Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/47b86f2e-9a41-31e7-9b47-4e8398fe7a8e.roa
File:                     47b86f2e-9a41-31e7-9b47-4e8398fe7a8e.roa (raw, json)
Hash identifier:          /vYMmHZpiUqxkAUecQztxD9rn5P28LpD2/or4wZYM9w=
Subject key identifier:   BC:40:9E:5B:77:DE:C2:C0:4E:35:C3:78:7F:08:F6:92:17:38:64:BC
Certificate issuer:       /CN=837c453a-673f-4481-b4c4-21ece5899901
Certificate serial:       010D0C9F432858490401B748EEAE549E8EB00820
Authority key identifier: 5C:6F:74:D4:FE:AB:73:A7:EC:FC:13:4A:C5:E5:25:9D:48:14:38:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/47b86f2e-9a41-31e7-9b47-4e8398fe7a8e.roa
Signing time:             Wed 26 Feb 2025 23:20:31 +0000
ROA not before:           Wed 26 Feb 2025 23:20:31 +0000
ROA not after:            Tue 27 May 2025 22:20:31 +0000
asID:                     46475
IP address blocks:        2620:a6:2002::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:04:01:b7:48:ee:ae:54:9e:8e:b0:08:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=837c453a-673f-4481-b4c4-21ece5899901
        Validity
            Not Before: Feb 26 23:20:31 2025 GMT
            Not After : May 27 22:20:31 2025 GMT
        Subject: CN=ea8e1d6b-24d1-463d-84fd-073a003a49ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2e:77:95:b7:b5:d0:8f:95:35:6b:5b:8a:cf:
                    5e:99:52:01:f5:03:d8:5a:90:62:a2:8c:1b:9e:59:
                    1e:e9:56:c6:55:6b:99:e6:be:77:38:f0:d5:01:c2:
                    8a:8b:c8:79:a4:58:6a:07:65:f4:d1:ca:4b:5d:48:
                    d5:5a:16:cf:bd:92:05:89:5b:3a:8c:b2:18:33:50:
                    ab:5d:0b:cf:a6:1e:60:fb:3d:28:46:a8:89:d4:7b:
                    7f:7e:f6:3e:53:ad:b1:53:39:7b:e6:bb:3c:0e:4e:
                    f1:c5:84:30:06:a2:f7:fb:9a:4e:fe:ad:b5:97:e1:
                    13:52:c8:19:8b:87:19:d2:0d:d6:41:80:ce:87:f2:
                    61:32:26:ca:b8:b5:9e:aa:50:da:a3:49:f3:19:63:
                    83:b4:cd:29:b7:9c:c5:aa:fb:87:4d:80:43:f3:85:
                    33:50:23:cf:d2:cf:fa:c0:28:e0:4f:f9:80:e0:63:
                    5e:74:f1:f1:c7:18:d7:52:10:18:da:1a:6b:57:a5:
                    11:66:e1:e3:08:dd:08:7f:cd:eb:b2:9c:e8:2b:c4:
                    ec:73:85:8d:a6:6a:b0:7e:cd:b0:b7:51:73:a2:bc:
                    c4:02:10:2a:94:c8:9d:0c:32:bc:5b:29:09:f1:4a:
                    f6:cc:b0:48:43:0a:db:6c:8a:14:e3:83:87:7d:e5:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:40:9E:5B:77:DE:C2:C0:4E:35:C3:78:7F:08:F6:92:17:38:64:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/47b86f2e-9a41-31e7-9b47-4e8398fe7a8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/837c453a-673f-4481-b4c4-21ece5899901.crl

            X509v3 Authority Key Identifier:
                keyid:5C:6F:74:D4:FE:AB:73:A7:EC:FC:13:4A:C5:E5:25:9D:48:14:38:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a6:2002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:65:57:34:1d:14:01:a1:70:2e:50:4d:97:7a:4e:c7:df:0e:
         81:e2:79:ec:6a:db:6c:80:85:47:42:41:36:43:d4:8b:1d:cb:
         64:34:5c:24:c5:56:61:31:f8:d5:ae:c3:5f:c8:09:f6:b1:e8:
         29:46:34:81:49:6b:df:0e:ef:d4:be:e5:35:45:20:70:f8:51:
         8c:7a:c2:ac:f7:7f:ba:a0:22:87:94:f1:d2:e0:62:41:b8:90:
         ec:ec:f8:5a:44:37:e9:70:e7:e0:c3:49:2c:f9:f0:33:3a:6f:
         53:1c:fc:0a:49:38:fc:0c:a9:48:1d:0b:5b:a1:93:99:fe:85:
         0c:1a:f8:b4:c5:ef:88:7a:6e:a3:c0:0d:1c:ff:d8:3a:bf:e9:
         2e:c7:1d:1f:c9:5f:0a:ea:65:a9:8c:4b:24:eb:5e:d7:5e:81:
         ca:89:b4:fb:ce:5a:22:50:4d:63:84:87:8d:af:fe:c7:00:ff:
         17:59:5a:16:f8:3f:0b:c4:25:8e:6f:f8:90:6c:4a:d9:be:11:
         24:3f:92:a6:3c:6d:2d:28:93:6c:e8:e5:a0:f1:4d:25:62:da:
         e4:8e:d6:fe:c7:67:de:7f:2e:4b:e6:c4:12:f0:26:a0:fe:56:
         ef:4e:21:c3:32:ec:46:05:52:6e:84:93:21:13:2d:24:d9:70:
         92:e9:67:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:14 2025 by rpki-client