Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/89e3c95c-09bd-3ff6-b765-1c0251777a19.roa
File:                     89e3c95c-09bd-3ff6-b765-1c0251777a19.roa (raw, json)
Hash identifier:          N4iQRdtHiIDJ8FfBmOOGlevGMUWNfHO9cdEMTRVApbQ=
Subject key identifier:   B1:1D:33:83:BC:38:86:EE:F2:D4:86:26:BE:48:FA:CE:8A:5C:90:72
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0066EA23A1744C58DA27940
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/89e3c95c-09bd-3ff6-b765-1c0251777a19.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8489::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:6e:a2:3a:17:44:c5:8d:a2:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=ce5d00b2-e35c-455b-b627-c3aef4f26bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:bd:22:66:68:ef:2a:71:4e:dd:15:59:9f:
                    30:5e:08:f5:3e:a5:1f:d4:48:0e:81:d2:a8:12:81:
                    c1:6f:77:ae:98:00:89:56:15:da:12:98:98:52:5a:
                    93:03:bc:60:fb:df:d8:b3:22:7e:f6:f7:da:9e:d0:
                    b3:48:67:5b:fb:73:28:ca:bc:ef:c7:91:b8:40:08:
                    1f:0c:00:ab:53:b5:92:89:79:ba:cd:7c:3f:0f:43:
                    ac:7b:4f:9c:aa:d6:22:c3:fb:14:69:75:5e:6c:53:
                    53:1f:ec:9b:eb:ac:88:af:05:96:a9:e4:6e:03:4b:
                    67:72:59:0e:7f:df:cb:7a:b1:ff:9e:92:cb:be:73:
                    b1:b3:df:47:50:88:04:8a:c8:8d:75:2e:97:b9:1a:
                    f2:20:e4:62:27:29:3e:69:57:dc:f9:ae:6f:94:16:
                    01:1d:7f:45:bb:d1:88:94:f2:b4:19:51:90:16:50:
                    de:1e:7b:ac:7c:56:b5:14:46:a4:e2:88:28:06:75:
                    c2:c4:ff:3e:b2:66:69:00:fb:9a:81:35:a3:5c:f2:
                    be:5e:cf:0d:8d:4f:74:db:51:96:2e:57:5e:aa:47:
                    81:bc:a2:58:56:55:e0:38:5f:ec:06:05:8b:8d:a2:
                    1a:19:e0:21:ec:11:9b:da:02:6b:22:73:83:1d:f7:
                    15:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1D:33:83:BC:38:86:EE:F2:D4:86:26:BE:48:FA:CE:8A:5C:90:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/89e3c95c-09bd-3ff6-b765-1c0251777a19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8489::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c9:48:6c:72:7a:3c:83:f8:83:b3:d9:07:c9:4a:43:a3:23:
         1b:08:31:c2:ea:13:0d:a1:5a:da:be:e3:b4:1f:b4:8c:e4:8c:
         ea:f4:c4:41:3e:77:55:8e:5f:fd:32:97:62:3a:7f:1c:c6:fb:
         aa:10:fd:44:dd:4a:2b:e2:d6:c4:e3:3e:5c:1c:c5:ca:e7:5f:
         36:c1:5a:3f:c7:1e:8a:33:fc:74:71:6e:aa:e4:a2:d9:71:e3:
         36:2d:fc:10:5c:18:11:5b:04:ef:b8:58:bf:e2:e7:21:fe:ff:
         cc:05:63:f9:25:89:ce:09:48:52:9a:f1:73:3a:5c:37:ee:f8:
         d6:3c:9f:53:d0:99:c3:34:63:c3:37:1b:b6:f5:35:39:45:3a:
         38:da:24:e1:59:89:6a:4f:f6:19:8d:e7:c5:9b:3d:4f:b6:26:
         81:a3:16:b3:b9:1a:b1:b2:e9:0e:2d:86:c4:1f:6f:24:e1:f0:
         d9:f2:43:5d:13:28:3a:ae:05:22:be:f1:3d:91:37:c8:2e:c7:
         d5:a0:08:a3:91:c5:3c:88:e1:6d:c5:03:e5:94:1f:aa:bd:d9:
         ef:98:36:92:9c:df:e4:6b:2d:b5:a5:04:a0:c5:c2:46:3d:b2:
         99:6d:c4:6c:72:6c:54:4c:f6:26:76:9f:a9:55:0e:80:2f:bb:
         d6:f7:3d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:36 2025 by rpki-client