Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/8631407b-9ae3-37c3-ae3e-a4de4f3364de.roa
File:                     8631407b-9ae3-37c3-ae3e-a4de4f3364de.roa (raw, json)
Hash identifier:          1FQZ6sTxOcDu68NX2QuIOXAUYiMRIOLjxYVwaiF2DpE=
Subject key identifier:   19:B9:8C:F3:23:10:5D:A0:87:BC:3B:D1:0E:8E:02:03:EB:7C:CC:58
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F43285848EF61644928EC0225DCD4D300
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/8631407b-9ae3-37c3-ae3e-a4de4f3364de.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     398493
IP address blocks:        2602:fd37:4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:64:49:28:ec:02:25:dc:d4:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=076b3aff-78b9-48f4-83c8-fdb126126214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:b2:d0:e1:e9:05:96:1a:95:36:1e:43:f1:
                    a2:61:9c:71:45:e7:cc:78:c5:d0:d3:7a:d2:82:44:
                    9e:d4:a9:de:b7:12:3b:0d:21:c6:ce:51:61:1f:ad:
                    6e:58:cf:27:b9:08:82:b1:ef:52:71:07:00:37:26:
                    38:e4:ee:15:13:44:f0:d3:07:2a:85:25:88:89:e8:
                    f2:4d:85:81:c5:88:59:2e:34:2c:68:7d:92:24:ab:
                    8f:8e:c4:d5:48:f6:33:89:b2:b9:eb:58:92:0a:fb:
                    c3:c1:f1:51:22:82:4d:69:cc:03:92:fb:b7:04:29:
                    d1:a8:3d:0c:9b:66:87:9d:f3:10:97:b5:52:9e:99:
                    fd:c4:bd:46:87:04:17:1a:11:b2:59:78:90:9d:c8:
                    f3:a8:9a:d0:f2:6b:47:9c:99:5b:12:f0:28:c0:2e:
                    77:7e:3e:a1:23:4d:f7:fa:63:40:b4:44:a6:4b:f2:
                    47:8f:6b:e7:f3:f2:cf:90:7d:22:04:70:96:a8:e5:
                    e3:d3:ff:2b:5a:65:35:c4:da:6d:53:8a:4b:09:a9:
                    2b:a1:0a:43:43:b6:fc:3e:5a:d9:7d:fe:20:65:20:
                    e6:f9:3d:ba:3b:48:67:64:37:64:d3:fa:87:4f:a0:
                    cc:9f:b7:ee:27:68:1b:13:6e:bd:48:a0:85:f1:12:
                    61:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B9:8C:F3:23:10:5D:A0:87:BC:3B:D1:0E:8E:02:03:EB:7C:CC:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/8631407b-9ae3-37c3-ae3e-a4de4f3364de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd37:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:15:0f:54:80:0f:6d:a8:b5:5b:b0:76:35:b2:df:36:c2:a2:
         9f:60:15:72:da:15:04:82:e9:fe:09:a5:d4:de:ba:0d:29:72:
         06:50:b8:5c:55:0d:49:2d:f0:99:da:a3:3d:f2:f6:0c:cb:b3:
         ed:34:96:4d:39:c2:5e:79:d7:d4:67:8e:ae:b4:f0:31:ba:3b:
         44:23:02:0e:9a:66:a2:e0:d4:04:76:79:8f:01:f3:d7:bf:ac:
         9e:d4:49:be:34:cc:5b:ac:13:b4:30:21:fb:08:e5:38:40:71:
         90:07:8c:06:4d:a1:65:b0:fe:ba:0a:6d:73:98:ce:14:8c:55:
         c3:f4:b2:b0:98:fb:0f:12:7c:dd:89:08:b7:00:55:21:0c:b1:
         55:33:db:98:91:e4:c8:b4:2b:e3:ae:b3:79:01:40:5e:50:ef:
         03:ba:af:26:e2:50:39:60:54:67:f0:72:98:df:8e:4b:78:74:
         5d:c4:a9:4c:18:a3:14:8d:8a:c9:80:23:8f:1a:1e:4e:c4:8f:
         ef:ea:51:61:2f:6a:d6:43:34:08:fd:97:c9:e2:79:6a:4a:bf:
         56:e9:6d:c0:96:69:26:a0:06:e2:da:88:8d:43:3c:19:69:06:
         5f:19:b9:cc:64:a8:f7:df:c2:ab:1e:c4:f7:fc:91:6b:fe:20:
         cc:06:72:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:44 2025 by rpki-client