Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/962bc01b-e3a1-338a-a2f5-7d713d48a19a.roa
File:                     962bc01b-e3a1-338a-a2f5-7d713d48a19a.roa (raw, json)
Hash identifier:          bOCyUgJFuS4QXxDFSSPBAUYczK7bba+PquXDSIlyz84=
Subject key identifier:   18:31:06:68:C0:DE:C1:F6:5A:4F:3C:47:C1:58:B6:05:C6:95:5A:F1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1D2B29CD7819DB686CB10
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/962bc01b-e3a1-338a-a2f5-7d713d48a19a.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        2600:5800:12a2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:d2:b2:9c:d7:81:9d:b6:86:cb:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=859954bb-65a8-4b74-bb32-9295ff7f50c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2a:5b:73:d6:46:a2:54:b9:05:5e:5d:7c:7a:
                    89:ba:bc:5c:98:08:57:e3:00:89:08:1b:0a:6c:e1:
                    2d:7b:8c:b8:90:90:0b:bd:7f:e6:38:43:df:44:35:
                    05:ac:e7:81:8c:b9:c8:4a:00:ba:41:9a:13:8d:9c:
                    17:3b:39:82:9a:f5:d3:ae:8d:a9:0a:e3:38:a0:71:
                    9f:7d:70:42:38:a3:4f:38:eb:b6:6f:8f:f0:28:bc:
                    d5:ad:30:f4:a1:5f:be:70:2e:00:56:79:a0:4d:89:
                    03:02:73:3f:ea:8b:71:fb:0d:34:65:67:8c:5a:c4:
                    65:27:a8:4b:13:ad:7c:d2:e6:0e:88:0a:73:26:eb:
                    17:e1:7f:e0:18:45:a0:47:f4:48:89:69:92:c5:e8:
                    04:2c:37:65:b4:cc:c6:1e:45:48:39:f5:c5:4b:16:
                    b3:a3:18:68:bd:1b:3f:f9:0f:d2:c9:3a:6d:7d:11:
                    70:f2:5d:2d:8a:a1:3b:20:1f:f6:e9:8a:33:e8:c5:
                    f6:d9:02:d9:9b:63:a9:6a:76:41:df:18:03:52:29:
                    ca:cd:bb:d3:04:b3:75:ac:ac:dc:7a:1d:04:56:06:
                    ec:1c:01:68:6c:61:dd:c9:9f:d5:1d:0d:f3:93:c0:
                    96:5b:86:2c:f1:06:b6:1b:cb:2a:7d:14:10:0e:28:
                    ad:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:31:06:68:C0:DE:C1:F6:5A:4F:3C:47:C1:58:B6:05:C6:95:5A:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/962bc01b-e3a1-338a-a2f5-7d713d48a19a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:5800:12a2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:06:39:31:bc:31:ac:01:90:90:fb:4d:ac:ac:81:dc:d6:58:
         90:65:44:f4:a4:af:3e:1a:9f:8e:3b:db:60:3d:ae:f7:1f:1c:
         a4:b2:1b:ab:9b:ae:06:fd:67:13:73:24:50:54:d3:34:09:92:
         4a:9f:a5:c1:98:6b:63:11:5d:78:20:e1:c5:25:16:10:11:e5:
         c2:78:22:f2:21:d5:e3:a5:fc:1a:2e:ae:f0:c8:e1:67:fe:00:
         5d:bc:5e:fe:51:f6:1b:9c:57:b8:ad:d6:ca:13:17:52:a5:a2:
         3f:b4:93:06:d3:fb:98:09:25:26:cf:99:23:a8:90:98:e9:19:
         56:be:70:68:27:13:d2:04:ab:86:80:d7:db:e3:44:2d:fd:2f:
         d2:52:d7:86:3e:b9:1e:c2:15:63:72:13:5d:18:ac:ae:92:b3:
         17:6c:15:61:29:b2:28:33:65:6a:cb:73:63:98:b0:de:7f:55:
         ba:e2:79:20:a5:c0:6f:5a:1c:a9:e5:d6:78:a2:77:58:7f:ed:
         ed:e8:21:29:b5:23:7b:11:df:af:98:48:c3:e9:99:07:d6:d4:
         99:ad:24:51:dd:6b:33:04:7b:37:8f:02:7f:66:b6:81:3f:9d:
         e7:24:8b:b9:6c:c7:0b:26:b4:4f:1c:4b:8f:06:bb:72:64:08:
         54:f0:38:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:28:00 2025 by rpki-client