Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/edb745d6-7fa8-3276-b520-e050860d0b22.roa
File:                     edb745d6-7fa8-3276-b520-e050860d0b22.roa (raw, json)
Hash identifier:          /jKAZ0jGHm8lzHw/3Q1b+zaTXIanQRqNmjmiyNg20e0=
Subject key identifier:   1B:F3:3D:01:E3:7B:79:06:6E:06:62:B3:96:90:AE:DD:26:80:1F:35
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285848F4F691439BD5ABDEBB605E00
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/edb745d6-7fa8-3276-b520-e050860d0b22.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     1280
IP address blocks:        2001:4f8:b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:91:43:9b:d5:ab:de:bb:60:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=e97baefb-0153-4b3e-b6ce-62e98237ee96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:df:17:a8:7b:64:5b:89:04:79:8b:ba:92:a4:
                    e0:a0:fa:3f:52:13:c9:9e:13:f8:91:d6:24:1e:f9:
                    9a:e1:e1:8c:76:e1:2b:64:e9:e4:5c:62:c4:6b:c6:
                    66:44:1e:81:db:83:8c:ac:76:eb:40:f8:b3:fa:8b:
                    c5:28:6c:d9:6f:e7:d2:c6:f8:ee:4a:da:63:8e:0c:
                    f7:54:d7:c9:3c:21:e8:79:07:a8:bd:56:7f:a7:62:
                    e3:15:84:d0:73:20:5b:86:67:12:af:43:8f:1e:f9:
                    49:59:ae:57:d4:06:68:bc:ef:11:29:2f:e5:44:18:
                    00:1c:5b:d5:db:99:9d:79:6a:ae:61:4e:ca:18:1f:
                    06:ab:74:52:41:15:50:c5:ad:89:79:b2:c7:87:85:
                    38:45:ca:21:8e:1b:05:fe:50:9c:90:d9:95:99:2a:
                    f1:09:21:ca:1d:8b:b6:42:24:f2:3e:08:eb:a6:05:
                    8b:bf:33:2f:c1:1d:db:85:04:a1:94:ef:0e:05:f9:
                    e5:a9:48:d2:90:b9:ca:ae:6c:68:59:94:48:9f:bf:
                    15:0d:12:9b:b2:bc:6e:88:51:56:24:18:93:4c:cd:
                    a1:06:54:e0:b2:20:5b:7d:53:47:75:2a:1e:e7:23:
                    c3:43:08:d0:f2:e5:18:14:7e:13:1f:13:6a:54:83:
                    d9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F3:3D:01:E3:7B:79:06:6E:06:62:B3:96:90:AE:DD:26:80:1F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/edb745d6-7fa8-3276-b520-e050860d0b22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4f8:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b0:b5:90:bd:b2:c7:40:52:08:fa:d9:6c:39:b7:3a:27:2c:
         9a:f6:fc:e8:74:b6:5f:05:97:8f:9b:0e:f9:94:75:51:03:7f:
         3a:55:1f:61:09:d3:eb:59:fc:2b:cc:65:d1:74:bd:b3:7a:a8:
         fe:3e:6c:16:ff:d2:50:59:f4:d5:b1:12:e9:35:95:26:93:97:
         8d:58:b0:9b:19:26:55:85:24:15:8e:88:63:fc:bb:19:9e:80:
         73:15:66:55:ac:63:7b:dd:83:85:ed:2e:f8:c0:ec:68:1e:60:
         6b:48:74:96:20:4b:37:91:4d:6f:ac:0c:97:77:4b:f0:d9:f0:
         1e:b2:8c:e2:3d:a8:53:34:5b:51:22:47:99:cc:f1:5a:bd:8b:
         91:82:8a:e7:29:e7:4b:86:0e:fd:29:38:76:fb:d9:62:c6:09:
         cd:f1:0c:60:b3:5e:06:d1:25:74:b6:78:5a:8e:86:6b:e1:ff:
         0a:32:67:dc:82:f1:18:2d:92:99:9c:e8:94:06:29:53:b1:5d:
         7d:91:df:15:95:c8:60:c2:6b:b8:e3:63:81:9b:18:63:2c:78:
         7d:35:dd:08:d3:50:ce:23:63:10:ed:26:a4:3c:a6:41:e2:ef:
         b5:54:82:ed:5e:6e:3e:a9:c3:df:d6:c2:b7:20:22:e5:6c:31:
         80:f2:7b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:34 2025 by rpki-client