Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa
File:                     82e546db-2ee7-3746-a4b8-5528ff26ec78.roa (raw, json)
Hash identifier:          7bkowipZoTZlHXS1ju96c8tfESahrXhSfjqfAHv+p5c=
Subject key identifier:   2E:85:FB:6A:13:FD:E7:76:59:8C:68:8B:B9:4D:5F:84:78:FC:52:0F
Certificate issuer:       /CN=b824dfb2-be33-4946-af95-2296acd823af
Certificate serial:       010D0C9F4328584908817A123A947B614268F500
Authority key identifier: 39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     10737
IP address blocks:        2607:4940::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:7a:12:3a:94:7b:61:42:68:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b824dfb2-be33-4946-af95-2296acd823af
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=5c1a568a-9a65-49a9-9fb0-8aa0024d09b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:4e:2d:b3:56:9e:e4:a3:26:02:79:ad:c6:
                    3e:21:3c:eb:2f:8e:b1:2d:de:3a:f0:d5:af:dd:00:
                    5c:31:4a:cb:11:72:f8:f5:c5:07:4a:71:4d:ed:8c:
                    0f:f2:37:75:c4:e4:19:ac:71:e7:5d:db:51:aa:0e:
                    87:a8:64:f1:0b:ea:48:8e:5f:9e:ab:67:ef:be:fb:
                    57:2a:42:c2:38:d7:33:39:56:3b:37:95:c8:2d:07:
                    b8:8b:08:94:5e:9c:cc:2e:0c:85:16:d5:53:92:48:
                    40:88:16:67:c4:25:be:22:2b:84:c1:f9:6c:21:b4:
                    b4:47:9e:03:dd:4f:38:e0:f2:8e:48:7b:65:9f:59:
                    aa:47:28:c5:f3:f6:c3:c9:a1:90:f0:11:57:cd:3f:
                    0d:14:f6:4b:bc:86:1b:a9:8c:c8:40:16:e4:d3:5d:
                    37:bf:4a:38:f0:f6:96:3c:4a:9f:66:a5:be:9d:5b:
                    f7:24:95:01:8c:7d:0d:95:c3:f5:86:9b:74:17:67:
                    f1:69:22:cc:3d:b5:e4:d1:96:6a:8f:ea:67:4e:49:
                    0d:7d:df:00:d1:3d:68:d0:40:71:bd:6c:75:d2:8f:
                    62:5c:df:95:c7:ee:2e:15:87:b6:0e:6b:fd:9b:10:
                    f7:cd:6e:f9:33:e7:06:9f:ac:20:bd:ab:24:bd:f3:
                    3e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:85:FB:6A:13:FD:E7:76:59:8C:68:8B:B9:4D:5F:84:78:FC:52:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.crl

            X509v3 Authority Key Identifier:
                keyid:39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:53:7c:7f:4e:e4:22:29:58:c6:23:df:45:ef:6d:3d:23:b7:
         67:c4:b3:25:c6:27:eb:a8:2a:1f:af:32:22:aa:37:41:32:3e:
         46:a3:ab:36:06:ae:fa:c1:66:54:01:57:38:60:87:89:b2:7f:
         6a:77:1f:7c:a2:26:71:e8:4b:1a:0d:e9:20:8c:a3:3f:17:09:
         e9:07:f2:dc:aa:c3:24:08:95:3b:7d:f6:68:f0:0e:5d:c2:50:
         18:e3:0d:16:55:d3:f8:fd:ee:26:23:72:fc:09:31:17:d1:2b:
         82:a7:1d:af:c5:16:cd:50:aa:26:45:bb:16:6d:79:b4:8b:28:
         c7:6f:4c:bf:a1:4e:17:b9:3e:57:e7:5d:ce:c7:a5:2a:d5:3e:
         42:76:fe:1f:72:d0:09:7a:59:63:d0:5e:7d:da:69:e3:20:a0:
         d6:fe:6f:56:87:63:cf:a8:70:82:4a:85:1f:73:23:c5:2b:ef:
         66:d3:bb:b6:7c:d3:53:22:fe:d0:e6:ad:82:13:85:66:79:de:
         c7:f7:80:a4:c0:8d:e3:b2:44:9f:38:a7:d8:48:7f:e6:ec:cb:
         25:63:ce:ff:40:30:2e:d8:04:ad:82:bd:6c:25:7d:c6:b8:ae:
         3c:96:aa:aa:03:16:e2:bb:0e:f9:1b:12:66:5d:bb:7c:d5:b1:
         eb:dc:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:16:13 2025 by rpki-client