Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/a876a9ef-80a8-3c52-ada8-01542b4934ea.roa
File:                     a876a9ef-80a8-3c52-ada8-01542b4934ea.roa (raw, json)
Hash identifier:          0KD/2ZQ1Bz1nm4/GrCPnJFs+9Mf2Mz7az7WpFQt2kZs=
Subject key identifier:   92:60:28:1A:E0:6E:B6:59:77:B0:B9:3A:0C:D5:55:81:09:4D:E5:2E
Certificate issuer:       /CN=1dc547da-42a0-43ba-8d2f-21375737b95b
Certificate serial:       010D0C9F43285848BBBB81DAEB64B66759162E80
Authority key identifier: 3D:D1:56:24:51:80:75:49:07:1A:A3:C1:39:9B:01:4F:04:D1:CF:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/a876a9ef-80a8-3c52-ada8-01542b4934ea.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     150698
IP address blocks:        2602:f9ca:301::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:81:da:eb:64:b6:67:59:16:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dc547da-42a0-43ba-8d2f-21375737b95b
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=b1ebbc84-91a9-478a-8980-3e6e61650556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:40:e6:88:d2:9e:f1:ce:a6:c2:7b:19:74:
                    8c:2c:a9:51:da:06:87:d1:e5:48:39:ea:8e:c4:f4:
                    3a:05:de:78:b4:2b:a5:c5:c6:91:51:7b:d3:1f:fb:
                    1b:57:79:68:aa:06:a8:f1:db:01:20:4a:b4:37:5b:
                    9a:4a:6e:76:a7:52:0c:a7:ce:0c:68:40:7b:a5:bc:
                    12:a3:57:21:95:d7:d4:4e:29:8c:2c:fb:3e:b3:ab:
                    61:94:0f:79:cb:6d:b4:f7:25:ac:e9:2b:16:8e:c2:
                    16:b1:db:11:19:90:11:87:1b:49:44:72:a4:e1:95:
                    e3:ad:36:93:cd:c9:fb:b1:dc:84:5b:a9:64:87:57:
                    b6:3c:40:0b:c0:34:b2:ad:d0:3e:12:2b:90:a0:64:
                    0d:63:39:2a:d3:09:f4:c6:16:08:b9:cc:42:cf:cb:
                    78:bc:39:fc:c9:df:4a:fe:5d:de:65:e7:e3:69:83:
                    fb:92:46:b7:8e:e1:2e:9e:a6:a2:3a:ee:d6:b9:ef:
                    16:02:2e:84:ff:9b:8c:39:a2:b4:cb:53:e8:75:65:
                    1e:8d:ca:90:a7:49:35:76:a6:07:27:2e:3c:7a:10:
                    f4:33:37:54:6f:8e:e6:41:df:1e:32:60:2f:a4:9a:
                    cc:f1:cd:a1:dd:c1:a4:87:12:40:03:f1:a7:cb:83:
                    8c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:60:28:1A:E0:6E:B6:59:77:B0:B9:3A:0C:D5:55:81:09:4D:E5:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/a876a9ef-80a8-3c52-ada8-01542b4934ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/1dc547da-42a0-43ba-8d2f-21375737b95b.crl

            X509v3 Authority Key Identifier:
                keyid:3D:D1:56:24:51:80:75:49:07:1A:A3:C1:39:9B:01:4F:04:D1:CF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ca:301::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ac:ad:9d:78:c8:60:91:6f:fb:b9:74:53:42:42:65:19:5a:
         b6:ce:53:7e:65:35:6a:ca:ae:b1:2f:83:c5:35:24:fa:d8:03:
         45:fd:83:42:93:31:a8:d6:e7:e3:61:05:f3:6e:2e:c0:09:c9:
         91:a0:c0:52:dc:2a:ae:52:df:08:d1:70:e9:ff:bb:14:0e:06:
         7c:a7:89:7c:cb:92:cb:26:e6:73:47:9f:a1:22:c1:74:97:26:
         c3:91:f0:0f:fd:14:a7:04:83:f1:a2:34:00:82:11:b8:45:e3:
         75:9d:ca:0d:db:3f:70:6d:97:22:4c:01:1f:60:1c:d0:c0:b0:
         69:09:fe:f4:cc:e4:5c:b5:55:fe:94:ce:26:17:c5:f8:22:36:
         64:7a:10:e3:f9:6a:3f:c5:41:38:4c:5f:25:46:d5:03:2c:96:
         7f:6b:52:f0:ce:c6:a5:0c:b1:e9:1e:93:83:da:a8:54:5d:4b:
         08:42:a5:34:38:a3:ec:95:2c:88:3f:36:1e:b8:49:1a:e2:df:
         8d:7d:f4:dc:42:b8:1b:66:73:19:c2:ee:c8:e4:b4:ae:a9:1d:
         d0:0a:da:d1:d8:cf:39:f7:71:cd:d3:be:cd:4b:97:1a:ea:2f:
         73:79:b1:9d:cd:96:33:8a:37:d4:f8:f7:89:04:fa:a7:c1:c7:
         9d:c5:f6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:28:02 2025 by rpki-client