Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/f1da8eef-2bc0-3710-a530-fd8280e346c5.roa
File:                     f1da8eef-2bc0-3710-a530-fd8280e346c5.roa (raw, json)
Hash identifier:          rbxMB9nwenCijX9mbiDGw7RQbV06t5mz05OUDpkZXHQ=
Subject key identifier:   1B:95:64:C8:C4:FA:88:6B:32:4F:E7:AD:70:26:AB:1B:A7:01:2A:8D
Certificate issuer:       /CN=d50d9265-ed86-4e53-88b9-cd56c607704f
Certificate serial:       010D0C9F432858489D05E6B41DB0714F3424CC00
Authority key identifier: 00:3E:48:1C:9F:3C:E7:78:9A:9E:67:A1:A2:9D:92:EC:17:A5:52:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/f1da8eef-2bc0-3710-a530-fd8280e346c5.roa
Signing time:             Tue 21 Jan 2025 02:00:39 +0000
ROA not before:           Tue 21 Jan 2025 02:00:39 +0000
ROA not after:            Mon 21 Apr 2025 01:00:39 +0000
asID:                     400438
IP address blocks:        2606:afc0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9d:05:e6:b4:1d:b0:71:4f:34:24:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50d9265-ed86-4e53-88b9-cd56c607704f
        Validity
            Not Before: Jan 21 02:00:39 2025 GMT
            Not After : Apr 21 01:00:39 2025 GMT
        Subject: CN=448b2b9f-6dde-45a7-bfb3-0a75a3bfcc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:42:55:24:b6:75:be:05:1b:4e:4a:06:7e:7b:
                    d6:da:1e:91:94:91:e8:4d:d1:cd:a6:11:1c:aa:63:
                    6a:bc:20:7e:5b:d3:d0:68:0f:d1:74:04:df:9e:33:
                    81:33:ea:8c:a1:84:89:25:72:da:cb:4a:1b:59:11:
                    85:4e:05:fb:fb:0d:22:c6:a0:29:25:d7:9f:d8:30:
                    09:ae:ec:c1:0c:fb:d9:d3:f6:63:ca:d6:35:8c:49:
                    31:ab:82:25:4a:d1:d7:05:c3:8c:95:92:7d:a6:06:
                    bc:f9:9a:8e:de:28:17:96:a4:94:66:52:f0:17:6d:
                    e9:d8:b0:06:f2:34:e6:1c:c7:fe:09:3b:7f:d1:8e:
                    d1:86:d7:02:eb:ff:27:d5:84:ac:de:34:d7:a1:27:
                    26:83:a8:ea:e7:d5:b6:0a:1b:ac:ed:38:db:c9:26:
                    25:da:8d:58:ae:e9:e0:3e:91:e2:4d:a7:96:2d:b0:
                    0e:e6:3d:13:7a:9c:d8:d0:a1:03:af:0b:21:d8:49:
                    0f:f3:96:d3:3e:42:1e:09:87:23:9e:f4:d5:b7:12:
                    5f:30:bd:70:c7:c3:69:de:c2:da:4f:c3:5e:c3:9b:
                    18:ec:40:ac:26:fb:f5:50:47:93:6b:62:99:62:80:
                    6f:1d:c5:ce:3c:6f:18:c4:bf:d1:55:db:9b:ec:ba:
                    19:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:95:64:C8:C4:FA:88:6B:32:4F:E7:AD:70:26:AB:1B:A7:01:2A:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/f1da8eef-2bc0-3710-a530-fd8280e346c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f/d50d9265-ed86-4e53-88b9-cd56c607704f.crl

            X509v3 Authority Key Identifier:
                keyid:00:3E:48:1C:9F:3C:E7:78:9A:9E:67:A1:A2:9D:92:EC:17:A5:52:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d50d9265-ed86-4e53-88b9-cd56c607704f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:afc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:e3:b2:45:02:5a:65:66:2d:3a:e3:18:84:8d:4b:61:1d:c4:
         b2:8c:5a:69:3e:86:a1:bf:b3:33:e6:42:8b:6a:29:50:5d:3f:
         68:37:26:d2:40:53:16:a9:9b:08:b6:7e:38:06:b9:88:50:06:
         91:2f:21:3e:87:94:ed:85:8a:d4:a3:c9:c9:2f:67:ac:55:2e:
         78:01:45:3d:68:4e:f5:db:f0:cd:2b:ab:f7:97:9e:c2:de:bb:
         44:29:70:93:c2:90:ac:44:d0:c4:41:72:b5:47:81:82:52:4f:
         43:e4:06:03:a8:b4:71:25:90:0c:99:a9:ef:a9:3e:da:a9:79:
         ff:20:8c:aa:a7:2e:50:06:75:74:d4:bb:b1:90:bc:06:29:94:
         29:f8:8c:4e:b7:e9:8c:2c:89:08:6d:04:a6:67:1f:0d:e1:b6:
         b4:0e:f3:6d:59:11:9b:e1:90:d9:1e:01:95:a6:c7:d4:cf:70:
         ba:2b:fe:ca:2c:56:db:af:9c:95:0d:0e:48:8f:f8:e0:7b:6d:
         90:0e:84:81:60:12:71:bf:b3:29:40:92:67:b0:d0:a5:01:20:
         83:bf:97:b0:34:5b:f3:dc:6f:99:d5:3e:9b:77:30:66:0d:38:
         47:c0:34:d1:62:50:a7:d2:73:f2:a8:7c:f3:e7:69:9e:52:9e:
         69:8c:05:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:42:08 2025 by rpki-client