Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/23a7a555-431e-3d9c-b78e-bf89744cfcfd.roa
File:                     23a7a555-431e-3d9c-b78e-bf89744cfcfd.roa (raw, json)
Hash identifier:          /FADpO3vsnYdhtoflBn7ZhxslAIoZs9aclgU4cJ/C+M=
Subject key identifier:   49:CB:75:86:29:C3:9A:30:5E:39:1B:2A:44:39:33:07:65:46:A9:AA
Certificate issuer:       /CN=9e36dcff-6526-450f-a9d4-367f2c2d4a7f
Certificate serial:       010D0C9F43285847B6B62ACEE5C4CBFEDDA06380
Authority key identifier: 84:F9:60:4D:69:2E:F4:73:8B:1B:24:A6:73:C0:85:78:58:DE:1B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/23a7a555-431e-3d9c-b78e-bf89744cfcfd.roa
Signing time:             Wed 30 Oct 2024 14:04:07 +0000
ROA not before:           Wed 30 Oct 2024 14:04:07 +0000
ROA not after:            Tue 28 Jan 2025 15:04:07 +0000
asID:                     66290000
IP address blocks:        2602:fc3b:8000::/38 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:b6:2a:ce:e5:c4:cb:fe:dd:a0:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e36dcff-6526-450f-a9d4-367f2c2d4a7f
        Validity
            Not Before: Oct 30 14:04:07 2024 GMT
            Not After : Jan 28 15:04:07 2025 GMT
        Subject: CN=d9e4c29b-7fbb-4106-b0f2-6fe8b8249532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1e:5a:fe:fa:5a:0e:5c:07:90:c4:44:ec:54:
                    e3:99:49:a9:b7:1e:79:b4:87:e9:ee:13:3f:63:bd:
                    34:e5:b9:0f:d1:03:60:67:d2:48:9b:1c:1d:a5:96:
                    52:d3:c1:b2:89:ef:05:c1:1b:c1:6f:ca:c9:de:c3:
                    f2:b9:2a:ba:99:69:8a:43:9b:ee:0a:8d:98:b3:e8:
                    dd:59:af:06:f4:ea:15:9b:a6:25:25:a8:07:fd:56:
                    7d:f2:c1:8c:a2:2a:fc:68:62:bf:e6:47:e9:ea:51:
                    06:fe:68:9a:c5:54:a3:2b:89:38:d2:5b:72:1f:01:
                    8c:36:ba:d7:dc:ba:9a:81:e9:43:75:31:ea:80:a4:
                    d4:d2:3f:f2:c8:e0:b0:61:97:16:ef:d5:e9:34:4d:
                    b5:8c:63:b2:32:60:d7:d6:31:97:17:89:b2:be:9c:
                    27:59:19:9a:9b:ff:a1:b9:ad:62:84:ba:78:af:d8:
                    85:ff:8e:e7:3b:ff:1d:f3:68:0b:cb:7b:4b:95:6c:
                    82:2f:1a:25:fc:b5:f6:18:bc:c6:fc:50:06:9d:67:
                    cd:70:e3:36:a0:70:ac:6c:de:62:8c:65:ec:6a:55:
                    97:a3:ba:94:63:1d:f2:eb:67:9e:0a:c5:75:82:c7:
                    3e:55:51:01:3e:b8:8b:96:3d:32:af:7f:58:ad:1d:
                    d9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CB:75:86:29:C3:9A:30:5E:39:1B:2A:44:39:33:07:65:46:A9:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/23a7a555-431e-3d9c-b78e-bf89744cfcfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/9e36dcff-6526-450f-a9d4-367f2c2d4a7f.crl

            X509v3 Authority Key Identifier:
                keyid:84:F9:60:4D:69:2E:F4:73:8B:1B:24:A6:73:C0:85:78:58:DE:1B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:8000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:a0:2a:db:a2:cd:5f:fa:19:20:4a:d9:19:40:c2:b5:01:fe:
         c1:61:59:da:51:44:38:a6:22:e5:af:1d:ad:5b:8c:dc:5c:11:
         11:c4:56:c6:6e:8c:a8:1c:54:02:72:29:90:1e:db:b4:ec:61:
         16:22:e6:48:a0:63:db:c8:ee:a5:b0:ec:05:7d:8c:08:26:43:
         47:6f:0e:df:ff:cf:39:23:0f:72:1f:d7:f4:40:49:f3:ed:11:
         ae:c3:03:5b:ac:d4:b7:b8:a4:5b:f3:fb:5c:77:b8:42:6e:19:
         c2:e9:9e:0c:8a:79:d0:21:9c:69:fb:d5:98:2a:14:09:0d:49:
         38:1a:72:45:d5:0f:64:fb:33:e0:57:21:76:8a:f5:1b:52:e9:
         d3:d8:b8:7e:0a:74:0a:82:27:a9:e1:75:ce:32:26:ad:d6:52:
         02:1f:52:a3:85:43:98:e1:0e:d7:e3:18:0e:df:bb:63:65:93:
         ae:64:aa:c8:13:a6:5d:1f:c4:9e:5e:cf:07:eb:b6:5c:e8:31:
         b0:46:92:02:7e:16:b8:1a:e6:21:73:5b:cf:ab:a6:f2:5a:f8:
         4e:19:80:67:78:e9:a1:fd:87:ef:31:d7:8d:a9:e6:93:cf:ba:
         28:ac:aa:46:28:5c:94:e6:f9:68:c3:b3:26:56:e3:0e:ef:fc:
         b7:b1:46:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:56 2025 by rpki-client