Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/367b089e-0efb-310d-88c0-9f93adf406c2.roa
File:                     367b089e-0efb-310d-88c0-9f93adf406c2.roa (raw, json)
Hash identifier:          sQV9mF6eFVZA1uV5+frK5OblooS7vUee2UfwhjwFfyw=
Subject key identifier:   2D:42:F8:69:26:0C:B3:EB:57:5B:9E:2E:A1:6C:A2:AA:E3:E7:21:1A
Certificate issuer:       /CN=56ea3e88-1c8a-47de-bdd4-27317c283592
Certificate serial:       010D0C9F43285846A25F4434A7D72186BD88E828
Authority key identifier: C7:3E:95:4B:BE:65:CF:48:80:E1:F1:C9:7D:2D:4C:4C:B5:DE:AB:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/367b089e-0efb-310d-88c0-9f93adf406c2.roa
Signing time:             Tue 23 Jul 2024 14:25:55 +0000
ROA not before:           Tue 23 Jul 2024 14:25:55 +0000
ROA not after:            Mon 21 Oct 2024 14:25:55 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a2:5f:44:34:a7:d7:21:86:bd:88:e8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56ea3e88-1c8a-47de-bdd4-27317c283592
        Validity
            Not Before: Jul 23 14:25:55 2024 GMT
            Not After : Oct 21 14:25:55 2024 GMT
        Subject: CN=f4540cf3-94bb-4d93-817c-0fc0e197cd33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:d1:50:95:c0:9f:5f:df:1e:fd:1c:97:1e:
                    b7:bf:e1:49:a2:a7:6c:38:bb:89:d1:61:c3:43:0b:
                    11:cf:26:11:ce:66:6c:d6:b3:14:ca:56:a1:f5:39:
                    90:be:fa:94:41:76:96:b0:89:5b:d8:78:de:7e:86:
                    fe:99:20:0d:47:54:a1:45:f3:01:f9:aa:3f:0c:ec:
                    f8:45:10:bb:57:2a:5c:0c:40:36:98:99:0c:a8:a9:
                    1b:06:d3:e1:d2:0e:4a:21:10:c3:b0:76:14:6f:f7:
                    86:06:2a:75:43:b3:62:e9:2f:71:38:1d:cd:be:b5:
                    f3:cd:6f:3f:b6:0b:38:d4:57:c3:32:66:82:5f:02:
                    b5:62:5a:f3:97:32:dd:ec:dc:ff:5a:7a:d9:76:03:
                    b7:74:63:cf:a3:ce:9d:85:3a:25:11:9d:06:e7:aa:
                    c2:08:bb:43:ea:61:d9:52:7a:89:6a:c5:e5:ed:9f:
                    54:29:dd:d5:3b:d5:44:48:d8:3d:ef:e2:e9:f0:bc:
                    87:7d:34:3e:03:c4:ed:07:e3:52:79:66:23:af:5f:
                    45:99:93:ee:77:27:73:47:85:c6:73:9f:42:68:c4:
                    6d:2d:9e:49:21:56:db:58:cd:3a:99:79:27:e3:76:
                    e3:2e:15:33:c5:ab:78:1f:88:25:8b:ec:79:76:48:
                    87:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:42:F8:69:26:0C:B3:EB:57:5B:9E:2E:A1:6C:A2:AA:E3:E7:21:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/367b089e-0efb-310d-88c0-9f93adf406c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/56ea3e88-1c8a-47de-bdd4-27317c283592.crl

            X509v3 Authority Key Identifier:
                keyid:C7:3E:95:4B:BE:65:CF:48:80:E1:F1:C9:7D:2D:4C:4C:B5:DE:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:22:97:57:6d:1b:8b:ff:89:12:12:15:51:23:28:11:d4:ac:
         67:d6:68:97:42:5f:c9:f0:30:f2:a1:7c:79:ed:7c:77:b5:06:
         de:9a:98:ae:51:b7:bd:7d:9c:b0:f9:53:ac:4c:36:c5:fb:b9:
         9b:5c:c2:03:a0:62:9a:3b:9e:fa:0c:7a:55:d8:f8:8c:d3:f6:
         be:83:97:e8:bc:0d:fc:6d:4e:82:d6:e8:28:e0:f0:2f:af:05:
         a5:98:a0:4f:a7:c4:7a:30:2b:16:83:4e:0b:af:0a:e0:6e:ce:
         b1:34:ec:16:1a:63:ae:46:ad:ae:2d:e0:7d:b5:cd:a6:b8:18:
         e4:84:29:bb:ab:6e:8a:de:64:a6:58:4d:3e:6e:bb:83:27:5e:
         c9:95:ca:cd:b4:f3:ee:bb:2d:84:ee:09:4e:b3:c4:da:e3:8a:
         44:29:bb:43:13:2a:fd:04:c8:1b:a1:d5:d0:80:4e:64:a9:59:
         e0:95:f3:bb:eb:ec:05:21:07:a0:93:b9:0c:97:e9:43:65:3e:
         79:55:ff:22:db:2d:6b:37:e3:26:5f:61:42:79:0a:0a:36:cb:
         ed:a4:a3:e0:e8:cb:1b:08:d6:08:da:5b:06:f5:47:d2:d2:29:
         73:64:da:e8:30:f6:de:bf:c9:63:d3:0d:30:4a:f6:39:a5:30:
         9e:ea:1a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 21:56:04 2024 by rpki-client on console-fra.rpki-client.org