Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0247800a-b6db-3703-98b7-d4e37bbc4f17.roa
File:                     0247800a-b6db-3703-98b7-d4e37bbc4f17.roa (raw, json)
Hash identifier:          Mfr7fCa1QDrTrnSIAumcNVoCkBLG/PAOQrVvhBeUG6Q=
Subject key identifier:   FA:6F:7F:23:9D:D4:A8:D4:65:8A:46:02:12:07:40:30:E8:25:76:DA
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583DA149DBD4870907ACEFD74260
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0247800a-b6db-3703-98b7-d4e37bbc4f17.roa
Signing time:             Tue 19 Apr 2022 04:00:00 +0000
ROA not before:           Tue 19 Apr 2022 04:00:00 +0000
ROA not after:            Tue 11 Apr 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        2604:cb00:2d00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a1:49:db:d4:87:09:07:ac:ef:d7:42:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 19 04:00:00 2022 GMT
            Not After : Apr 11 04:00:00 2028 GMT
        Subject: CN=ca4ee8e4-c41a-4eaf-8f88-fdbb4829c130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2d:4c:24:f2:5c:44:fa:27:db:17:d9:68:3a:
                    5c:fe:50:72:11:01:b5:cf:7f:c2:28:f2:94:cf:dd:
                    dd:61:fb:5a:a3:ee:1c:bd:ca:3d:17:14:00:30:07:
                    e1:e8:39:63:98:b0:c1:e0:d4:3a:e7:cb:f4:9a:81:
                    ac:5f:b6:55:fa:a4:54:6f:5c:ae:19:6e:98:38:c0:
                    65:0e:c7:e0:18:30:30:bf:1d:e5:6e:27:3e:ce:db:
                    82:96:e6:b8:d1:60:d5:08:3b:a4:43:9c:28:3f:91:
                    6f:82:28:4d:ba:32:95:cc:f5:d0:a4:f2:8d:fb:fa:
                    d2:f2:30:b5:50:b7:48:41:c8:4e:85:80:3c:bb:76:
                    3c:5e:6c:b5:07:c0:3d:d2:1a:2f:69:ab:65:95:86:
                    94:15:cd:13:9b:28:f2:64:80:9e:02:13:ce:72:2b:
                    c2:ff:88:73:49:f8:2d:26:f9:dc:d2:88:40:7e:d8:
                    ed:b4:48:04:d8:3e:15:c5:2b:97:c7:8f:0d:da:84:
                    e8:67:70:df:ba:a0:4b:70:32:fc:14:77:ac:cb:bd:
                    63:da:d9:1f:d2:a1:3e:4e:42:0c:ac:aa:f0:c8:0b:
                    c8:70:10:3b:c1:dc:75:f7:3c:3d:71:8b:29:4f:3a:
                    a4:86:fe:2f:05:1b:ab:f5:28:9b:29:c2:5a:40:5d:
                    b0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6F:7F:23:9D:D4:A8:D4:65:8A:46:02:12:07:40:30:E8:25:76:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0247800a-b6db-3703-98b7-d4e37bbc4f17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:2d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:91:ad:9e:a4:ae:e4:5d:36:98:1e:84:6e:94:6f:82:15:87:
         c6:d3:fe:31:74:29:a1:20:cc:1b:2c:e8:5d:bc:86:22:72:37:
         07:4c:d3:59:15:0f:03:23:6e:d5:8f:87:11:b8:e6:92:24:09:
         60:75:4b:d9:02:39:5f:18:17:dc:8e:1b:73:38:68:25:3d:e8:
         e2:4a:72:8d:2f:85:7d:a2:12:eb:77:d4:4b:42:b9:bf:8c:c8:
         23:41:b9:d0:70:0c:ee:65:e6:1a:5e:9a:bf:31:a6:83:49:88:
         b0:98:39:0d:a7:b4:b2:aa:5e:06:c2:08:57:c7:69:07:06:e0:
         8e:9b:7d:63:70:91:de:97:03:67:6a:04:48:4a:af:35:f6:df:
         0e:86:60:78:8f:1c:1f:d5:8b:27:e3:2d:a2:5d:94:0c:a1:61:
         93:60:61:19:af:5b:62:ba:97:4e:bd:b9:55:7e:4b:13:e3:96:
         ad:5b:b1:c0:77:9b:47:88:a3:10:26:bd:6a:25:d0:ff:68:16:
         16:13:28:ac:dd:21:19:5e:3c:11:21:c1:43:6c:ab:5f:f8:af:
         22:27:16:fe:37:2e:cd:a5:91:a3:40:60:29:e0:31:7e:48:58:
         a4:a8:e6:27:f3:3e:57:b2:34:c2:87:62:af:77:65:b0:a0:64:
         cd:ea:23:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:51 2025 by rpki-client