Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2db1f454-3527-345c-a857-68b9d2939fd7.roa
File:                     2db1f454-3527-345c-a857-68b9d2939fd7.roa (raw, json)
Hash identifier:          oarZMTxdaIQsmVC9AhI6QglAdkmEypmmM1cv6DjFx/c=
Subject key identifier:   D9:F1:5A:B2:B6:41:0D:73:18:A1:82:98:55:8B:51:8D:D7:44:E0:40
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00671A63606437DAC6F8F00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2db1f454-3527-345c-a857-68b9d2939fd7.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:80c3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:71:a6:36:06:43:7d:ac:6f:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=baf2d212-b17e-4c64-a372-ac1a3db8ba4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:38:35:c2:1a:fc:8d:28:d4:33:13:05:fd:c3:
                    32:23:f0:b7:57:bd:a1:87:a3:2f:91:0d:76:22:8b:
                    bf:d5:2b:cb:e4:10:f3:1c:02:53:e8:7f:48:b3:34:
                    d0:0b:63:9b:1c:00:57:97:ad:93:61:56:bb:4c:ac:
                    bf:55:a6:b4:3e:50:f9:2d:ed:10:07:58:25:1c:dc:
                    c9:f1:7c:31:4d:cc:19:7a:38:f9:b9:78:c2:31:d9:
                    8d:13:e2:3d:05:ed:60:8e:e5:8e:6f:24:52:62:72:
                    c6:57:09:fd:bf:ee:58:b9:48:a9:21:58:6b:43:14:
                    f8:41:db:09:8e:6c:39:31:9e:2d:ca:e0:ad:90:3b:
                    ff:55:24:a6:a6:d2:3c:42:c8:76:d8:80:bb:33:d5:
                    61:b3:57:40:8f:97:18:db:7f:f3:17:49:0b:eb:d7:
                    20:61:38:dc:15:61:bc:b0:db:cc:8a:2f:73:55:d1:
                    f5:23:33:af:a1:14:50:80:0f:0b:d9:83:ec:11:22:
                    47:cf:65:0f:81:f5:80:df:cc:90:5d:5e:6a:45:18:
                    64:d0:59:10:74:2f:fe:65:d1:d1:9a:9e:f8:23:c0:
                    38:92:b9:2a:b8:ae:db:4e:f1:a8:c6:76:5b:c9:ed:
                    b7:63:8b:40:b2:7b:16:65:2b:90:63:6a:32:eb:ab:
                    0c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F1:5A:B2:B6:41:0D:73:18:A1:82:98:55:8B:51:8D:D7:44:E0:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2db1f454-3527-345c-a857-68b9d2939fd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80c3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:bd:58:5f:a5:ad:54:03:61:1e:9c:13:f1:c2:71:81:00:49:
         47:8f:96:81:99:8e:03:fd:d9:8f:9a:03:b2:27:8b:63:3b:04:
         25:e3:e1:59:d0:d0:d2:18:3f:4f:36:f3:75:60:93:e3:c9:29:
         1c:28:6a:8d:41:12:ee:29:86:7e:ef:ef:f8:4c:ad:57:48:85:
         45:94:4f:33:7f:c9:70:52:f7:d0:55:ec:8d:54:f1:97:18:0f:
         b4:e6:af:46:c4:f6:65:2a:c4:42:f2:1f:26:e8:6a:ea:da:f5:
         c0:db:04:8a:7c:57:f2:53:ca:b5:c4:a2:8d:be:3a:44:7e:cd:
         fc:e5:89:9d:3d:39:d5:b0:d3:02:bb:0d:4e:e4:53:ab:a4:1d:
         05:5d:d8:e9:8f:35:dc:5a:d4:05:1c:01:5f:be:ab:80:95:98:
         1a:1d:21:88:ba:b0:2d:79:b4:60:ca:b7:ba:6f:cf:f3:02:1d:
         10:5b:ae:7d:8a:74:89:24:a0:dc:5b:27:12:3c:2f:eb:c7:c5:
         b8:1b:3c:98:9b:2e:e7:2e:cd:31:ea:bd:a3:b9:a2:5e:4a:f1:
         27:c4:d2:1b:b9:fb:13:79:5e:89:2d:fc:36:5c:af:dd:ba:a6:
         5e:ca:2c:2c:9a:0e:ed:03:da:a9:59:96:c3:c3:80:e1:ab:73:
         e8:ea:cb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:55 2025 by rpki-client