Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/599f4afe-ec79-3edb-a676-93653f7884fc.roa
File:                     599f4afe-ec79-3edb-a676-93653f7884fc.roa (raw, json)
Hash identifier:          dU9b555b3hrWY2o3ys8b5w5lhOS23u2frN6TWkxwKI8=
Subject key identifier:   11:C3:C2:18:66:C9:F1:74:05:22:DF:64:A8:04:4F:F9:0A:3B:D4:62
Certificate issuer:       /CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
Certificate serial:       010D0C9F432858491D7177C20FD9C1B57B63BE40
Authority key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/599f4afe-ec79-3edb-a676-93653f7884fc.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        2602:80a:2006::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:77:c2:0f:d9:c1:b5:7b:63:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=4b4f450c-6107-4741-9f41-e094d9959fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3d:e4:6c:e0:dc:1f:bc:4a:a4:af:37:ca:a5:
                    a1:92:b7:40:c8:da:49:88:cc:00:b9:fb:ed:1d:5e:
                    a3:74:6a:10:41:33:05:f0:7d:10:b8:e2:20:3e:3b:
                    62:85:fc:ff:33:49:97:eb:22:3c:3b:9f:25:89:8d:
                    21:56:d6:a8:15:ec:65:2f:ba:77:3c:75:b7:ad:9b:
                    b7:2b:b9:1f:97:36:05:16:2c:17:07:fe:46:76:31:
                    05:1c:46:5c:74:0a:fc:6d:99:8e:d7:ca:17:0a:ef:
                    f3:f0:93:32:c7:64:d1:da:14:a4:c4:13:c7:69:5c:
                    99:c9:01:07:9c:f9:f6:f5:51:83:6a:86:48:ad:f8:
                    62:ff:3b:f8:77:74:05:0e:7c:d3:dd:05:88:c0:63:
                    a9:d7:a0:b3:c6:d4:fc:79:e9:36:52:a7:c4:59:89:
                    6d:0d:e6:17:8c:22:b1:95:fb:8c:b4:3b:c1:59:98:
                    a7:24:c6:39:53:04:fd:63:a6:20:5a:28:bd:4e:bf:
                    ec:49:ab:fb:99:48:b6:e6:d4:02:01:9a:93:4e:9a:
                    f0:9e:bd:4c:4b:82:bd:11:0e:29:97:0c:39:91:44:
                    18:14:f3:15:77:c3:93:dd:31:6b:b2:e4:ed:90:a7:
                    0b:0e:b2:b7:f8:3d:0a:bb:bc:78:11:de:ce:68:01:
                    e9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C3:C2:18:66:C9:F1:74:05:22:DF:64:A8:04:4F:F9:0A:3B:D4:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/599f4afe-ec79-3edb-a676-93653f7884fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl

            X509v3 Authority Key Identifier:
                keyid:17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:2006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:99:5d:bb:2b:2d:a2:3d:27:7c:af:f5:19:97:e5:19:5c:20:
         fc:6f:e8:06:31:8e:5a:98:83:a4:db:82:ff:9a:33:d8:b6:8e:
         1b:c8:fb:ba:bb:fd:eb:65:87:1a:91:2e:f1:54:fc:67:7b:40:
         ac:4e:1d:47:c5:e3:bb:96:09:e1:8d:8a:2c:82:3b:8e:c6:ab:
         ce:c8:d8:d7:7b:03:8f:fd:74:a6:b9:9b:06:06:cf:60:c2:e0:
         6e:c7:45:2d:32:d9:69:dc:ef:2e:9c:60:39:58:91:94:f8:db:
         e9:5d:d3:42:4f:ed:c4:db:ae:70:a8:d3:8b:60:20:fa:d5:60:
         28:18:4b:f5:a5:3f:8e:50:4d:bf:49:63:78:a4:6f:93:58:fd:
         ff:de:7c:2c:2c:8a:02:5d:a0:52:0a:32:b9:c9:59:14:61:ab:
         a5:65:65:40:53:e8:fb:8b:6d:64:68:b3:69:04:bb:be:89:23:
         ad:ff:bc:e2:0d:05:09:32:25:f7:42:b3:a5:d6:fa:d7:7c:06:
         af:e5:4d:ac:63:0d:2a:1e:97:d7:63:df:8c:b8:4d:60:c0:f8:
         c6:3e:71:bb:99:2f:dd:49:6d:81:f1:71:29:b2:49:1d:4f:08:
         e4:ed:63:ad:07:76:ea:cf:66:13:ec:ef:01:05:9a:47:fd:73:
         92:ee:84:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:41 2025 by rpki-client