Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/1db987fa-f8dc-31cb-95b1-3953903e18b5.roa
File:                     1db987fa-f8dc-31cb-95b1-3953903e18b5.roa (raw, json)
Hash identifier:          XFU5z7bfUCXeQKuN2+s5vLYyHFa9NwkrcTWYGqAgdfw=
Subject key identifier:   3D:6A:44:81:CA:E4:BC:9A:98:1F:0D:E1:D6:AB:87:B3:90:6B:AD:AD
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F43285848FD56CE826731955E22AC9C00
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/1db987fa-f8dc-31cb-95b1-3953903e18b5.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     399883
IP address blocks:        2602:fc06:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:ce:82:67:31:95:5e:22:ac:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=57ab7197-b523-4d85-9241-183fbde77869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ec:7b:e4:92:ac:b5:a9:60:3e:c6:af:28:91:
                    a3:3d:5d:4c:ca:7e:18:85:b6:77:a1:8a:66:2d:6b:
                    d2:38:73:ea:7e:78:1a:e9:83:91:e2:f7:c1:0d:29:
                    58:46:6d:93:92:32:5a:6c:94:ff:2f:36:4c:91:52:
                    ee:f7:2f:fc:5a:95:2d:ac:4c:5f:b8:f5:35:96:50:
                    f4:8a:49:1b:e8:8e:98:45:b3:ec:6c:8b:4b:de:20:
                    e4:c8:8a:20:83:69:43:0b:0c:b2:5f:8f:2d:cd:b8:
                    72:f7:f8:b8:ce:d9:4d:5e:89:48:73:4f:94:6f:24:
                    d4:fb:8d:b8:63:bb:8e:0b:4c:06:13:40:76:8e:0c:
                    26:b7:88:11:cf:55:cb:0e:42:7c:54:14:5a:d0:e2:
                    ce:54:cd:7f:db:18:cb:a3:28:f6:5a:57:3b:5b:3e:
                    07:e1:5e:eb:6e:83:cd:3f:37:2d:60:4b:66:8e:6b:
                    65:1f:9f:34:09:9c:c9:31:94:e8:e7:79:11:fa:5d:
                    e4:99:b9:e6:96:cd:43:04:5e:fc:e4:3f:6f:93:c7:
                    96:90:bb:2c:af:d2:bf:ae:3d:8b:b9:63:86:63:c0:
                    16:99:4c:d5:ae:bc:39:29:87:8e:88:b2:b3:f3:34:
                    57:d4:a6:2b:70:60:e0:3d:dd:f6:a8:2c:f4:da:46:
                    ef:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6A:44:81:CA:E4:BC:9A:98:1F:0D:E1:D6:AB:87:B3:90:6B:AD:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/1db987fa-f8dc-31cb-95b1-3953903e18b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc06:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:69:f1:c0:7b:07:b2:85:c5:b1:66:7f:bf:57:28:52:fe:cb:
         9d:eb:1a:b6:8b:df:ac:6f:db:7b:98:2b:1b:69:5e:32:0f:23:
         dc:f2:bc:f1:53:11:31:e3:0b:5a:b4:fb:16:38:8d:28:0a:07:
         04:48:29:83:72:15:10:3f:d0:27:77:6f:1b:c3:5b:b8:3a:6e:
         60:ec:6c:92:5e:ad:88:22:3c:bb:70:26:18:8f:d5:e6:14:e9:
         e3:ea:e2:c1:1c:ae:ef:c3:d8:7f:7f:88:9d:b4:13:02:ce:ff:
         13:75:3b:ff:db:23:36:38:1b:79:e8:79:0c:08:7d:db:2b:65:
         42:55:b9:b4:ec:63:5e:9c:fa:8e:be:e7:81:8c:ac:3d:80:28:
         0b:3d:20:b0:03:05:f9:7f:f4:3a:90:5a:25:f2:ca:8b:b1:f8:
         b6:9c:ba:2c:42:91:a5:06:34:b9:64:7a:cf:9b:6e:35:1a:bf:
         ae:1f:ba:8f:6a:41:d2:e9:e1:29:9d:6c:8f:6c:dc:47:a9:b6:
         65:1a:2f:69:7e:d2:94:aa:56:e4:35:65:f7:fd:d8:23:47:91:
         7f:60:c4:61:94:50:d9:61:fa:5d:6c:99:92:b8:75:67:43:3b:
         24:b0:1c:4d:b8:d1:38:e2:f2:12:b2:b9:61:6e:8e:88:3b:7f:
         c7:f0:cc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:39:44 2025 by rpki-client