Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/60cd37ae-cd80-39f6-ac6a-bca5d115faff.roa
File:                     60cd37ae-cd80-39f6-ac6a-bca5d115faff.roa (raw, json)
Hash identifier:          VYW0veVUrxe02r+MZ2NFAknz3Ej1/roe61kEESh2H4E=
Subject key identifier:   08:75:C6:B2:8F:C8:9D:76:EA:E5:F7:43:F6:FF:AD:2B:1A:8A:F1:8C
Certificate issuer:       /CN=1cce0e4f-1927-4581-821f-686f4e5fd6be
Certificate serial:       010D0C9F43285848CDF409424D82DC32CB9CCAE0
Authority key identifier: EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/60cd37ae-cd80-39f6-ac6a-bca5d115faff.roa
Signing time:             Fri 07 Feb 2025 14:39:18 +0000
ROA not before:           Fri 07 Feb 2025 14:39:18 +0000
ROA not after:            Thu 08 May 2025 13:39:18 +0000
asID:                     7837
IP address blocks:        2602:f800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:f4:09:42:4d:82:dc:32:cb:9c:ca:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cce0e4f-1927-4581-821f-686f4e5fd6be
        Validity
            Not Before: Feb  7 14:39:18 2025 GMT
            Not After : May  8 13:39:18 2025 GMT
        Subject: CN=0c18af3d-2b32-4394-a868-4023bc5770de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:54:0c:0b:71:e7:ba:6e:de:a0:1e:a8:97:45:
                    14:58:10:ee:55:63:4e:53:64:35:41:b8:a2:9a:85:
                    b1:77:11:5f:81:13:de:6a:d4:91:8e:82:eb:b1:84:
                    e0:7d:69:90:5c:2e:3e:76:40:d8:8d:ed:89:da:ca:
                    a4:2f:3f:20:1c:67:38:47:9f:4f:6c:5b:e1:e9:e3:
                    da:3d:c3:a3:23:0d:a2:43:06:6c:d8:eb:a2:6a:e2:
                    43:37:06:e7:7d:10:52:26:2c:ae:67:be:22:37:f4:
                    7d:70:94:ae:eb:03:74:47:01:36:31:49:f1:c3:07:
                    b1:7a:42:14:50:74:88:14:90:d8:ae:eb:b3:db:c2:
                    c6:e0:02:c3:5a:04:a2:2a:d2:d9:5b:8d:78:74:3f:
                    e7:95:26:67:1c:46:6b:12:0f:21:91:75:9d:df:9c:
                    69:ab:5c:24:e2:3d:56:ce:75:64:70:8b:e5:63:99:
                    5e:dd:41:dc:4e:91:f3:da:62:ef:8b:96:f0:ba:f5:
                    91:42:be:fc:6b:43:a0:26:d6:09:bf:4e:27:4f:28:
                    84:06:9e:8e:39:5e:90:74:cf:58:59:e4:5d:65:50:
                    7f:5c:27:74:aa:3c:c0:3f:81:16:d6:53:30:c1:17:
                    20:42:80:91:35:98:89:4d:d7:9b:2c:94:02:82:c3:
                    57:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:75:C6:B2:8F:C8:9D:76:EA:E5:F7:43:F6:FF:AD:2B:1A:8A:F1:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/60cd37ae-cd80-39f6-ac6a-bca5d115faff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.crl

            X509v3 Authority Key Identifier:
                keyid:EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:d6:03:ef:ae:29:87:ab:6b:0b:b7:8c:21:b2:de:8f:d2:5e:
         a4:b4:30:90:79:ca:ec:31:57:78:7f:da:0b:4c:dd:df:35:06:
         09:f3:f1:6b:fd:a0:d8:87:f1:5a:d8:ab:84:37:e8:49:55:59:
         99:ee:0d:ce:ea:f7:da:e7:83:44:23:87:c5:bf:55:9a:9c:3c:
         05:f7:29:a8:49:ed:e2:24:fb:ab:3b:2d:4f:1f:9f:48:f5:05:
         5b:6c:3e:88:9e:9b:0e:10:39:de:fe:ef:d3:15:c9:94:28:cc:
         09:5f:5d:bf:53:a9:93:cb:9c:6d:5f:c2:b3:d6:7c:e9:42:31:
         7e:88:64:f7:d2:e0:77:54:65:0f:2d:7a:7d:8d:96:57:19:9c:
         7e:ce:ea:a2:e5:96:8f:cb:61:bb:21:ca:c9:85:45:82:86:c9:
         2a:ac:be:91:86:f0:89:6d:61:25:1c:58:02:8c:05:2d:03:f4:
         89:67:80:38:c1:e6:5b:86:ef:2b:69:32:0e:09:8e:fe:68:b6:
         25:5f:a4:f2:21:d4:61:a3:38:3f:03:1a:3b:2b:9e:41:a2:da:
         a9:5d:6b:6a:2a:4e:db:b3:42:52:8a:47:55:6e:9a:2e:0d:cc:
         05:1d:13:f2:30:ba:a2:8c:ec:2a:29:39:84:57:b8:c4:37:b4:
         b7:70:52:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:39:30 2025 by rpki-client