Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/07c70ea5-4cec-3d90-81d9-f1aa72890f49.roa
File:                     07c70ea5-4cec-3d90-81d9-f1aa72890f49.roa (raw, json)
Hash identifier:          JdhSDxhM88Y+zNBKGSJGx1JKpcNB+Boe3obZMcJ88M0=
Subject key identifier:   D9:74:AE:49:7A:2F:3E:57:23:CF:42:7F:96:E9:CE:F5:FC:76:F1:5F
Certificate issuer:       /CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
Certificate serial:       010D0C9F43285848E59BCD7A9F3EC0E6F2FD0100
Authority key identifier: 3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/07c70ea5-4cec-3d90-81d9-f1aa72890f49.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     13737
IP address blocks:        2602:f895::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:cd:7a:9f:3e:c0:e6:f2:fd:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=a9a3f55d-8f7b-41e9-9d2d-286c3141246f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:38:1c:ea:7b:cf:00:8c:2c:60:34:77:00:06:
                    71:00:fa:d3:f0:9c:b6:0d:e1:53:89:f5:c0:0f:53:
                    ec:b5:90:55:d8:52:ab:f3:57:c0:14:f8:36:db:ab:
                    62:06:f0:f8:6d:6a:5d:6d:c4:5d:02:03:90:99:a6:
                    15:bb:5e:d4:05:34:5c:79:8b:47:04:d6:d6:09:9b:
                    df:1b:c1:c1:b1:07:c1:9b:fe:14:c6:91:3f:80:42:
                    03:fb:aa:1e:65:fa:13:51:e5:d7:12:a4:07:b7:10:
                    80:56:4b:81:16:70:45:72:f8:17:ab:e5:6b:7e:e0:
                    49:02:67:03:ca:54:3e:80:ba:80:7f:28:b7:33:bd:
                    5f:3e:09:76:17:a2:a5:93:5e:08:70:5b:4e:d3:7d:
                    08:2d:99:79:d4:72:f6:b7:05:d8:5f:cd:cb:8e:d5:
                    5a:a0:08:7c:43:cd:ff:20:8a:28:47:18:96:77:5f:
                    38:cb:09:39:ff:fc:38:91:19:2d:1f:8d:ae:8c:01:
                    35:ff:0d:d1:1c:ed:42:26:dc:cc:93:f7:78:ad:10:
                    30:91:be:a7:71:34:e4:d5:08:b3:38:70:bd:6c:2a:
                    b7:7d:16:ac:49:f7:eb:bd:4b:2c:dc:a1:48:14:13:
                    c1:03:64:75:88:56:e4:b5:af:4d:72:3c:9d:34:61:
                    a2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:74:AE:49:7A:2F:3E:57:23:CF:42:7F:96:E9:CE:F5:FC:76:F1:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/07c70ea5-4cec-3d90-81d9-f1aa72890f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl

            X509v3 Authority Key Identifier:
                keyid:3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f895::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ba:a8:15:48:dd:ad:e4:af:94:6e:39:41:08:78:59:f2:52:
         60:b3:88:dd:67:18:9c:23:49:d3:7c:ea:81:ea:2e:67:71:55:
         14:78:04:60:a3:58:6c:03:f3:04:c8:c3:0e:c6:f8:51:0b:47:
         3a:dd:6d:84:78:df:ba:9c:7f:7f:2a:38:c8:79:8a:cc:f2:35:
         f3:de:98:a2:44:16:40:aa:32:4f:ed:67:aa:50:7f:dd:0b:1b:
         3a:26:00:89:5e:53:94:39:fb:51:4d:b9:9b:3b:c8:d2:03:14:
         1e:aa:74:17:49:a1:57:35:ae:98:0f:35:02:e8:1a:06:f8:4d:
         c1:07:32:7b:ac:7e:89:eb:27:d2:b4:a3:d5:dc:a6:10:85:f7:
         8a:6e:bd:34:6e:55:31:69:5b:b8:7a:ee:ae:d8:0b:7b:a4:d1:
         86:d7:b9:cb:2d:4a:97:17:70:aa:0c:5a:f9:98:36:b6:8b:a4:
         24:d9:3a:ed:b9:92:d7:51:d7:13:8d:12:42:10:b8:66:2d:0f:
         fc:4a:06:03:66:97:23:79:bf:6f:15:6a:80:92:53:55:b8:3b:
         75:05:a3:22:f8:d9:d9:2f:01:47:e6:d5:e3:e6:1e:4b:2d:a2:
         9f:41:fe:18:19:2d:ea:65:59:e9:c0:9d:de:99:52:8e:77:68:
         7c:63:6a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:21 2025 by rpki-client