Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/7a184cf5-da33-3533-a79f-62a7ad8ad7c4.roa
File:                     7a184cf5-da33-3533-a79f-62a7ad8ad7c4.roa (raw, json)
Hash identifier:          PbFDhsmPGXTVHZk9QRClleYMjaT9HTN9EnIxfCPe16A=
Subject key identifier:   48:4D:08:D4:DE:E1:9C:87:C4:97:43:07:2A:E5:9F:1F:F7:1B:2F:1C
Certificate issuer:       /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial:       010D0C9F4328584882808C59BE527027D6D74A00
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/7a184cf5-da33-3533-a79f-62a7ad8ad7c4.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     398395
IP address blocks:        2606:fc40::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:8c:59:be:52:70:27:d6:d7:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=819e86a5-3b23-4d40-bfa8-f27b14c4ffdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8e:a0:ac:0b:8a:f6:cf:d9:3b:bb:ae:67:a3:
                    b4:b4:fb:a4:2c:89:b9:f7:bc:c2:aa:75:04:67:5e:
                    a1:70:6e:45:e9:df:3a:b0:b1:30:72:fd:d9:30:b6:
                    a5:ec:9e:e9:dc:4e:0a:11:9c:06:7a:ec:c0:d9:49:
                    f2:3f:a5:cd:15:a5:9e:c9:d2:93:c3:ed:24:96:be:
                    04:0f:d7:44:7f:e2:b8:3e:81:8b:c2:5e:09:53:c5:
                    df:1b:86:38:32:33:f9:b9:b4:10:d0:e7:02:68:e7:
                    c4:45:5f:08:b0:b6:bc:e6:d6:82:f5:6b:0f:27:d8:
                    d4:fb:24:64:0e:e4:fa:ca:61:c3:7e:dd:76:86:fb:
                    22:74:31:76:99:11:37:a5:6d:0d:00:84:35:3c:4d:
                    f5:11:15:62:7f:61:96:08:73:07:ee:cd:dd:71:10:
                    ef:d2:45:5e:17:ed:7c:84:61:05:34:0e:1e:6a:61:
                    8c:bf:0d:e5:5a:a6:5e:c0:20:63:5e:28:74:c3:5b:
                    92:66:ac:e7:27:3f:eb:9e:87:04:f1:3e:95:fc:f0:
                    61:86:10:1a:a7:9b:c3:5e:de:19:d0:1f:71:d1:e0:
                    ad:a9:ce:39:30:33:5c:da:55:16:06:3a:5d:1c:d7:
                    43:4d:61:80:9f:52:01:af:56:c6:54:88:df:9a:0f:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4D:08:D4:DE:E1:9C:87:C4:97:43:07:2A:E5:9F:1F:F7:1B:2F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/7a184cf5-da33-3533-a79f-62a7ad8ad7c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fc40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:59:b5:93:a3:08:77:28:67:d5:35:dd:76:83:80:71:0f:04:
         07:f6:97:0e:ba:82:dc:f4:f0:2c:84:ad:80:cc:9a:35:4b:36:
         44:f8:c5:59:69:17:3a:de:5b:45:f9:01:71:4c:c5:52:f5:1a:
         ef:de:33:f4:3f:e6:78:a7:b4:2f:0f:e5:d8:69:ba:49:0d:71:
         fa:cb:c5:d4:a6:38:8a:aa:7b:b0:1e:ae:19:45:96:b1:66:61:
         bb:44:fe:b5:97:06:85:cb:a5:a4:c5:12:2e:05:6a:d2:84:2a:
         4f:3c:f3:88:1e:28:5d:04:cb:17:b2:c5:f5:ce:9a:83:62:a2:
         5e:b8:d7:38:bc:a7:8c:31:26:96:e7:67:ec:6f:93:12:b9:05:
         dd:3f:35:ca:f2:00:8f:e0:c8:3d:db:ee:3d:4d:2c:3c:83:d1:
         6b:86:15:c5:8a:3c:d5:6d:24:6c:11:3e:34:a0:b5:80:00:fe:
         b1:23:f6:a7:41:a0:b3:a7:30:31:29:3f:7c:20:05:00:bc:a8:
         be:67:be:bb:8f:f5:ae:3a:de:51:42:46:52:d8:19:b8:83:03:
         40:e7:48:2d:16:f0:0a:6c:99:0a:10:79:6f:5b:53:ce:ab:10:
         fe:9e:fa:a2:22:e9:18:89:58:e3:7c:f4:1c:71:15:e9:78:93:
         67:ab:58:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:10:58 2025 by rpki-client