Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/08788e9a-4441-35fa-ae0e-b867ca97e82c.roa
File:                     08788e9a-4441-35fa-ae0e-b867ca97e82c.roa (raw, json)
Hash identifier:          tAMq1P9hy5//DWw560WOsfKKlMCRKMPH0WmK9vX/36I=
Subject key identifier:   ED:E0:05:97:05:04:06:53:7A:12:75:CD:41:B8:08:49:BF:A7:AF:F7
Certificate issuer:       /CN=eff73345-b771-45fd-be81-1f41a7f777ec
Certificate serial:       010D0C9F43285848B35B68EC08769E68E8E77140
Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/08788e9a-4441-35fa-ae0e-b867ca97e82c.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     36168
IP address blocks:        2602:f922:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:68:ec:08:76:9e:68:e8:e7:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=f4dd8bd0-9319-4cdf-b6fd-18b03b9cb008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cd:f4:14:83:9b:7e:3a:0b:3f:c3:73:78:de:
                    cb:1d:de:bb:0b:c9:8d:91:b7:38:2e:04:4e:1f:96:
                    f7:95:b7:38:08:f7:32:d9:65:f3:44:c7:ba:6b:a3:
                    23:27:4f:7f:c8:c7:a0:5b:e3:35:8c:c1:50:5e:72:
                    ab:61:94:64:eb:87:ec:86:9f:47:4f:c5:c4:98:a1:
                    20:5a:e5:3a:cb:b0:a8:5a:8e:5b:fd:7c:34:5e:bb:
                    c0:ff:bf:37:a7:83:4b:1d:d5:1a:7e:dd:28:37:ac:
                    9a:5d:7c:88:89:58:ab:72:97:af:ad:55:d4:21:53:
                    92:48:43:18:ad:65:f9:88:00:a1:fb:e3:75:79:95:
                    aa:1e:8f:b1:f3:af:05:bb:6c:b4:1d:26:d6:cc:e3:
                    82:a6:89:59:6e:fe:74:46:12:2b:fa:bc:d8:80:f0:
                    7d:42:53:24:2d:4c:0c:53:43:7e:26:ad:c1:9d:dc:
                    49:f3:f8:97:b9:e3:02:c3:88:fc:b8:24:60:78:ab:
                    53:d4:0d:be:39:98:db:d7:ac:48:99:71:52:1d:90:
                    a4:db:65:0a:bb:68:77:c9:8f:33:93:c4:27:36:fe:
                    5b:73:dc:c2:1c:13:57:bd:bb:e6:91:ed:20:57:ac:
                    7d:78:ab:e6:75:13:c7:23:9b:0f:3a:d4:0d:5b:a8:
                    ed:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E0:05:97:05:04:06:53:7A:12:75:CD:41:B8:08:49:BF:A7:AF:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/08788e9a-4441-35fa-ae0e-b867ca97e82c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl

            X509v3 Authority Key Identifier:
                keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f922:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d9:47:5e:eb:7e:48:11:73:cb:93:d8:e1:b4:ed:11:89:2c:
         4e:86:36:52:fa:58:92:ae:8c:2b:5d:6c:cd:f4:8a:a0:91:8c:
         16:4f:55:bb:d4:51:10:3e:49:e6:12:98:7a:a0:05:27:95:c2:
         17:e0:bd:cf:05:7a:5f:f8:20:00:ef:29:f7:15:a9:01:9c:9c:
         b3:6d:ed:58:24:9a:ba:af:32:98:29:6e:35:eb:ea:f7:78:e0:
         32:3a:9f:b5:38:94:96:d4:31:5f:86:3c:fd:d4:70:00:3b:f5:
         fb:e2:04:9b:e0:ce:9a:3b:ae:0f:83:44:2f:10:3f:63:99:0f:
         1d:b7:53:89:96:74:4d:eb:8f:dc:cf:ee:db:5c:25:39:aa:ad:
         d0:21:60:0f:87:21:13:e6:d0:3a:4c:9e:31:95:5b:75:b2:1a:
         7a:5a:2a:cf:9f:7d:a7:8e:59:84:70:a8:c3:18:23:bd:6d:85:
         93:3d:6a:f1:af:39:73:e0:b7:15:17:e7:64:0e:43:d8:c7:e4:
         96:86:7a:6c:7b:e8:76:aa:79:d3:aa:ac:87:b6:81:44:1d:fb:
         ec:21:51:38:e2:73:7e:6c:56:86:6c:bf:f2:04:25:2a:f6:50:
         29:d9:b9:50:6d:a3:85:6f:60:d5:64:50:f0:73:b7:12:bb:78:
         87:df:35:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:14:52 2025 by rpki-client