Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a46d60ed-c21d-3325-b641-82b50ef27176.roa
File:                     a46d60ed-c21d-3325-b641-82b50ef27176.roa (raw, json)
Hash identifier:          LJnjQb3LUY9dRP3klZFA6/zDudF3rUJwjfgS68VnE+E=
Subject key identifier:   75:97:A3:5B:CD:A6:46:FE:EF:0E:82:9D:62:93:9F:63:E8:46:79:57
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0066E658BD1A12482037600
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a46d60ed-c21d-3325-b641-82b50ef27176.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8389::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:6e:65:8b:d1:a1:24:82:03:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=23ce7458-422b-42ba-be84-139eba3743a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a7:d8:ae:01:33:37:d8:a5:6a:11:0d:01:6a:
                    2b:6d:75:67:ad:db:5a:b3:e1:44:e5:fc:3d:41:8e:
                    15:9d:3f:ce:fb:b5:1b:a5:5d:81:80:7d:8d:02:42:
                    71:f5:6f:39:83:69:37:1a:e2:3b:c4:9f:3e:cf:c5:
                    4e:74:9e:1c:40:c8:ea:a1:51:07:4f:61:d3:50:a7:
                    84:b6:39:ec:12:0b:dc:7a:2c:b3:10:53:ac:38:c6:
                    92:e6:d9:69:f0:08:2b:02:ae:fd:f2:1a:a9:b3:06:
                    32:1a:55:8f:0d:1c:5d:e0:8b:53:76:79:37:a3:3e:
                    38:b6:d5:bb:08:c3:cb:dc:f3:52:cf:54:26:94:84:
                    f1:2b:92:5b:f6:12:d0:cd:c6:98:85:c0:ef:3d:ef:
                    51:41:97:64:15:e6:5d:2c:d7:3c:5f:0e:86:9a:5a:
                    8f:ff:3f:67:51:ff:e0:64:f1:55:d7:08:73:c6:df:
                    3a:ed:f5:87:3d:5d:1b:68:1b:f8:fb:3a:4f:d9:53:
                    0f:dc:9e:49:0d:df:46:8a:5f:23:5b:d0:ff:9b:45:
                    fa:a0:f8:00:33:c4:9a:54:e8:04:7a:76:0c:5a:5d:
                    9f:c1:7d:68:be:4f:56:08:41:88:d9:f7:81:35:29:
                    9d:2a:e6:92:c7:85:8c:d8:2c:db:53:1f:6e:56:72:
                    cc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:97:A3:5B:CD:A6:46:FE:EF:0E:82:9D:62:93:9F:63:E8:46:79:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a46d60ed-c21d-3325-b641-82b50ef27176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8389::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:30:99:d8:91:0b:8c:92:0f:81:4c:f2:19:85:d8:5e:d8:bf:
         4a:30:6e:da:b5:e0:7a:6f:0b:a4:20:db:bf:69:66:ba:83:da:
         bc:14:4d:ae:ff:5f:9a:1e:f8:9f:28:38:2c:ed:e3:0f:29:73:
         94:c7:38:2c:7c:77:e0:6d:8a:58:a7:de:b7:a3:94:fb:c9:e4:
         f2:7c:1e:25:6a:69:0a:55:fe:be:53:d3:e7:9c:a3:76:6d:95:
         32:ac:cc:f7:56:77:ca:a2:f1:30:bc:51:d0:0d:f1:68:b0:2d:
         6e:14:ac:43:19:a8:1f:f1:cc:f1:60:27:29:6a:b9:d9:5c:75:
         46:7a:fd:2e:a8:8f:00:9d:ba:37:58:be:7d:ff:10:39:fa:c1:
         00:7d:09:db:e9:3d:7f:b1:f7:3f:4a:54:a1:60:1d:d2:41:6a:
         89:c0:ee:4a:dc:f3:d0:9d:9a:bd:65:e8:f9:c0:6d:9a:fd:51:
         3b:20:c0:f1:14:0e:43:15:df:65:ab:07:c8:d1:e5:a1:ed:43:
         e7:7f:ef:ba:57:85:b1:27:e5:c7:c3:39:db:16:64:b2:83:df:
         41:a1:72:c3:15:b2:1c:16:de:23:f8:37:f3:dd:0a:fd:fe:f5:
         00:19:9d:bf:52:55:bd:9e:2e:7b:68:1d:e1:6b:44:11:be:bc:
         de:f4:ec:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:26 2025 by rpki-client