Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/fa4d36ab-e80e-3ee0-aae6-3b64e1fd409b.roa
File:                     fa4d36ab-e80e-3ee0-aae6-3b64e1fd409b.roa (raw, json)
Hash identifier:          VjIqxcuy+gU5e9PEHxUFe2JC2io4QdPo58jOY/WgGX8=
Subject key identifier:   81:74:C0:D4:5F:9F:23:2C:9B:B8:53:8A:27:0B:80:58:1D:41:C8:58
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F43285848EF615CF57A81B6838D494B40
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/fa4d36ab-e80e-3ee0-aae6-3b64e1fd409b.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     398493
IP address blocks:        2602:fd37::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:5c:f5:7a:81:b6:83:8d:49:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=1b4faae4-5006-4b1b-a5e2-0eaac7e1fb2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:87:7d:25:08:62:1d:15:56:09:b2:99:33:b0:
                    d9:4c:60:52:3a:40:86:8c:a8:3c:a7:dc:7e:7a:a4:
                    f7:59:5f:a6:ab:c2:98:46:aa:7b:21:48:22:7c:af:
                    57:b6:be:2a:e4:c3:69:cf:21:4d:e3:70:d8:14:34:
                    e8:fe:7b:ee:52:c3:ab:39:68:af:72:a0:2c:d6:0d:
                    57:57:55:5c:f6:78:aa:01:b7:c5:9a:16:ae:85:30:
                    8a:75:e1:e5:4c:b6:d8:74:0c:2a:c2:1c:8d:69:0d:
                    f1:da:1a:14:73:bb:b8:30:9c:ea:ec:15:ec:17:cc:
                    8f:97:a3:c9:dc:30:55:d0:21:f7:9e:51:23:d7:8d:
                    a6:18:a4:29:e7:ad:14:4a:ff:c6:b7:5f:fe:96:e0:
                    d2:06:4c:1e:62:2d:af:37:84:9c:43:f3:78:1a:92:
                    84:d7:ae:26:46:df:f4:d2:92:ec:8e:2d:05:91:62:
                    ea:ae:32:e0:55:ee:fe:48:cf:7d:cd:d3:35:47:cc:
                    07:37:80:a3:59:2f:95:dd:67:05:87:49:9d:d3:6e:
                    8e:5a:0e:df:45:97:55:1f:86:28:90:da:72:a7:30:
                    63:b9:73:89:96:e3:cb:a0:fe:0b:b0:5a:b5:dc:99:
                    e9:c8:39:72:be:c0:a8:93:05:15:88:4f:7b:b3:f6:
                    e6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:74:C0:D4:5F:9F:23:2C:9B:B8:53:8A:27:0B:80:58:1D:41:C8:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/fa4d36ab-e80e-3ee0-aae6-3b64e1fd409b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd37::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:45:65:f1:a3:be:9e:86:e6:68:ab:4e:dc:c6:0e:59:81:20:
         07:9e:06:1a:85:80:5e:a1:2d:d5:08:43:64:d5:b5:a6:91:0b:
         14:5f:bd:74:cb:2c:c3:52:de:c8:2f:2f:d9:dd:1c:39:d5:bc:
         8b:3e:29:1a:13:fc:b9:8c:19:e1:9c:d5:18:9b:1b:56:2b:22:
         a0:44:70:c8:63:2b:ae:66:e6:4a:0c:f1:54:02:fe:da:bc:33:
         1f:47:89:e3:2a:ea:4b:e8:de:fb:d9:d8:3f:e7:5e:77:0f:cc:
         8a:83:c2:77:f9:37:af:03:d4:20:13:78:47:9c:d8:0c:b9:9a:
         b1:1d:6b:01:d2:5a:ea:ca:d4:90:29:7b:3a:c0:c0:4e:67:81:
         53:87:ef:bd:42:54:e3:6d:15:ab:6b:6d:3b:4b:62:64:b2:d8:
         a7:c8:56:8d:10:97:c8:bf:65:26:fb:50:60:d5:d3:2b:2a:c6:
         4a:3d:4f:50:89:f3:eb:4a:27:a6:ca:89:b8:3a:4d:3f:54:d5:
         40:1f:97:32:12:b8:75:05:1c:7c:17:83:e2:e6:f0:a3:da:da:
         4b:f8:50:d6:06:aa:6d:e5:4b:db:69:f6:ae:88:8d:a1:e3:5f:
         2a:a7:b2:fc:0b:0e:8a:83:0c:42:83:db:8a:97:a2:b2:48:94:
         90:7b:2c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:15 2025 by rpki-client