject key identifier:   C2:B3:C6:AE:BB:62:53:56:F9:78:07:54:95:C2:FA:81:B4:5E:8A:67
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F4328584891DB2DA69847C9813815EB80
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/400ab649-3959-3e08-8eb1-04630167fca9.roa
Signing time:             Fri 17 Jan 2025 02:00:40 +0000
ROA not before:           Fri 17 Jan 2025 02:00:40 +0000
ROA not after:            Thu 17 Apr 2025 01:00:40 +0000
asID:                     53727
IP address blocks:        2602:f982:10::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:91:db:2d:a6:98:47:c9:81:38:15:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: Jan 17 02:00:40 2025 GMT
            Not After : Apr 17 01:00:40 2025 GMT
        Subject: CN=139374b8-747f-46ee-a5a4-0bb7c21fab62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a2:3c:75:11:10:22:cb:c3:74:7d:df:b3:09:
                    b7:5a:f0:35:05:37:31:71:18:03:ef:3f:b0:1c:2a:
                    d9:bf:83:24:b5:7e:08:a0:da:ae:01:55:e6:bf:fb:
                    d5:80:49:d4:ce:f4:2d:21:91:45:f9:61:ee:77:3c:
                    41:d2:98:6d:d3:91:da:f0:6c:b9:a6:95:04:b2:92:
                    b2:19:4f:5d:1c:6a:88:bb:ff:96:38:ae:36:cb:18:
                    12:d7:e2:68:4f:87:9d:8e:bc:1c:d4:93:42:fb:f8:
                    19:94:fb:45:fd:68:b6:e7:bc:9f:5f:30:1f:84:9a:
                    ff:1b:40:52:3b:4a:cd:fc:6d:1c:d1:ad:81:f1:87:
                    43:7c:dc:cc:88:6f:7a:1c:80:0b:ab:4d:57:7d:0b:
                    fe:ab:fb:8b:b4:8b:31:7d:5a:bc:06:dd:f3:b0:c8:
                    3f:74:ba:4e:70:e1:02:ae:f4:f0:37:27:79:ca:f8:
                    aa:ba:ad:b6:75:d3:ae:6a:0d:2c:c6:36:20:dd:c1:
                    7b:f3:f7:16:b0:cf:23:f3:df:0c:48:19:29:ce:5b:
                    5c:6b:fa:50:35:45:65:9d:34:69:c7:4d:77:ec:df:
                    65:1c:40:de:19:d2:0f:fe:6f:8c:a1:b9:c7:fa:0f:
                    45:a8:14:31:81:64:1c:9b:8c:52:ed:c1:35:da:95:
                    77:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B3:C6:AE:BB:62:53:56:F9:78:07:54:95:C2:FA:81:B4:5E:8A:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/400ab649-3959-3e08-8eb1-04630167fca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:22:26:a9:c7:30:a9:09:83:b0:f6:a2:2a:f1:af:30:d4:b2:
         b1:65:84:14:20:7d:9e:7e:7e:e5:65:58:a9:67:a0:6c:81:91:
         38:e4:29:ef:77:e0:0d:a5:fc:68:4c:a4:7b:3d:e1:74:e4:b2:
         0c:fd:87:b1:75:62:f9:e0:25:83:c0:25:9b:a8:15:e2:ad:8c:
         d4:a4:fc:33:d3:3f:c0:e0:b5:89:94:d3:ef:7d:c5:4f:73:fe:
         ac:78:58:54:4e:81:b1:66:3e:76:c7:a5:7f:07:b0:d3:66:d0:
         77:ad:35:a2:56:08:ca:f5:61:bc:58:ae:c5:27:f4:57:38:64:
         e7:33:d9:68:27:15:aa:1c:ff:50:48:ac:3e:28:a2:20:a5:d9:
         00:b5:3e:43:5b:ce:5b:c7:05:a3:9e:41:8b:40:79:7d:d9:1e:
         85:38:f5:e0:3e:35:7b:ed:80:50:3f:7d:1a:25:d1:81:6b:0f:
         9e:ff:62:e1:f6:60:67:eb:2a:f7:3d:a1:3c:fd:76:69:e3:38:
         92:2a:b4:fd:26:a2:59:59:32:67:3c:62:45:5f:4e:3e:a8:47:
         e6:e8:60:df:d5:7a:69:fe:4a:43:3d:22:64:7a:fc:69:d5:f5:
         44:9c:e0:25:33:a6:bf:90:ef:6d:4c:dc:61:1b:a8:ea:41:84:
         68:04:63:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:12:17 2025 by rpki-client