Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e908a3d2-a88b-3c77-be8f-d3554df24fef.roa
File:                     e908a3d2-a88b-3c77-be8f-d3554df24fef.roa (raw, json)
Hash identifier:          84kkRu59vptKOEVj/wcdIBmGPNujqCAj1wSFLG2oaZ8=
Subject key identifier:   25:A2:6E:67:18:C7:2C:AE:28:39:F7:05:B1:0A:EA:1E:82:FC:EC:5B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1200B2E88CF42B4DAD740
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e908a3d2-a88b-3c77-be8f-d3554df24fef.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     3456
IP address blocks:        2600:5c00:21cf::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:20:0b:2e:88:cf:42:b4:da:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=83a24ca2-3f06-4944-bf89-a2271bbb9cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a9:b3:4e:cb:2e:6d:6b:42:d0:ac:46:d4:47:
                    ce:cb:88:6b:81:8f:5e:13:cf:00:4c:b4:27:cb:3d:
                    f7:83:e1:d3:3b:e0:df:62:ca:70:b1:99:b3:47:90:
                    aa:ba:3f:79:6c:b2:58:72:97:26:60:ff:ae:3c:96:
                    73:05:d4:2a:9a:cd:2f:c7:5c:35:67:62:37:bc:70:
                    f1:db:cc:95:84:e1:8b:a4:f5:e8:e0:06:26:29:0c:
                    0b:7a:29:60:bc:53:7d:3c:a5:c6:34:c1:00:4b:de:
                    e3:68:10:a3:37:53:9e:ec:57:28:32:fc:07:fd:ca:
                    2b:ce:8c:05:f3:b6:4b:08:eb:fd:a2:81:33:c8:67:
                    ae:da:db:93:92:d9:23:0d:b3:10:55:63:30:f0:ad:
                    73:5d:e3:c8:8d:8b:65:81:54:b4:b9:5e:7d:cd:b3:
                    90:86:e6:7f:e4:03:f9:c1:d9:f0:25:5c:7d:48:1a:
                    8f:57:27:23:2e:31:18:a7:42:8a:df:94:02:f8:41:
                    31:26:90:a7:26:7c:7a:04:81:63:e3:80:98:76:2f:
                    e8:11:ed:5c:34:06:10:be:0b:b5:fe:30:dc:7a:62:
                    1c:50:55:db:92:fc:7e:e4:a6:bd:ba:76:65:a2:ae:
                    56:8d:e0:86:9d:5f:f6:ed:8f:3e:00:eb:e4:0f:05:
                    1f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A2:6E:67:18:C7:2C:AE:28:39:F7:05:B1:0A:EA:1E:82:FC:EC:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e908a3d2-a88b-3c77-be8f-d3554df24fef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:5c00:21cf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:5f:cd:3f:57:12:45:5a:a4:b5:20:f9:9d:5a:b7:2c:27:32:
         da:6f:9f:e5:9e:f6:67:57:82:cc:7b:a6:5b:bc:01:19:12:47:
         06:8b:f3:64:11:c6:3b:fd:b4:e6:b1:6d:cc:fc:98:85:01:e7:
         0d:dd:21:dc:27:b2:5b:c4:2e:f9:12:cd:9a:5a:ed:49:3d:47:
         71:1f:54:bd:f4:c0:c9:03:c4:04:a9:77:28:83:57:ee:fa:65:
         1e:aa:e0:57:c2:e6:86:03:97:5f:74:c0:3d:ea:6a:f9:39:b3:
         f6:d9:8a:15:2a:a8:dc:72:de:32:67:a4:77:b9:6e:79:34:38:
         74:ff:7c:8d:c5:41:4e:7c:d6:79:75:b6:87:8f:8c:28:6d:ab:
         93:be:69:cf:36:33:e0:b9:f1:33:13:a2:f0:99:b6:de:57:09:
         22:fe:77:74:4a:5a:40:ac:50:65:78:fb:42:0e:66:8a:d6:8c:
         3e:b0:35:34:e8:94:de:75:84:da:b9:d6:df:63:d6:db:48:1c:
         dd:0c:8e:4b:ee:38:80:8a:ec:06:89:4e:06:71:82:54:65:ce:
         15:18:18:ce:d3:8d:0f:b9:37:f2:d0:7d:b7:39:3e:1f:09:7b:
         6c:a7:b8:fc:df:4e:ca:83:71:4d:0b:8b:b5:6e:be:50:80:f0:
         ff:cb:cd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:28:07 2025 by rpki-client