Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/59ee864c-0cc2-3d07-91b0-daa566e9f610.roa
File:                     59ee864c-0cc2-3d07-91b0-daa566e9f610.roa (raw, json)
Hash identifier:          7B7WU3UVHkcinbiiGkPMiJ0GhIGgOQlNfGQWVLf8F8A=
Subject key identifier:   00:42:3C:C4:4F:76:57:B4:79:59:31:CA:33:BE:C2:85:2F:36:48:34
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1BEB16547EF2DF7C05240
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/59ee864c-0cc2-3d07-91b0-daa566e9f610.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11351
IP address blocks:        2600:6000:fb41::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:be:b1:65:47:ef:2d:f7:c0:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=3ed7da92-951a-43bb-a8da-a4b3f30fa1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:75:a8:e9:80:65:6e:e4:d8:51:67:57:78:46:
                    cb:d4:d3:bc:18:a2:81:39:a7:e5:72:83:6e:a8:90:
                    56:42:2b:45:20:55:c5:32:67:d9:ac:4d:4f:6c:50:
                    7d:27:51:9b:a6:05:d2:cc:c8:36:9e:19:ba:9b:20:
                    70:b3:1c:0b:94:1c:62:2e:29:d1:11:0a:d0:13:b8:
                    d3:62:81:e5:b7:b6:5e:23:9a:31:a0:48:e9:75:87:
                    bf:4c:66:9d:cb:bf:08:d8:53:d6:c8:d0:e8:6e:15:
                    d7:64:e0:5f:78:9c:28:42:6e:e5:df:4e:cb:27:e1:
                    df:f0:84:a0:6b:bd:86:dd:8c:ef:3a:53:78:e2:8e:
                    fa:44:28:fc:72:20:63:44:4d:c3:8a:ab:88:33:e0:
                    1a:40:bd:c1:c3:fd:d5:bc:d4:b6:95:51:ef:7e:1a:
                    39:23:99:8e:a4:3c:a6:f3:da:7e:42:89:ea:f0:67:
                    c6:ac:99:d6:e9:9d:d3:61:3c:bd:b7:e3:d6:ff:ad:
                    75:5f:42:0d:31:62:7e:f5:f3:b8:df:a9:4a:46:39:
                    c8:84:1e:8b:64:3a:e8:6f:3b:96:89:8d:e2:b0:5d:
                    9e:07:77:70:ff:3e:18:9a:56:1c:86:1f:65:07:e5:
                    2b:fa:b7:13:08:36:51:8c:02:4c:fc:57:f8:d5:9f:
                    78:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:42:3C:C4:4F:76:57:B4:79:59:31:CA:33:BE:C2:85:2F:36:48:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/59ee864c-0cc2-3d07-91b0-daa566e9f610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6000:fb41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:66:95:90:f5:f2:3b:d3:5d:8c:21:84:37:e6:19:c0:cb:39:
         c2:c7:20:8b:3e:51:63:28:66:57:0a:97:46:7f:71:75:17:d0:
         b8:d4:dd:9f:a1:b6:c2:ac:9b:ab:ba:56:51:b1:8d:63:f2:17:
         6d:8a:25:ba:86:78:cb:81:51:0d:5e:ee:29:c2:c6:cf:31:e4:
         40:43:04:87:bd:9c:68:0d:d9:ca:08:a8:b2:57:cf:a6:d2:6f:
         31:7b:4f:be:62:a2:55:bf:85:7e:2f:87:6a:ba:02:b7:ab:02:
         e0:74:0c:0e:07:29:ae:1d:2a:ca:6a:c3:50:09:91:5c:a3:c0:
         1b:fc:7c:30:fa:e9:40:d2:71:bc:f2:86:96:83:2e:76:8f:4f:
         fc:e9:b9:64:69:fc:58:04:0b:d2:6a:9e:32:52:1a:fb:5a:92:
         93:f2:46:36:32:ee:40:2a:e9:7a:29:81:95:c1:3e:f4:1a:6c:
         6b:99:ea:f3:28:af:61:1f:3a:55:58:39:be:f2:de:82:bb:61:
         d0:73:7b:99:f4:9b:6a:8a:bd:c0:0f:b6:a9:67:c8:4f:03:72:
         f3:80:70:56:37:e6:aa:3a:7a:78:9a:36:d4:2e:53:0d:42:5c:
         f5:67:0a:33:56:db:8e:60:cf:90:e3:54:c2:74:f1:52:0d:fc:
         51:1b:14:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:42 2025 by rpki-client