Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/8212c42c-e3d9-3619-afb3-4e365a0757ca.roa
File:                     8212c42c-e3d9-3619-afb3-4e365a0757ca.roa (raw, json)
Hash identifier:          fLHt92gwFHKta6JJKG7JDw5V8xB6Q3euxAZPJMoJACo=
Subject key identifier:   E8:79:FF:E6:19:A3:F9:12:E7:BD:99:84:0A:35:8B:E6:74:F9:94:35
Certificate issuer:       /CN=07c482f6-0e64-42ff-a503-75a85635277e
Certificate serial:       010D0C9F4328584902EC3040EC4460A35C830C00
Authority key identifier: 9B:60:17:6F:03:4D:1C:65:68:81:31:15:5C:0D:5C:45:58:67:C1:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/8212c42c-e3d9-3619-afb3-4e365a0757ca.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        2607:5f40:200::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:30:40:ec:44:60:a3:5c:83:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c482f6-0e64-42ff-a503-75a85635277e
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=799251e9-ecc0-4f45-ae81-5492cd5c2164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0b:4b:f4:d0:95:33:d9:22:b1:a3:0a:26:ce:
                    78:58:41:f3:d4:28:a4:42:f8:9e:12:cb:97:dc:de:
                    80:ea:42:69:0c:a1:db:0d:14:56:c8:fc:52:c9:ae:
                    15:a5:10:88:80:50:37:36:7b:4f:0b:64:11:30:d2:
                    bb:40:31:6f:24:db:46:b9:b5:14:02:dc:95:e1:20:
                    67:db:1a:05:6b:2a:ec:f0:c1:d7:17:46:d6:1d:a7:
                    5d:03:9a:9a:3a:ac:fe:17:4e:82:3b:21:f6:a0:32:
                    9f:ab:40:57:57:5e:17:70:a0:69:99:83:ee:86:ac:
                    b2:2f:4e:b3:35:8e:f8:c6:06:6b:5e:66:93:d2:a6:
                    39:35:0a:49:d8:cb:af:ed:2b:b6:ff:6c:44:8a:f3:
                    86:f3:37:5c:c3:b5:b5:32:2b:1d:52:29:1d:46:d0:
                    8c:ff:1c:9d:c9:96:d1:9a:80:74:95:18:79:1f:d5:
                    1a:ee:0e:e5:ce:81:10:a6:15:f5:5b:d5:e4:ff:cb:
                    2a:b7:d1:cc:d0:16:dd:f0:82:3e:91:36:35:09:43:
                    28:3b:9f:57:49:9d:af:43:1c:86:e8:c5:c6:08:0f:
                    b0:24:2c:50:89:be:c9:b8:9b:1b:9c:e8:a3:3f:47:
                    53:b3:93:13:ab:87:53:66:25:f1:61:97:b7:24:d4:
                    d3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:79:FF:E6:19:A3:F9:12:E7:BD:99:84:0A:35:8B:E6:74:F9:94:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/8212c42c-e3d9-3619-afb3-4e365a0757ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.crl

            X509v3 Authority Key Identifier:
                keyid:9B:60:17:6F:03:4D:1C:65:68:81:31:15:5C:0D:5C:45:58:67:C1:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5f40:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:00:5c:e0:ee:74:67:73:0c:21:82:53:8f:a4:a6:8d:40:69:
         5f:e4:c9:1e:47:0b:e6:bf:16:e2:75:e7:fa:fe:66:fe:ff:dc:
         16:52:7e:27:28:3a:87:0c:fa:da:6c:bd:ba:59:bf:ad:ef:e1:
         eb:f4:c6:db:bf:62:a4:42:c3:1e:a3:9d:21:75:cf:07:bd:75:
         2e:93:45:79:bc:41:01:f9:63:8f:5a:b9:96:4f:48:49:47:93:
         17:51:9b:4a:7c:78:a8:b4:cd:a7:96:d9:a6:c2:a7:44:62:48:
         a8:1c:2f:3d:a5:b7:14:0c:c6:1e:86:73:53:71:03:3a:27:88:
         f0:c4:c2:b9:81:7f:a5:6a:4d:b0:ec:cc:5a:68:d5:ac:8e:55:
         06:8d:d9:98:ec:0d:f8:f6:1c:f8:59:26:b9:ac:d2:81:e8:f0:
         8f:44:6f:f1:0c:eb:7b:ef:5f:2f:0c:23:ea:31:b7:a4:13:8b:
         63:e5:2b:1a:c9:31:1c:e6:6f:4f:e4:d7:76:a6:b2:1a:d4:c7:
         6c:13:f0:14:0b:f1:86:3d:39:6f:09:47:a7:52:1f:e2:96:ab:
         8b:de:45:b1:2b:cd:bf:24:b1:1e:a6:91:f6:f4:c3:5a:db:24:
         cf:38:f7:a8:f3:41:e6:5c:16:92:82:e1:65:a1:ab:98:0d:60:
         4d:85:85:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:40:07 2025 by rpki-client