Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/1558c4ce-1cab-3eff-ab0c-701075390e2e.roa
File:                     1558c4ce-1cab-3eff-ab0c-701075390e2e.roa (raw, json)
Hash identifier:          7Nkg2YO1qpr57j5Us0ufFrOrsNlfHuKYEI7PpRnJBt0=
Subject key identifier:   B8:75:92:44:25:2B:56:51:4F:E6:56:C7:35:64:62:EE:57:11:47:CA
Certificate issuer:       /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
Certificate serial:       010D0C9F4328584886B0797A07C8BDE5C4739C80
Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/1558c4ce-1cab-3eff-ab0c-701075390e2e.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     203314
IP address blocks:        2602:fbda:900::/40 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:79:7a:07:c8:bd:e5:c4:73:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=7f56a12a-cf3c-4ab0-9922-fc207e338d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:87:bf:02:c0:f1:d3:35:b6:13:2c:a9:3c:85:
                    79:8a:7c:49:ec:48:b2:62:47:f9:37:fb:5d:45:0b:
                    ef:91:31:15:f3:86:56:4b:a5:c6:77:2f:01:a7:0e:
                    3a:34:bd:a3:4a:99:b6:fa:60:66:b4:b0:c3:0e:6f:
                    96:3e:77:51:91:0d:7b:90:1f:e9:5d:51:96:29:cd:
                    e5:96:17:f4:ac:fb:4a:7d:68:02:18:4e:c5:b5:a9:
                    1f:4c:e1:af:ad:3d:fe:3f:bc:ca:f2:be:ee:94:d5:
                    1a:72:40:c6:cc:6a:b2:5c:b0:45:18:c2:fe:fc:8e:
                    92:d0:2e:7d:db:5b:69:62:66:7f:e9:c6:3f:ac:70:
                    e7:e1:db:df:97:c5:fc:b2:78:76:27:58:57:48:7f:
                    06:5c:c1:f0:d3:54:04:f3:40:47:7e:27:7d:06:62:
                    91:ff:9b:4b:43:c0:c8:0d:f1:8c:a5:f2:3a:9e:02:
                    e3:4b:47:e9:45:38:d8:85:b8:56:da:b2:4c:0e:4a:
                    17:2f:01:6f:bf:3a:3c:1e:35:68:7c:4d:a8:a3:7c:
                    4f:7f:c0:f2:11:38:24:1f:f0:63:ce:51:17:74:b0:
                    71:43:69:ea:b3:6f:c1:8a:eb:ca:68:91:d6:6d:a3:
                    3b:76:8b:a1:3d:ab:6c:e2:be:81:f9:27:b0:8f:b2:
                    4f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:75:92:44:25:2B:56:51:4F:E6:56:C7:35:64:62:EE:57:11:47:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/1558c4ce-1cab-3eff-ab0c-701075390e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl

            X509v3 Authority Key Identifier:
                keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbda:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:1d:79:3c:5d:61:8d:c2:6e:4b:1c:b0:e6:f3:2d:f0:c1:8e:
         87:cb:db:79:2a:f2:be:79:6f:bd:60:97:23:5c:fd:7e:a3:dd:
         38:b0:cf:a1:79:ee:55:c3:5f:a7:73:ff:a1:4f:b9:08:a4:16:
         dc:04:fd:3a:4b:4f:a4:f8:6d:aa:1e:26:2f:8a:75:32:db:f4:
         fc:ff:18:2c:cf:6c:39:59:95:8c:9d:42:e9:d9:df:0a:65:d4:
         6d:2b:a6:db:00:38:b4:6c:3e:37:b8:13:f8:37:1c:ef:22:c8:
         59:31:70:58:08:ac:8c:59:12:36:12:a4:1a:a0:9b:b8:ab:bb:
         09:26:43:c8:1f:6d:04:84:6d:d5:a6:be:1e:04:ba:4f:f9:8d:
         88:af:a6:57:e0:74:07:7a:81:03:76:95:01:94:f5:9c:8a:09:
         44:6f:a2:43:f0:62:32:79:74:4c:34:8a:f9:5c:cc:fc:a5:ea:
         15:d4:9b:9d:a6:59:73:f5:06:1f:67:ef:f7:ad:54:c8:47:93:
         ab:75:bc:76:19:c9:fa:e6:cb:8b:ec:8a:87:fc:95:b5:19:5d:
         45:d9:a1:a6:26:8a:87:7b:ef:f4:3e:36:e9:1c:bb:b2:1a:b1:
         66:f1:f9:04:1d:8d:2c:f1:fe:98:9b:45:e8:06:6b:22:76:98:
         1e:84:6b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:52:09 2025 by rpki-client