Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/777fde58-8e7a-3dd5-8e57-7271872dde46.roa
File:                     777fde58-8e7a-3dd5-8e57-7271872dde46.roa (raw, json)
Hash identifier:          iMfdMTk8xLOy1XqSGlN2MVUwMcEiaSs0+CGNdJHIBfE=
Subject key identifier:   B0:2E:60:6A:34:42:59:42:4C:E2:90:FF:3C:3D:8C:A8:5E:1E:D3:AE
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848D211296C67319DE65D980300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/777fde58-8e7a-3dd5-8e57-7271872dde46.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        2604:cb00:19::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:29:6c:67:31:9d:e6:5d:98:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=044d280c-8a0d-482e-910e-1ea60fd543e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ef:38:3f:49:f8:30:e5:1d:fb:1c:56:ab:db:
                    ad:07:80:aa:f6:10:39:4b:46:f1:fa:4b:b2:cd:46:
                    be:1f:a0:60:71:0b:8c:3a:90:e2:7d:4a:b8:1b:2a:
                    08:ac:73:ae:c1:44:9b:f2:5e:8b:7d:5b:6c:3a:d4:
                    02:c8:f2:44:ca:50:27:42:76:49:ee:98:71:c4:45:
                    e8:f0:1e:05:8a:c1:d2:e1:3f:19:14:36:e0:98:0d:
                    e4:c2:84:74:ce:c5:cc:ea:99:d3:0d:0c:d4:53:3a:
                    ed:ad:1a:e4:7e:26:f2:1d:bb:0c:c4:2c:24:fb:0a:
                    5a:68:53:8c:2f:3e:8e:9b:0f:8e:64:88:d9:98:3a:
                    bb:13:b6:fc:a5:a2:67:57:a4:f6:00:91:c2:44:d4:
                    55:11:4c:59:4d:38:37:88:f7:13:88:f0:bf:3e:3a:
                    1d:42:27:0e:f0:f3:6a:30:21:dd:0f:e0:15:1c:ea:
                    cf:94:2f:be:b5:ec:6c:c6:67:e4:b5:22:fa:00:63:
                    b9:df:53:0b:81:78:a6:51:54:ba:1c:5c:d8:90:91:
                    99:bf:d0:90:28:1e:01:31:ed:d5:63:a9:60:9c:88:
                    74:0e:a0:16:21:33:0b:f3:a0:b2:31:8b:cf:6c:26:
                    27:c4:b1:b4:3e:ce:3c:d7:a0:44:d0:cf:eb:aa:dc:
                    ad:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2E:60:6A:34:42:59:42:4C:E2:90:FF:3C:3D:8C:A8:5E:1E:D3:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/777fde58-8e7a-3dd5-8e57-7271872dde46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:19::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:88:9a:de:0c:8f:b1:5a:ac:fd:a1:50:a1:62:f1:d4:d8:9f:
         bb:7a:f4:c2:7d:45:8e:8b:fe:6a:31:e4:5a:dd:ff:e0:a7:64:
         33:f7:78:29:c6:91:e9:49:ed:2d:e6:5c:b3:83:06:e0:a3:d1:
         1e:37:56:e0:57:89:84:2a:e8:f9:b3:dd:d4:e2:e8:b0:00:fc:
         0d:81:45:e7:6d:bd:58:ab:25:87:f5:58:cc:0b:83:d7:58:9b:
         39:dc:52:2c:fa:00:d8:bd:da:59:78:94:ab:b7:e2:6e:36:7e:
         c3:7d:30:85:89:42:a1:02:ea:6d:45:34:04:37:30:3f:e8:06:
         9f:ba:ef:c7:fe:02:0f:bc:f9:ef:ac:fd:ec:71:da:96:9d:9e:
         2a:9c:54:33:e3:13:b9:84:35:22:cb:06:b0:81:8f:ea:ad:85:
         d5:3c:88:c7:d2:db:8e:1f:e0:b9:77:d3:15:90:29:39:9e:fd:
         08:97:cf:04:81:09:63:86:2f:42:27:5d:3c:27:5e:4f:4e:23:
         3a:d9:b7:90:b2:a7:10:7a:55:20:0a:e2:c3:fe:3e:06:83:2a:
         55:98:b3:1e:68:05:d5:83:1c:61:f9:b0:1c:d8:91:17:28:83:
         a4:a2:24:f8:b9:97:47:f9:c7:6b:bb:aa:67:ff:59:27:46:ed:
         3e:df:ac:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:33:16 2025 by rpki-client