Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/823f883e-6514-3885-b21f-65a300758958.roa
File:                     823f883e-6514-3885-b21f-65a300758958.roa (raw, json)
Hash identifier:          VKFeZPJTVaIihPPdGf1CmAMX0/UPDt4swoY7bX/ZeFw=
Subject key identifier:   7C:AE:21:55:53:23:B5:65:3F:D8:CD:4A:A3:BD:3B:4A:B0:9E:85:36
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F432858494B94F2D16B743087518C2F00
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/823f883e-6514-3885-b21f-65a300758958.roa
Signing time:             Mon 24 Mar 2025 14:39:34 +0000
ROA not before:           Mon 24 Mar 2025 14:39:34 +0000
ROA not after:            Sun 22 Jun 2025 14:39:34 +0000
asID:                     7018
IP address blocks:        2001:1890::/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:94:f2:d1:6b:74:30:87:51:8c:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Mar 24 14:39:34 2025 GMT
            Not After : Jun 22 14:39:34 2025 GMT
        Subject: CN=b2ca0eab-7b73-4951-a334-97854357e767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3e:5f:6a:51:6a:74:62:e9:22:ea:e9:e6:81:
                    9a:ec:b9:a5:d5:10:23:d6:2e:79:37:87:e9:92:16:
                    50:56:74:96:83:e8:59:3d:ef:41:14:fd:1f:35:7c:
                    8b:e5:cd:1e:75:b3:bf:cd:9e:c2:2e:b8:cd:5f:0f:
                    00:b3:64:56:df:9a:f7:07:86:9e:5a:d4:88:87:f6:
                    19:9c:b1:10:dd:d1:a7:a3:d9:60:8c:62:85:51:42:
                    19:65:ad:fe:ab:e2:8b:32:73:12:8b:20:6c:bd:1a:
                    3c:fa:2f:fa:35:ae:9f:ab:2b:d2:6f:f3:1e:5e:ad:
                    3b:b3:65:49:89:6a:57:36:c9:29:fb:f5:d7:f5:ba:
                    cd:d5:01:06:f1:0f:5a:76:3e:df:d2:21:ed:64:0d:
                    4f:e8:bc:5d:96:90:51:27:d9:be:8a:9a:c3:d9:fe:
                    46:f9:0e:6b:5a:fc:4e:9f:13:76:16:41:b9:d5:b1:
                    32:10:8d:cb:e9:e7:8c:82:e3:1e:52:3e:26:5b:59:
                    34:d6:26:48:58:47:5b:df:79:1c:60:7a:8c:74:e1:
                    4a:4a:d0:03:f5:3f:51:1a:d2:c0:1e:d3:4d:7c:14:
                    f2:14:2a:39:23:39:a1:20:cd:c9:e4:de:79:7b:a5:
                    8d:39:ab:fa:a7:8e:11:de:95:8a:c5:43:99:47:9d:
                    56:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AE:21:55:53:23:B5:65:3F:D8:CD:4A:A3:BD:3B:4A:B0:9E:85:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/823f883e-6514-3885-b21f-65a300758958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1890::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:2d:c5:a0:84:c6:93:9f:8d:32:8b:10:e6:68:d6:50:4f:1c:
         e4:03:34:ae:64:f2:0e:1d:92:1c:26:2d:e8:80:31:da:ce:1b:
         08:e7:40:fa:cc:e8:b2:21:17:81:bf:84:8a:b8:0d:c5:5e:33:
         56:a8:22:43:32:b2:e3:70:d9:91:81:0a:52:21:38:b5:e5:b0:
         1a:ef:1c:67:10:7c:9a:c2:3b:a3:88:da:29:b7:69:b2:d3:25:
         8c:e9:eb:80:21:04:ae:1d:a5:17:c6:bc:be:6b:e7:94:0e:97:
         7f:87:a9:74:66:71:06:ae:75:92:9e:5e:e3:ff:9d:e1:80:ae:
         aa:5e:d1:19:22:f4:0e:52:cb:3e:4f:53:d1:3d:fc:aa:f9:da:
         59:a8:f8:b9:c6:7c:53:8f:e7:01:3c:79:9e:5e:e5:f2:2b:54:
         05:8b:7c:eb:73:39:ad:00:92:64:78:9d:2f:81:b2:61:8a:d4:
         d9:03:6a:96:d4:97:55:3d:3f:11:d5:e3:6e:1d:2a:14:68:e0:
         3d:0c:4b:f7:f0:6d:5a:0b:a1:e3:05:a6:40:c7:78:e1:a8:91:
         3a:86:0f:2e:c3:8d:da:79:a6:dc:1b:1e:62:1c:02:75:34:cb:
         6c:cf:d4:72:02:af:eb:02:03:96:2d:0f:21:11:5d:83:35:9a:
         24:cd:85:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:17:21 2025 by rpki-client