Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/84199ee8-6fc9-3f89-963a-d28f3a32d890.roa
File:                     84199ee8-6fc9-3f89-963a-d28f3a32d890.roa (raw, json)
Hash identifier:          eiTkN4pc0VMh0ED5tNZpDi+ZM3PS1NsGk+VBsRqEGnw=
Subject key identifier:   3F:C3:0D:49:D6:AA:70:C7:FD:AE:55:82:48:A2:98:28:AF:DC:6B:FE
Certificate issuer:       /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial:       010D0C9F4328584913AC172C009EE5A263B80900
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/84199ee8-6fc9-3f89-963a-d28f3a32d890.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     8038
IP address blocks:        2607:fae0::/36 maxlen: 36
                          2607:fae0:2000::/36 maxlen: 36
                          2607:fae0:3000::/36 maxlen: 36
                          2607:fae0:4000::/36 maxlen: 36
                          2607:fae0:5000::/36 maxlen: 36
                          2607:fae0:8000::/36 maxlen: 36
                          2607:fae0:a000::/36 maxlen: 36
                          2607:fae0:f000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:17:2c:00:9e:e5:a2:63:b8:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=b87369cf-db6b-4ed9-8d55-2f54214f0f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:53:28:f0:35:63:65:7a:b7:bc:a8:00:45:02:
                    d6:31:8e:d0:dc:e3:f0:d7:5a:fd:7f:c6:e9:db:61:
                    8b:5f:f4:99:06:b5:6f:80:c9:6a:c3:d2:77:7e:c0:
                    af:18:58:3a:fc:03:d2:74:24:7a:d6:72:00:30:6a:
                    72:df:d4:ee:be:47:2c:ee:34:10:cc:06:30:66:db:
                    da:b1:1f:d9:12:5a:2d:76:ec:7c:8c:c4:b9:a1:1b:
                    4b:26:f4:17:b8:6e:3c:4d:22:ce:02:95:ad:3c:c8:
                    f8:cb:9f:ff:c8:c1:fd:f4:4d:cf:93:67:6f:44:1d:
                    01:ef:2a:a5:9c:7f:15:50:c8:65:66:f8:87:93:6c:
                    a8:1f:c0:a1:9d:ff:85:a5:df:3d:24:a2:1a:db:46:
                    e7:60:d6:50:b4:42:7d:7f:e1:39:01:41:39:01:12:
                    a4:97:bb:6a:cf:15:0f:cf:65:0e:9f:b8:c1:47:db:
                    6c:82:1e:92:ed:b0:52:11:cf:8a:df:28:92:04:88:
                    56:48:d1:68:bf:0d:56:da:1a:42:70:ee:ec:02:ff:
                    8c:b3:25:e4:bc:2a:0f:69:3b:80:68:11:f2:4b:11:
                    48:27:fb:79:a9:5a:21:ed:9a:fa:6e:b9:77:98:7f:
                    40:87:0c:fd:a4:59:c9:78:a8:82:ee:00:c7:6e:0f:
                    19:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C3:0D:49:D6:AA:70:C7:FD:AE:55:82:48:A2:98:28:AF:DC:6B:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/84199ee8-6fc9-3f89-963a-d28f3a32d890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fae0::/36
                  2607:fae0:2000::-2607:fae0:5fff:ffff:ffff:ffff:ffff:ffff
                  2607:fae0:8000::/36
                  2607:fae0:a000::/36
                  2607:fae0:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c0:30:d3:3c:80:ac:66:3b:4d:e3:03:61:c9:af:50:69:87:
         d8:a8:62:18:e9:9e:35:09:ad:c2:b8:a3:f1:01:95:4f:fd:3d:
         70:d2:4c:81:08:6e:24:df:8d:25:35:1e:d6:7d:67:8e:c6:70:
         b4:55:00:e3:16:2d:ff:b6:af:17:92:7a:4d:1c:a4:37:94:cd:
         22:ba:a1:65:d4:54:ed:e8:ab:db:7f:99:29:17:2f:d3:26:8e:
         43:05:83:28:81:2e:20:6c:9c:40:ea:be:5c:85:e0:1c:92:c0:
         9e:59:43:f9:79:bd:72:1b:39:b4:a0:b3:e4:26:01:33:26:7f:
         48:f6:cf:f2:c9:06:49:83:7c:b5:e2:02:28:36:84:e7:86:01:
         ba:58:82:f0:3c:80:fd:a9:69:29:d0:a5:bc:ce:7a:af:c2:be:
         56:96:8d:9d:08:89:d7:11:e7:ae:4c:29:0b:33:5b:a3:39:81:
         08:ee:b7:b1:b0:43:ee:4b:c2:56:f6:16:fd:9a:bc:44:cd:57:
         f3:ba:8d:3e:6a:30:f7:fb:94:5a:44:c9:47:31:65:fb:01:81:
         62:d0:a3:75:21:d7:56:02:1e:55:b0:3a:e4:e4:8c:3a:40:bd:
         04:93:6e:e5:7c:06:8c:59:ec:1e:6a:ab:d8:a5:d8:56:fb:d6:
         9c:a3:95:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:18:23 2025 by rpki-client