Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/1c77d59f-76ab-3542-b115-de5343a440e7.roa
File:                     1c77d59f-76ab-3542-b115-de5343a440e7.roa (raw, json)
Hash identifier:          sIYt4owETGRkZIxUXqQWpyiC7QSEnja1MJBEpoKqOWk=
Subject key identifier:   F7:68:70:3A:66:B5:1D:53:FB:A3:91:C3:46:AB:14:27:1E:C5:C7:FB
Certificate issuer:       /CN=fca4862e-7314-4415-a264-4e5dc31b73d8
Certificate serial:       010D0C9F4328584897708C27B08B28AAB80C3800
Authority key identifier: F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/1c77d59f-76ab-3542-b115-de5343a440e7.roa
Signing time:             Sun 19 Jan 2025 02:00:39 +0000
ROA not before:           Sun 19 Jan 2025 02:00:39 +0000
ROA not after:            Sat 19 Apr 2025 01:00:39 +0000
asID:                     4186
IP address blocks:        2620:0:610::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:97:70:8c:27:b0:8b:28:aa:b8:0c:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca4862e-7314-4415-a264-4e5dc31b73d8
        Validity
            Not Before: Jan 19 02:00:39 2025 GMT
            Not After : Apr 19 01:00:39 2025 GMT
        Subject: CN=1436dcb3-6d52-47ab-b153-f58554c60852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:ff:af:74:37:bb:0c:2a:5e:2a:93:ba:6e:
                    9d:10:df:5e:67:d9:d4:99:10:25:1d:1e:a4:4f:ff:
                    f2:0a:61:ed:e5:da:ef:cd:0d:44:a8:a7:72:28:56:
                    16:54:ce:ee:34:2b:00:b2:ee:4b:26:0b:43:c5:06:
                    17:ad:64:d9:2b:ac:c0:7b:28:58:13:2e:1f:97:62:
                    12:1a:56:61:74:e1:ea:fe:f9:8d:62:f1:07:b6:7e:
                    a8:71:5a:ff:61:84:67:a0:cf:90:b6:87:70:29:43:
                    b6:75:8f:9e:d3:a7:5a:c5:f3:de:58:18:1d:cd:f0:
                    43:9a:90:74:ac:fb:26:3a:4d:7c:13:01:ba:99:de:
                    ce:9e:2a:c0:bb:03:79:58:0c:27:4f:10:76:3a:4b:
                    03:bf:ba:7d:db:c5:28:ae:7b:83:3b:8a:ef:46:ce:
                    17:ae:11:72:8c:92:0a:51:d6:03:bc:95:e0:78:f5:
                    aa:36:c5:63:6f:5d:5e:69:f2:5d:73:29:51:9b:1f:
                    68:fa:fa:27:f8:5e:5d:a3:4c:83:84:94:2c:a4:9f:
                    ef:09:4a:c3:59:65:7a:bf:e5:a8:6b:f3:34:77:87:
                    18:82:c3:32:ef:e1:59:29:f9:05:c5:56:2f:00:0e:
                    cb:d7:47:21:2e:40:7a:ad:53:cd:57:2a:db:9e:76:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:68:70:3A:66:B5:1D:53:FB:A3:91:C3:46:AB:14:27:1E:C5:C7:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/1c77d59f-76ab-3542-b115-de5343a440e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl

            X509v3 Authority Key Identifier:
                keyid:F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:610::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:0b:9b:36:60:7b:e9:69:11:1c:48:30:a7:fa:99:7e:dc:b9:
         7c:21:cf:82:c8:f5:97:64:c9:99:13:d7:7f:c0:b0:5d:57:5d:
         6d:ce:58:0f:fc:85:5a:3f:53:84:5c:11:26:59:aa:67:97:c2:
         ca:ce:96:bb:cf:b5:57:5c:74:85:e9:38:3f:b9:a1:3b:ae:2f:
         3c:96:0f:71:09:43:de:b4:20:67:6b:22:11:a0:0b:3f:99:e2:
         be:b2:cd:61:d9:3f:98:08:a9:de:66:21:e7:4c:81:74:55:4c:
         ef:82:00:29:1b:95:de:62:51:2d:ce:55:ad:17:43:cf:c2:b7:
         c8:f1:d1:83:ef:0f:02:1c:e3:fe:49:e7:15:c1:f3:88:1c:ce:
         3e:87:1e:9c:e0:4a:52:3b:35:c8:dd:a6:e3:9c:eb:c2:04:dd:
         b5:c8:64:96:ed:0a:e8:ff:8f:9d:c5:c2:1b:ad:71:32:2e:ab:
         4c:65:66:22:32:9d:32:cb:a3:89:1b:e7:8a:21:7d:eb:44:f8:
         d1:7f:87:a5:c6:12:7b:36:20:26:96:e4:e9:6a:7c:87:eb:b9:
         08:d0:77:43:c5:d5:4d:1e:69:80:11:9b:80:14:e2:2c:f8:9f:
         a0:08:aa:95:40:50:d5:19:7e:30:ee:e3:88:f3:dd:3c:71:8c:
         b9:b7:eb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:42:07 2025 by rpki-client