Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8dd00592-9ff1-3961-b2bb-a25a4d2a4a1b.roa
File:                     8dd00592-9ff1-3961-b2bb-a25a4d2a4a1b.roa (raw, json)
Hash identifier:          4u9rKLhcM4w8JZ8tDfibZ3yQspwLKy6Vw7SGYTdKKQc=
Subject key identifier:   E6:F9:63:C7:A9:B4:5B:74:BD:FC:35:1C:98:69:F9:10:47:E9:A6:7A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0069A9E3CEF81F218AB7000
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8dd00592-9ff1-3961-b2bb-a25a4d2a4a1b.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8119::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:9a:9e:3c:ef:81:f2:18:ab:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=d5c29094-8505-4e46-a705-bd93a8811792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cc:6c:8a:f5:85:21:4c:96:99:fd:92:d9:7d:
                    60:0b:dc:b7:02:87:17:58:0a:2f:9e:cf:e5:0b:5b:
                    1e:99:d8:00:0f:49:52:ea:8c:e4:82:2b:f6:21:d3:
                    5a:71:f0:04:ed:db:85:53:e5:bd:dc:9e:54:f0:f1:
                    c8:db:86:50:4e:e8:7d:0c:19:52:71:8d:61:a0:00:
                    9c:d9:1a:12:f8:a8:88:b5:89:80:54:05:e9:97:ef:
                    88:97:74:df:9d:cc:90:77:92:51:fa:f3:64:60:02:
                    ac:cb:56:de:67:10:00:36:19:af:29:35:9d:eb:ac:
                    27:7c:95:d1:5d:d5:67:8e:a9:d7:b0:bb:2a:c1:3f:
                    2d:4d:7e:29:86:4d:f1:83:4d:1f:c9:b2:9f:04:31:
                    1c:e2:db:63:de:5e:d5:ba:7c:36:36:98:17:43:07:
                    c9:37:f2:db:b4:f9:3d:62:64:e1:83:f9:d0:1f:27:
                    70:3f:98:c2:03:57:59:27:8d:4f:22:66:3d:ce:51:
                    aa:36:09:f6:58:eb:d6:c2:80:82:a7:12:b5:e7:e1:
                    d1:02:10:50:5e:9e:21:eb:1c:3d:4e:b4:9e:26:40:
                    f0:60:4d:32:0c:37:2f:22:51:25:aa:c1:51:21:6b:
                    a8:10:53:21:21:70:fe:15:8b:8a:2c:7b:63:be:e4:
                    fb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F9:63:C7:A9:B4:5B:74:BD:FC:35:1C:98:69:F9:10:47:E9:A6:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8dd00592-9ff1-3961-b2bb-a25a4d2a4a1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8119::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:71:a6:54:6a:a4:f9:5e:26:6a:ae:bc:66:ad:8b:ae:ac:9f:
         d4:cd:4e:8e:74:bf:87:51:12:2d:fb:75:57:f0:f4:52:32:bc:
         a9:13:38:60:a9:c7:ff:10:99:05:20:42:3c:f3:dd:f3:94:86:
         92:8e:5d:d2:c1:80:00:f3:26:09:eb:86:b0:09:e3:dc:9f:b4:
         11:8b:ac:c6:1c:07:46:1c:f2:d1:b8:a7:a8:90:dd:47:8a:8e:
         9d:91:50:59:ea:f4:e4:95:74:1c:a0:ce:10:dd:a7:a5:31:c4:
         75:bd:39:2d:9b:13:36:9e:c3:a6:a9:c0:79:d7:bb:a3:78:51:
         a3:92:be:e9:16:13:a6:ff:e4:24:92:69:43:67:fa:68:06:aa:
         b0:b1:95:75:06:c1:31:dd:12:73:5e:d4:ea:31:df:aa:d8:4e:
         9d:ee:00:72:fe:12:63:6e:e6:94:12:10:21:8e:ad:08:11:57:
         e4:2e:e4:ed:ee:53:59:3e:2d:24:6f:79:d4:72:a3:a5:20:cc:
         46:44:f3:b2:bd:d3:b2:45:01:9e:8d:c5:5d:cc:65:70:b0:62:
         54:9e:e7:b3:ca:f7:39:93:e8:f5:12:dc:f6:de:a0:b3:63:8e:
         37:50:0e:f7:54:a0:86:36:6e:a5:9a:7c:cf:27:fc:6a:66:a0:
         f5:c1:77:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:38 2025 by rpki-client