Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/4892a1e2-9695-369f-ab71-7848f2816415.roa
File:                     4892a1e2-9695-369f-ab71-7848f2816415.roa (raw, json)
Hash identifier:          Ww5iMG8Iq/by5Mud9m0gLOZOeKmrTrvf99Y1Nh7HP2U=
Subject key identifier:   D2:77:F7:47:71:16:90:09:BB:3F:3F:64:1D:91:86:E7:73:48:CC:F4
Certificate issuer:       /CN=de848e16-b429-4505-9234-f6d889fd1438
Certificate serial:       010D0C9F43285848D0ABAEE1712F68D557854000
Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/4892a1e2-9695-369f-ab71-7848f2816415.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     399820
IP address blocks:        2602:fc2f:f00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:ae:e1:71:2f:68:d5:57:85:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=ca635797-1cec-4025-8476-c8b238796eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:80:f5:93:82:ce:b5:f8:45:23:49:cf:c9:aa:
                    37:1e:fc:49:0e:ed:1f:dd:c4:ff:e1:52:46:38:37:
                    a9:cb:b2:e0:6c:4d:0b:c5:f4:36:01:5f:8c:35:a2:
                    1c:31:5c:67:e5:83:96:8e:a9:38:2a:56:31:6e:44:
                    7c:d4:8c:bf:04:1e:00:8b:5d:90:ff:aa:cb:39:67:
                    b7:26:ce:fc:7b:bd:c9:62:ee:6e:48:47:fa:6f:ab:
                    ce:54:3f:8f:70:7a:f1:d8:5d:29:b8:93:6a:5b:c8:
                    d5:9f:67:57:97:47:17:67:1d:f9:f2:29:5d:42:5b:
                    ae:a7:ea:7f:6f:7d:ee:47:cb:6c:cc:42:19:fd:f9:
                    c2:fe:c4:ca:20:de:98:ca:44:33:8a:44:48:f1:ed:
                    f7:4b:01:8e:55:88:08:ef:75:77:35:92:10:37:7a:
                    af:fd:0b:be:22:0f:39:b3:99:40:a2:2f:1c:41:84:
                    ef:34:a2:e6:b5:e7:91:3a:d5:fb:e0:b5:65:66:92:
                    ce:d4:25:33:fa:f9:26:9a:dd:8a:a3:9e:26:07:b3:
                    2a:45:3c:3c:78:a5:05:c9:ef:94:53:e0:7b:a9:d1:
                    eb:6d:93:f9:23:80:c1:1c:d4:b2:77:7d:32:b0:30:
                    72:1c:87:83:7a:07:5c:da:96:cf:d6:10:7d:5b:22:
                    33:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:77:F7:47:71:16:90:09:BB:3F:3F:64:1D:91:86:E7:73:48:CC:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/4892a1e2-9695-369f-ab71-7848f2816415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl

            X509v3 Authority Key Identifier:
                keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc2f:f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c9:af:22:bc:58:15:22:db:0b:6a:d6:cd:58:10:b7:e4:2f:
         1c:30:89:29:c4:22:45:eb:6a:ad:f5:3c:d0:44:1d:e0:a6:41:
         68:dc:f7:4a:5b:ee:ef:65:df:bf:6f:7b:16:6b:12:3e:7e:6e:
         c0:aa:49:f0:70:5a:0f:97:af:11:66:be:a3:3e:72:87:89:8f:
         8c:3f:3e:f1:45:c4:3d:56:d2:c5:8e:fb:b7:f8:94:79:01:1a:
         48:e6:d1:5e:53:36:8b:3f:18:ec:1c:96:39:6b:a2:61:73:ab:
         7d:bc:94:75:d5:01:c7:aa:79:b5:59:06:68:22:de:20:cd:c3:
         05:83:e1:c1:92:bb:e1:49:5d:ae:19:97:0a:b5:92:ff:f1:78:
         20:85:ef:bd:f7:7c:5a:f6:01:cb:93:96:14:93:61:05:cd:77:
         8d:85:ff:72:8d:b5:28:0c:00:89:65:4f:b5:b0:bd:58:a3:c0:
         cc:4f:f0:35:7c:5c:d7:12:af:c6:55:f7:da:45:90:02:8a:8e:
         c5:c4:d5:72:f1:fe:0b:ab:85:d2:3f:77:a6:3e:92:0a:0d:c5:
         97:db:c7:b1:fc:34:ae:86:74:c5:6b:09:37:2e:c5:7c:b9:29:
         e3:cd:9e:e1:3d:4a:37:43:ff:f9:f0:4f:88:db:e3:d0:37:d2:
         7c:be:ab:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:56:49 2025 by rpki-client