Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/aa805476-9fbc-3518-8eee-42bced29438d.roa
File:                     aa805476-9fbc-3518-8eee-42bced29438d.roa (raw, json)
Hash identifier:          WL5315rZjYBog+gK+Yeei4wrm5nrHUJWRhlKa6sC/kE=
Subject key identifier:   8B:5C:06:A1:5E:C2:52:2C:F4:9A:98:27:78:6B:56:05:D0:78:16:17
Certificate issuer:       /CN=e45b2423-bd81-480e-93e3-8cc66e601340
Certificate serial:       010D0C9F43285847B73E3BBD769C7024A991E000
Authority key identifier: A0:90:AC:4B:5C:E6:B9:28:EB:28:02:80:A0:B8:02:3D:D7:26:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/aa805476-9fbc-3518-8eee-42bced29438d.roa
Signing time:             Wed 30 Oct 2024 18:38:16 +0000
ROA not before:           Wed 30 Oct 2024 18:38:16 +0000
ROA not after:            Tue 28 Jan 2025 19:38:16 +0000
asID:                     399970
IP address blocks:        2602:fc3b:1000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b7:3e:3b:bd:76:9c:70:24:a9:91:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45b2423-bd81-480e-93e3-8cc66e601340
        Validity
            Not Before: Oct 30 18:38:16 2024 GMT
            Not After : Jan 28 19:38:16 2025 GMT
        Subject: CN=4d18f60b-e269-4224-b094-43b6379d213c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4c:ff:5d:73:50:f2:eb:11:2c:90:d8:5c:9b:
                    cd:d9:92:1e:99:02:c1:a3:51:10:73:2f:66:44:fd:
                    30:ce:42:56:91:cf:39:17:b0:fd:15:dc:8f:99:bf:
                    34:30:e1:a2:b6:af:d0:78:a8:dc:df:89:b1:41:c7:
                    fe:fe:45:b8:a5:60:22:03:72:66:2c:80:27:d6:97:
                    65:b7:73:4d:44:b0:fa:7d:80:3a:d5:7b:e4:9b:c0:
                    be:a8:61:21:73:e1:5a:66:41:0d:16:2b:af:6b:f4:
                    86:23:ac:ae:95:16:22:05:8a:b8:1c:9a:9f:63:10:
                    cc:6b:ff:8a:5e:b4:42:33:3d:50:00:b0:94:af:04:
                    8b:82:8a:79:ac:79:7f:e2:4e:bd:bb:69:3f:2d:93:
                    d1:5c:21:1d:bf:66:01:52:55:77:38:24:b5:ac:6a:
                    96:8f:eb:56:cf:1f:dd:1e:00:d4:9a:c7:2b:8a:b5:
                    34:1c:bd:ea:8a:b7:3f:e3:57:72:69:9c:bd:e0:8e:
                    5a:6f:f7:70:b3:51:c6:d5:96:05:77:d4:03:3c:02:
                    53:b4:93:11:0a:61:01:d7:55:18:46:df:46:48:09:
                    de:58:c0:a3:2e:c6:b5:c4:d8:5b:db:9b:bf:19:d1:
                    9d:37:b6:b4:92:9a:b1:89:cb:48:e8:ea:19:19:57:
                    af:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5C:06:A1:5E:C2:52:2C:F4:9A:98:27:78:6B:56:05:D0:78:16:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/aa805476-9fbc-3518-8eee-42bced29438d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/e45b2423-bd81-480e-93e3-8cc66e601340.crl

            X509v3 Authority Key Identifier:
                keyid:A0:90:AC:4B:5C:E6:B9:28:EB:28:02:80:A0:B8:02:3D:D7:26:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:d7:bb:76:2d:65:3d:9b:16:aa:00:39:97:68:d2:d2:58:49:
         c9:22:92:e9:7c:2a:ad:a4:0b:83:70:0f:e2:bb:66:3d:44:f4:
         ee:9b:36:34:fa:53:53:23:75:7d:1b:21:2c:c0:98:43:ad:0e:
         1f:5b:00:8e:ce:55:cd:f9:bf:f0:0f:7c:93:c6:b6:35:03:be:
         f1:14:52:d1:7f:4c:13:eb:bf:31:f1:c5:ca:03:9c:a1:76:e7:
         42:c7:00:26:e6:2b:1a:00:c7:19:99:fb:a7:1b:9c:54:7b:48:
         70:49:14:1f:b3:91:7b:0a:0d:14:a6:6e:6f:99:75:d8:3a:e0:
         9f:5d:c1:82:24:b1:61:1a:3b:6f:63:c5:c1:bf:27:45:4b:1c:
         fa:fa:03:71:14:7b:01:b0:f4:d2:31:cc:e9:82:d9:f3:03:b6:
         d7:4f:43:ca:e4:25:89:b0:17:3a:22:62:68:bb:74:09:47:86:
         c1:5c:5a:bc:d6:d3:fb:1e:c1:15:2e:53:0d:33:d4:85:50:f3:
         4b:bd:57:e9:83:95:9a:60:f2:0a:ef:31:a0:f4:c8:10:94:30:
         0d:9c:c3:c5:00:1a:74:7a:9c:a9:91:6d:26:4b:ad:e5:86:18:
         83:25:80:08:5f:81:48:50:c9:95:99:7e:ff:f0:6a:a6:09:c7:
         da:2b:f8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 14:58:13 2024 by rpki-client on console-fra.rpki-client.org