Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f4cbeba0-6a5e-36b6-80ee-5c2b7ca1e401.roa
File:                     f4cbeba0-6a5e-36b6-80ee-5c2b7ca1e401.roa (raw, json)
Hash identifier:          ZrRjDHY9jOBUi85fGq3LSXt2WmLxFm7Q3N3dIrpSpGE=
Subject key identifier:   51:B5:B8:E8:EE:50:8A:9F:E0:04:6B:54:B9:DA:44:23:46:C5:B5:5F
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285849350E846CF08923A63E3BEA00
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f4cbeba0-6a5e-36b6-80ee-5c2b7ca1e401.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1080::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:84:6c:f0:89:23:a6:3e:3b:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=fc1d6b90-9d7c-4744-b904-9821514df719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5a:df:70:a7:5a:34:87:e5:f5:43:b8:82:6e:
                    d9:31:b3:3e:9c:2b:88:ce:fa:50:f4:d7:97:21:44:
                    a1:22:1c:2f:55:a4:10:1d:f6:25:6b:71:75:3d:42:
                    84:d9:f6:e4:b3:9d:43:26:00:d1:1d:aa:37:5d:fa:
                    78:dc:22:50:bd:b0:df:04:6f:bd:b3:ff:b9:84:bc:
                    c8:2d:d1:7f:3b:27:ed:0a:06:bb:07:4c:2f:ba:0c:
                    2b:38:66:bb:b3:2b:33:e0:44:29:16:1c:ff:f7:d7:
                    16:9b:3c:33:68:27:c5:5c:bc:0f:5c:47:a6:52:ba:
                    72:57:c1:b7:1f:2b:2b:5a:7f:cd:cd:84:33:78:66:
                    3a:e6:25:ee:d0:93:a4:09:43:cf:29:b5:bf:7f:b5:
                    2c:a8:83:24:89:5c:2f:2e:fc:d4:3b:0c:65:a6:68:
                    0c:3e:ad:91:c5:5b:94:5d:f8:33:db:84:0d:82:40:
                    cf:8c:8d:50:90:04:62:9d:10:d7:b4:48:70:75:e5:
                    b6:ab:1a:b0:20:1a:07:2f:60:34:dd:88:0d:f9:3d:
                    1b:96:30:aa:db:0e:a1:7b:f4:f6:bf:57:e4:bc:5e:
                    42:a9:42:71:e9:2b:ed:ae:b5:a3:82:95:cb:f1:5a:
                    2d:5d:6c:59:6a:44:5e:16:52:0d:64:cb:fe:96:49:
                    e0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B5:B8:E8:EE:50:8A:9F:E0:04:6B:54:B9:DA:44:23:46:C5:B5:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f4cbeba0-6a5e-36b6-80ee-5c2b7ca1e401.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1080::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3d:f5:83:01:ff:01:b8:a8:8e:ac:cc:56:49:f3:f3:b0:0d:
         46:1f:d9:96:cf:17:6b:37:5e:4b:ab:19:bb:11:72:54:d3:b3:
         bd:02:29:0c:fa:3e:54:85:31:e5:c0:ba:f7:b4:44:39:63:9b:
         d5:0e:3c:fc:b3:69:0a:3f:64:88:e8:83:7f:92:2c:b1:30:72:
         ab:a9:7f:70:c5:6b:15:92:44:ba:12:75:23:fd:3c:1e:50:04:
         28:ac:5f:56:7f:10:9c:ce:26:15:88:ed:a0:55:92:f1:db:de:
         98:fb:b4:69:0f:48:96:cc:cf:03:17:2f:5c:66:4d:3f:44:b0:
         89:47:dd:71:38:14:f8:dd:64:d9:69:98:ae:58:4b:06:72:51:
         b8:d4:73:df:d9:da:55:5e:cd:8d:05:a2:90:e0:d2:5b:7c:12:
         ce:74:16:39:c4:ce:5e:c5:de:9b:8b:78:d0:6e:3b:7c:db:a9:
         4e:e4:20:0c:12:3b:55:20:ec:b5:ed:15:de:55:84:dc:f7:71:
         b7:ff:0c:a5:49:60:e8:f4:56:68:ef:eb:6f:d4:6f:ee:ce:e6:
         32:4c:cf:8c:d0:ad:8d:cb:0f:65:bc:be:6d:a9:84:8c:c2:dd:
         88:d2:76:f5:38:c4:e0:a1:72:1d:e9:47:2f:aa:96:f6:59:73:
         f3:bd:fa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:34 2025 by rpki-client