Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/05ab02df-7968-3335-b43e-d613f908b631.roa
File:                     05ab02df-7968-3335-b43e-d613f908b631.roa (raw, json)
Hash identifier:          8rhZVltzArUN7/i8L4wuZIuAJw0Y2iKRrDSHg3j5Uq8=
Subject key identifier:   59:5D:A6:3D:C1:67:D9:6B:EC:A4:39:D7:B2:61:0C:3B:76:77:20:F3
Certificate issuer:       /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial:       010D0C9F4328584953C418926C5291FEA58C9FC0
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/05ab02df-7968-3335-b43e-d613f908b631.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2602:fa28:6a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:18:92:6c:52:91:fe:a5:8c:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=ce4de6a9-9172-4066-b05e-aada1ef199b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:39:4f:3e:e1:13:a7:2a:58:98:60:96:0b:f4:
                    57:22:b0:27:13:c4:26:b0:9f:fe:96:0f:19:89:7b:
                    25:ba:a9:04:4d:fc:10:1b:85:96:d8:66:fb:b6:9e:
                    22:2a:7a:da:dd:ef:ef:60:9b:45:c8:c7:09:32:55:
                    2e:de:e9:c6:86:0b:84:ea:f7:10:25:de:51:83:0d:
                    ca:d9:85:2e:56:ec:d8:c2:34:df:71:d2:f6:77:03:
                    6e:75:32:6e:a0:60:62:2a:09:e9:8a:e0:d3:fe:cf:
                    12:12:54:ed:ad:4a:49:b0:22:12:45:12:34:c9:96:
                    c4:32:be:f3:4f:97:72:fb:f3:c0:92:8d:3a:30:33:
                    35:06:7f:0f:68:7b:68:3c:85:34:3f:63:1b:09:24:
                    d1:14:48:8e:50:73:56:61:ba:ea:47:00:be:aa:c1:
                    96:1a:ff:3b:39:8b:87:ba:ed:af:05:4f:5b:56:1d:
                    e8:7d:c8:c8:1d:5d:de:fe:56:74:85:56:5a:fc:cc:
                    0b:aa:87:88:c1:28:eb:33:59:8e:c6:b2:99:94:8b:
                    87:16:ca:1d:1f:6b:45:26:fa:df:33:ad:ec:a3:3b:
                    fa:00:ca:30:05:46:4b:b1:87:de:0e:21:dd:b0:f7:
                    52:3e:ba:ba:8c:01:62:a7:e3:d4:0f:d2:96:a0:7e:
                    9d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5D:A6:3D:C1:67:D9:6B:EC:A4:39:D7:B2:61:0C:3B:76:77:20:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/05ab02df-7968-3335-b43e-d613f908b631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa28:6a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:dc:d1:d3:cb:56:94:73:5a:0c:14:2e:e9:d1:4f:31:97:9d:
         ca:3a:af:5a:13:2a:3e:7c:33:5a:c7:2c:ed:49:77:3e:06:23:
         c6:bd:bb:44:01:89:75:ff:15:99:97:2f:fe:be:f6:b7:2b:95:
         6d:ad:02:f6:79:37:98:5e:3b:04:08:b2:f1:60:e5:1a:47:4c:
         2b:dd:ef:3b:06:74:69:0f:44:f4:22:12:d0:4b:62:a2:df:3b:
         18:b7:f8:f9:d1:3a:e8:1a:3b:2d:ea:af:66:25:54:1e:c2:b5:
         f5:a0:7c:6e:3b:b8:0e:2b:8e:e8:37:7c:6c:43:3f:22:4a:4a:
         83:4d:25:9a:a0:95:18:d8:30:fa:b6:06:9c:d3:d6:23:f7:b5:
         4a:e0:9c:97:20:30:e0:f2:a2:36:3b:24:b2:00:2c:c9:c5:f8:
         6c:cc:8d:70:d0:9d:5d:6b:61:82:a4:a5:00:aa:16:5a:d9:5a:
         a0:68:aa:51:40:b9:66:f6:3d:ab:88:21:1a:28:80:ef:1b:24:
         b0:4b:4c:a4:f5:6f:db:17:be:81:6a:38:b9:44:2c:23:72:7b:
         0e:d1:96:68:4c:d5:1c:21:5c:38:af:a0:2d:29:e0:f1:62:58:
         36:a1:eb:31:53:aa:70:0c:38:bd:47:30:65:1f:7d:ed:5e:a4:
         82:b7:4a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:28:03 2025 by rpki-client