Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51299e71-5cab-4079-ade6-d89a8ba57a1d/177dc64a-a2ae-3def-810f-bd7e56b9e2a4.roa
File:                     177dc64a-a2ae-3def-810f-bd7e56b9e2a4.roa (raw, json)
Hash identifier:          oebgbvEK7ftFlSa03cmiv12X2lxRTErzcvMXT5RVydo=
Subject key identifier:   E4:67:E2:54:C6:20:07:5E:59:5E:0A:8F:A9:52:CA:D5:44:A3:4A:03
Certificate issuer:       /CN=51299e71-5cab-4079-ade6-d89a8ba57a1d
Certificate serial:       010D0C9F4328583E08669648514FF31DFCADDD80
Authority key identifier: EF:1F:D0:D4:F6:2A:82:2E:EC:20:54:9B:9C:E7:78:A9:6C:DB:B1:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51299e71-5cab-4079-ade6-d89a8ba57a1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51299e71-5cab-4079-ade6-d89a8ba57a1d/177dc64a-a2ae-3def-810f-bd7e56b9e2a4.roa
Signing time:             Wed 25 May 2022 20:29:36 +0000
ROA not before:           Wed 25 May 2022 20:29:36 +0000
ROA not after:            Tue 28 May 2024 04:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:500::/48 maxlen: 48
                          2602:fc3b::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:08:66:96:48:51:4f:f3:1d:fc:ad:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51299e71-5cab-4079-ade6-d89a8ba57a1d
        Validity
            Not Before: May 25 20:29:36 2022 GMT
            Not After : May 28 04:00:00 2024 GMT
        Subject: CN=6d2a7989-1a08-48b0-a046-c02cd43a118d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fd:f6:a6:d9:66:cb:73:a7:7b:cf:29:f5:db:
                    35:65:ad:6f:03:53:82:77:9f:3a:e4:62:97:78:0b:
                    16:8c:c9:3f:59:49:1d:1b:bc:f2:4d:56:9a:0b:4c:
                    a9:42:85:19:b2:bf:31:75:f9:be:f1:ab:3d:f6:f0:
                    ad:46:9a:51:bc:ce:8e:9b:8d:a2:57:5c:e5:03:78:
                    0d:05:fd:3c:0a:19:e3:7d:39:3b:c7:00:21:cf:a3:
                    be:60:14:12:1b:45:96:cc:8b:4a:b7:cf:8f:ee:2f:
                    b0:9d:c5:47:b2:3f:f0:50:1d:70:8e:2d:66:f2:12:
                    f3:fa:d8:5c:f5:04:e1:92:1f:46:6d:c0:7c:b8:f5:
                    b8:8d:9c:22:25:25:95:c2:4b:57:42:90:18:9d:00:
                    6c:dd:52:0b:ed:b9:f9:db:59:aa:dd:1f:ad:8e:c2:
                    ec:eb:48:d7:b7:d0:d6:f2:10:77:57:e8:74:ef:b4:
                    74:23:2d:5f:70:ca:fa:00:ad:60:c7:3e:40:17:8d:
                    2c:64:56:bb:de:c7:d9:4a:75:94:67:f5:01:4b:5b:
                    82:2d:ad:24:8e:d0:d2:3d:57:8a:20:02:13:1b:de:
                    86:80:56:9d:b4:3d:47:d6:16:ff:dc:17:3d:99:c0:
                    41:31:f4:4c:8e:e3:ff:e7:e2:c7:9f:ed:b5:97:88:
                    df:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:67:E2:54:C6:20:07:5E:59:5E:0A:8F:A9:52:CA:D5:44:A3:4A:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51299e71-5cab-4079-ade6-d89a8ba57a1d/177dc64a-a2ae-3def-810f-bd7e56b9e2a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51299e71-5cab-4079-ade6-d89a8ba57a1d/51299e71-5cab-4079-ade6-d89a8ba57a1d.crl

            X509v3 Authority Key Identifier:
                keyid:EF:1F:D0:D4:F6:2A:82:2E:EC:20:54:9B:9C:E7:78:A9:6C:DB:B1:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51299e71-5cab-4079-ade6-d89a8ba57a1d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:47:b7:62:26:2b:5f:5a:f6:02:24:39:7d:6e:58:43:52:63:
         80:84:93:74:ef:88:2e:a9:a0:10:41:f5:d9:f1:7d:1d:58:16:
         7f:b6:48:0d:79:1a:8b:f7:82:5d:7a:92:28:bf:ee:15:78:d0:
         1a:9b:a5:50:bd:8e:14:4d:12:bd:99:d1:3b:26:09:48:95:32:
         50:31:33:2c:79:15:75:6d:aa:40:93:e3:01:88:4b:8c:28:05:
         7e:b4:73:f6:cd:65:ce:65:d2:2f:09:d2:b5:9a:ca:83:84:41:
         83:26:c3:d9:9a:d1:02:e0:78:64:24:e6:b8:a8:f8:26:01:19:
         71:19:5e:f7:8b:7b:ec:c3:af:01:e2:5c:92:e4:ca:e9:6c:5f:
         c8:de:fe:c6:3c:22:7a:03:8d:23:3c:2b:70:e4:88:9c:fb:70:
         30:b4:99:8d:91:03:66:ea:40:c2:61:d2:f7:27:8a:a0:a0:da:
         de:34:5a:07:cd:81:c3:aa:a0:ee:5b:1c:b3:9f:c8:f6:9d:88:
         16:e5:70:24:85:49:5c:f4:a2:ce:91:4b:bd:a5:32:1e:24:59:
         c3:02:80:43:2b:c5:72:15:52:6b:7d:8c:0a:02:86:49:23:38:
         88:61:26:2f:c5:ae:54:46:a2:70:05:8d:9b:9a:ef:31:f4:94:
         e8:a8:f9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:56 2024 by rpki-client on console-fra.rpki-client.org