Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/31590441-0124-35e5-b8d5-3eac3f0d6c40.roa
File:                     31590441-0124-35e5-b8d5-3eac3f0d6c40.roa (raw, json)
Hash identifier:          qdWLZM/KyKg1LDVHzTugColrSlREAiJEYECjxNp8x04=
Subject key identifier:   63:3A:BB:13:79:73:7D:7A:13:1B:26:8F:84:D5:28:D8:D1:87:83:E9
Certificate issuer:       /CN=1886e4bb-e8b3-46f4-8d9d-8d226295a982
Certificate serial:       010D0C9F43285848CC7B894C2506804D4D2AA280
Authority key identifier: 5B:59:46:55:98:AA:24:33:EC:67:68:B3:2B:CA:BD:F0:78:DF:89:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/31590441-0124-35e5-b8d5-3eac3f0d6c40.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     17290
IP address blocks:        2602:fa86::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:89:4c:25:06:80:4d:4d:2a:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1886e4bb-e8b3-46f4-8d9d-8d226295a982
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=56eac92c-5187-4f67-a856-e31af84be83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:59:0d:11:24:40:8e:39:c1:67:80:0f:ad:dc:
                    59:ac:f7:04:b1:70:e4:65:a3:05:52:74:58:66:f0:
                    83:4d:96:b0:f4:c1:fd:57:b4:12:c7:b1:aa:86:ee:
                    85:3d:68:d3:24:8b:08:3f:88:36:4b:25:be:94:95:
                    28:ce:6a:ea:68:2a:f1:58:4c:d5:56:5d:81:2c:62:
                    a7:5f:7b:7a:f3:01:0a:e0:3b:4a:8b:b6:48:5e:07:
                    31:47:79:83:43:6c:cc:ae:29:56:07:43:e7:b7:9e:
                    27:bb:08:81:52:3c:bd:94:90:29:c2:db:16:b9:90:
                    b7:a5:8a:07:67:a9:ed:36:0d:e1:e9:52:42:40:a6:
                    69:33:a1:b4:ab:65:53:b8:5e:12:5e:0a:5d:ae:13:
                    54:db:46:54:93:a8:f3:c5:49:d7:51:d2:5b:7a:6a:
                    f6:cf:98:64:1b:98:0f:a0:e3:e4:a1:e5:2d:49:18:
                    a5:a1:db:5c:99:3e:22:9f:2c:39:52:a9:67:e9:e6:
                    e7:b7:b5:45:d6:72:e3:89:07:8b:3f:f1:7c:c0:e7:
                    5a:79:4e:4f:4a:03:89:3c:39:91:b5:68:79:2f:44:
                    9b:64:62:76:14:e2:7f:24:02:3a:c2:cd:88:9f:49:
                    fd:14:2b:40:7b:61:83:b8:18:86:05:ab:e4:9f:f3:
                    2e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3A:BB:13:79:73:7D:7A:13:1B:26:8F:84:D5:28:D8:D1:87:83:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/31590441-0124-35e5-b8d5-3eac3f0d6c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/1886e4bb-e8b3-46f4-8d9d-8d226295a982.crl

            X509v3 Authority Key Identifier:
                keyid:5B:59:46:55:98:AA:24:33:EC:67:68:B3:2B:CA:BD:F0:78:DF:89:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa86::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d5:0b:b9:25:a9:8d:f6:40:68:4f:f7:d2:a3:41:c0:2b:ff:
         28:76:97:2e:75:61:b1:b7:39:5a:84:14:5c:21:4a:49:6b:06:
         f8:40:8b:bf:a7:fb:f7:23:ae:59:23:7b:9a:72:e5:c4:5d:ab:
         51:07:06:84:27:7e:50:98:ee:8d:1b:69:be:e3:67:18:8a:34:
         33:c2:31:7e:cb:cc:fd:45:db:7b:ab:11:12:18:51:39:f7:75:
         17:ba:8f:2a:32:5e:58:0a:aa:7a:cc:27:95:4e:70:c8:5a:2f:
         69:be:1f:6a:b5:88:7b:b1:73:6f:2c:83:aa:af:2c:4c:be:fe:
         d7:f8:d3:fc:cb:1d:7b:c5:aa:8c:ca:3b:45:43:ea:4c:cc:5d:
         9b:56:f3:99:f5:b2:e5:ec:ca:e3:ea:58:25:d2:02:e5:7c:03:
         6f:a5:6b:b6:89:f4:f2:8d:99:9a:4a:62:14:0c:0a:41:23:a8:
         56:a2:70:12:9a:c7:a7:3d:ee:9b:a4:2b:56:56:6b:56:75:f2:
         91:9b:8d:80:a6:54:23:60:37:0b:2e:f1:a4:e1:f7:77:c1:ea:
         1f:6d:0a:c8:14:46:b6:16:ee:46:f5:c3:e4:32:91:d9:27:ae:
         ab:60:5b:d1:67:12:59:4c:73:c1:97:fa:aa:18:16:57:3c:3c:
         f5:6a:0c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:25 2025 by rpki-client