Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d5660ed6-4eae-32d0-a79b-c318c7681ed1.roa
File:                     d5660ed6-4eae-32d0-a79b-c318c7681ed1.roa (raw, json)
Hash identifier:          Aw+Zom1Agu0NYRZVRCRcpzgSkuPZFfJRo5KJEvNU+Ag=
Subject key identifier:   D9:49:53:1E:27:F0:B2:15:A9:CC:A6:07:88:3D:C6:3F:10:97:AF:E9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1468F7161C480D5BF2170
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d5660ed6-4eae-32d0-a79b-c318c7681ed1.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11955
IP address blocks:        2606:a000:1700::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:46:8f:71:61:c4:80:d5:bf:21:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=d8c672eb-b4e9-45b4-87d5-7f1b8cd70d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c9:88:e1:01:34:53:a8:58:60:bc:57:20:4a:
                    9c:2b:d4:7b:82:6d:8e:fd:9a:93:f0:42:75:82:c8:
                    56:95:12:08:d9:75:8a:ee:4b:e6:83:6b:7a:a1:d1:
                    77:4b:40:21:7d:10:82:63:f8:1f:7a:e1:c9:b0:0d:
                    5b:89:32:95:e0:7c:a4:48:61:b6:56:cd:96:13:7f:
                    7d:95:7a:c2:f4:bb:1b:fb:ca:86:a8:99:6f:3c:60:
                    8c:3b:5d:5c:dd:21:11:56:ae:65:91:9c:46:d9:4d:
                    85:9e:83:b8:18:fa:db:6b:54:9d:35:bb:5d:db:22:
                    3f:25:08:94:fc:5e:8d:08:0d:9a:88:f9:3d:ec:eb:
                    e7:72:20:2a:83:ff:f8:64:cd:b3:54:8e:e2:ba:8f:
                    1e:ed:3f:42:66:aa:dd:df:f2:75:79:6f:9b:2e:81:
                    5e:74:92:bf:a7:5a:cf:38:ff:49:a3:1b:d7:a0:20:
                    d2:75:f9:b8:08:41:81:f5:ca:9b:50:16:be:9a:54:
                    45:3e:29:78:d3:84:ef:c2:62:d0:02:7c:3c:b1:1a:
                    25:11:8e:aa:6f:65:d1:8a:df:a3:c3:83:81:ca:ff:
                    3e:9e:f1:66:f0:d0:d1:28:98:aa:e8:4d:99:e5:13:
                    d6:78:76:8b:14:0c:06:fd:ee:a3:37:e4:21:f6:24:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:49:53:1E:27:F0:B2:15:A9:CC:A6:07:88:3D:C6:3F:10:97:AF:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d5660ed6-4eae-32d0-a79b-c318c7681ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a000:1700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:fb:2a:dc:bc:51:ec:7e:fe:43:96:aa:05:f0:59:2f:24:ee:
         c1:92:73:ef:d9:65:46:c2:dd:05:c3:de:31:86:e8:1f:f9:20:
         d6:69:4f:ec:35:90:0a:c8:93:0f:5b:a7:89:89:69:ad:ac:1e:
         11:6c:84:e2:df:8e:c4:68:53:b5:2c:07:b8:b2:91:91:f7:dd:
         12:40:75:e8:43:50:a0:56:05:2c:cb:06:53:3b:88:b8:6d:ec:
         73:dd:08:9d:41:c2:ff:8e:2f:e0:32:5e:48:cc:1d:d5:99:4e:
         ce:32:ae:e6:3d:c0:34:26:1e:cf:ce:56:cd:c1:20:e2:47:09:
         60:0e:ec:3b:d7:50:78:1a:7a:07:72:cb:6b:44:61:d6:9a:21:
         8d:55:f1:84:91:9e:e0:aa:f1:85:b0:c9:ab:31:30:cb:c3:9a:
         eb:e7:52:98:38:8d:fa:3f:2a:c6:cb:d2:87:7b:4e:57:95:a5:
         b3:f8:07:70:df:6d:5d:d2:e2:f2:48:ff:30:a0:05:8e:f9:45:
         b4:63:83:25:39:7a:48:9e:d5:24:42:fc:d3:2d:b8:fb:3b:38:
         bd:76:3e:53:b8:78:97:e5:09:b3:9c:58:be:1a:92:a7:92:c6:
         8b:9a:06:1f:29:ca:30:c2:fc:a6:e5:fa:96:eb:8d:0f:81:73:
         cf:a7:d8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:12:58 2025 by rpki-client