Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/22155043-6f19-3c19-b951-75ed01fc47ae.roa
File:                     22155043-6f19-3c19-b951-75ed01fc47ae.roa (raw, json)
Hash identifier:          3u7/RCSd7IJCFzIpGN7HrMyY2koIcqLSOHLhU0h4wOo=
Subject key identifier:   8B:98:4F:A0:EF:35:A5:60:98:F1:74:9A:F5:17:CF:00:F8:4E:DC:7C
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584894A5ED67316A72EA32C05B80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/22155043-6f19-3c19-b951-75ed01fc47ae.roa
Signing time:             Sat 18 Jan 2025 02:00:38 +0000
ROA not before:           Sat 18 Jan 2025 02:00:38 +0000
ROA not after:            Fri 18 Apr 2025 01:00:38 +0000
asID:                     11055
IP address blocks:        2605:4a80:ef02::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:a5:ed:67:31:6a:72:ea:32:c0:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jan 18 02:00:38 2025 GMT
            Not After : Apr 18 01:00:38 2025 GMT
        Subject: CN=a73daecd-51c3-4bbd-a2b0-dff72317b479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:36:0c:1c:71:97:6c:a1:6e:5d:03:fd:00:
                    bc:10:d1:d1:16:85:35:c2:3d:3a:ef:0b:8d:1c:35:
                    4e:6b:b8:5b:82:b0:cf:d8:5f:bd:f2:0e:8d:0a:49:
                    95:ee:fd:60:f1:a2:44:37:67:5d:5b:16:d6:07:d1:
                    b6:80:ca:06:4b:d3:3d:70:80:9f:49:a2:13:ad:93:
                    26:bc:74:11:f3:77:b1:54:7d:de:d0:a3:da:85:f4:
                    71:a8:f1:f2:00:e1:fb:30:5f:73:b5:d7:c7:35:7f:
                    5c:58:c3:2e:d9:87:e5:a7:1c:0d:03:d9:c8:c5:fd:
                    b7:8e:e8:e4:c8:d1:a7:79:d7:72:9d:1e:8b:2f:22:
                    53:2f:af:b9:1f:17:f5:57:6a:96:ff:b6:e2:36:0f:
                    b6:67:f3:17:63:2e:8d:7b:13:e3:07:c5:b8:54:42:
                    fe:2f:8a:f8:0c:cc:aa:8c:c9:1d:39:07:6a:f3:98:
                    44:41:5f:34:d2:b3:8a:6c:8d:3e:91:46:31:4b:07:
                    ee:eb:31:1e:1c:6f:f0:67:09:85:e2:25:12:83:c1:
                    68:28:09:ca:38:37:b3:11:73:63:05:f0:86:80:68:
                    ea:4d:45:af:4a:a0:52:09:06:cc:84:48:8f:3a:1f:
                    55:cb:6d:a3:71:12:11:11:80:22:b3:1f:df:c8:2a:
                    43:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:98:4F:A0:EF:35:A5:60:98:F1:74:9A:F5:17:CF:00:F8:4E:DC:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/22155043-6f19-3c19-b951-75ed01fc47ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80:ef02::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:70:89:d8:0a:3c:3d:73:79:b8:80:ef:a5:20:06:47:11:fb:
         2e:91:ec:f3:e9:46:65:52:6b:9a:d5:7f:f1:3b:d5:24:11:f2:
         a8:74:7e:46:e4:f7:af:25:7c:1c:d4:08:0c:d9:96:89:ad:69:
         cc:28:0b:f2:69:60:24:f1:48:ad:ef:63:70:c3:57:1f:e8:b0:
         91:fb:19:59:61:db:1c:0a:3f:c9:1f:fa:99:9d:45:ff:b1:e7:
         2e:fb:43:60:bb:4b:df:6e:16:7d:2b:e5:90:98:28:c1:38:05:
         dd:1f:4f:a0:a3:7b:28:a5:ac:66:dd:ce:5d:bd:54:a4:d6:ac:
         55:21:1f:4c:a9:9d:c3:2e:57:08:73:c2:89:03:87:93:bb:79:
         39:c9:4f:68:9c:96:08:8a:4f:bd:69:f3:c4:a8:f6:ad:2a:11:
         e7:ef:7e:4f:94:c6:0f:5d:2e:ee:b3:a0:a6:d2:7b:6d:84:8f:
         2f:b6:ad:ca:ff:08:7c:b2:7c:7f:30:41:0e:09:eb:30:6b:d6:
         b2:cf:94:b9:c2:a3:6f:0b:fd:ae:a9:06:46:33:bb:37:8f:8f:
         c2:8c:2e:ad:4c:68:49:80:9f:8d:ad:40:f3:67:ff:10:fe:4e:
         65:8e:98:67:a7:6c:9a:0f:d2:84:8c:3d:83:1a:a6:54:87:1f:
         ff:ef:11:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:49 2025 by rpki-client