Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/49518ee8-2efd-33a1-8600-fb34d521bc39.roa
File:                     49518ee8-2efd-33a1-8600-fb34d521bc39.roa (raw, json)
Hash identifier:          aBP3H8cuJjLGGYxOOivjZsCfrqlD2FfUX2mJiXKZ96k=
Subject key identifier:   AA:F2:4A:59:D6:E4:34:9A:AD:5E:29:26:DC:09:E9:EC:ED:90:F5:31
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285848F9269FEFE904FD4895768500
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/49518ee8-2efd-33a1-8600-fb34d521bc39.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     30133
IP address blocks:        2001:500:78::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:9f:ef:e9:04:fd:48:95:76:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=80501cf5-a020-47d6-ae2e-679ef51fb266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:69:81:df:c8:77:e3:60:ad:a1:7b:70:dc:d5:
                    c0:f4:4e:3e:9c:d0:64:56:13:ea:b4:11:d5:e6:b0:
                    1d:41:af:70:f9:4c:c3:9d:81:e4:01:fe:0d:f2:95:
                    35:0c:c4:c3:7f:c6:31:c1:10:c9:d7:67:43:1b:38:
                    6d:18:f8:15:6e:3a:80:49:27:27:88:20:14:e4:c9:
                    b6:eb:6c:64:fc:d2:be:6b:d4:83:d6:e0:ff:bf:f2:
                    4a:5d:44:cd:94:32:31:f0:55:42:6b:79:c7:44:ba:
                    71:33:34:c7:c2:5b:9a:f8:02:93:e0:06:5b:4e:6a:
                    cf:74:4f:08:4e:b9:3f:d7:92:5e:9b:af:19:63:e6:
                    be:77:4f:de:d9:17:46:b1:37:93:42:d7:ef:e7:bc:
                    a7:07:57:32:f0:0d:4f:39:f3:04:bb:cb:2a:5e:8b:
                    64:1d:79:e5:1a:d4:1e:e5:46:8e:45:ab:01:fa:2a:
                    26:3a:e0:63:17:0c:a8:a9:f1:f4:fc:bc:49:a4:49:
                    30:04:cc:f1:f8:49:9b:e6:90:32:29:80:29:03:08:
                    09:bd:d5:b7:57:b4:37:ba:b8:d9:9b:15:f8:dc:67:
                    a3:ec:d1:3a:02:ea:6b:bd:9b:39:51:55:9a:10:88:
                    c9:e4:82:1a:64:9b:23:d9:bd:e5:d7:f3:74:fe:4e:
                    89:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F2:4A:59:D6:E4:34:9A:AD:5E:29:26:DC:09:E9:EC:ED:90:F5:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/49518ee8-2efd-33a1-8600-fb34d521bc39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:78::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:48:5a:81:8e:9c:be:87:cd:a8:5c:09:0e:f9:43:13:b5:cd:
         77:7b:bc:30:2c:de:c9:63:b3:77:e6:c9:14:0e:9f:3c:34:bb:
         b7:cd:e6:98:e7:5c:f6:35:70:24:38:2f:65:54:7d:67:07:9e:
         ed:24:93:cf:c4:f1:b8:89:5e:38:6f:de:79:d7:cc:8e:51:65:
         18:02:09:96:46:03:94:af:6e:d3:74:6f:80:fb:85:79:bc:aa:
         4f:fd:77:cc:93:7c:53:f7:e2:dc:27:e7:1e:1a:45:4d:d5:01:
         f6:6c:ae:d1:17:c6:2a:c7:28:25:f2:07:bb:23:38:94:51:ce:
         12:ea:ff:35:ed:85:30:2f:58:41:ce:bb:4a:c2:a7:ac:39:de:
         70:85:fa:15:02:7b:14:ea:39:c1:58:b0:23:75:a5:8e:89:8e:
         aa:29:f2:0c:f6:c9:76:b1:44:09:f6:72:8e:24:58:f1:2c:38:
         f6:a9:15:28:a8:30:25:6f:1e:75:56:4b:15:25:98:e6:bf:1e:
         7b:3a:df:7a:50:df:1b:78:b6:6e:08:81:7e:63:ab:4c:70:41:
         11:81:d6:40:58:8a:44:69:f8:20:f0:9d:d6:38:be:be:5c:e7:
         d7:9a:67:fa:43:44:74:fb:b3:7d:dd:ee:14:2b:0f:30:e7:5e:
         fd:eb:13:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:21 2025 by rpki-client