Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1321cb6d-49a7-3957-bffa-6bef0799ccbd.roa
File:                     1321cb6d-49a7-3957-bffa-6bef0799ccbd.roa (raw, json)
Hash identifier:          bk3Ehy8U8M79Kql13S9uU8i5I3rKyZcg0ZUGHfc0Tdw=
Subject key identifier:   3F:3F:BB:4F:62:78:BB:B2:66:42:57:93:A1:69:AC:77:69:08:5D:54
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584913AC2F8B0944311D9B189620
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1321cb6d-49a7-3957-bffa-6bef0799ccbd.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     3356
IP address blocks:        2607:f028:72::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:2f:8b:09:44:31:1d:9b:18:96:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=26d7eb52-b899-419f-bf92-41b9c5136a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4e:b0:9f:37:24:77:cd:82:66:f0:f5:47:de:
                    e4:20:7f:2e:09:ca:12:96:c6:e3:6f:6f:e4:12:2a:
                    cb:3b:dc:89:71:78:5b:00:70:c4:9f:84:54:90:00:
                    61:00:da:46:c4:b4:9d:d3:06:a9:1d:04:ba:c7:c8:
                    92:7c:c5:44:b1:b2:ef:9e:2b:84:14:7b:48:ff:25:
                    85:3e:10:fd:03:5b:8d:13:0a:61:4b:89:44:16:5f:
                    ad:3a:5a:54:fa:4f:f5:39:94:0e:fc:dc:17:d0:74:
                    3f:52:bb:47:7b:95:52:4c:f3:09:cc:86:9a:ba:b0:
                    29:a1:ec:76:15:8c:cf:08:d9:4a:f9:b7:b2:f8:bb:
                    10:af:3c:43:89:b8:66:cd:61:bc:1d:3d:c5:b5:97:
                    d2:b0:59:93:15:fc:b2:cb:1b:56:c3:41:ff:28:54:
                    1d:13:05:63:31:29:94:64:fd:9a:b1:42:71:d5:f3:
                    ac:7a:68:43:d7:3e:72:86:2e:91:bb:af:07:9e:e7:
                    b2:c6:f9:9e:f4:ec:d2:d2:56:e0:c2:91:36:a8:57:
                    01:bd:1b:b6:b8:d7:16:4a:bf:0b:57:c0:a3:3b:cc:
                    9b:3e:0a:61:d7:89:77:31:ec:fe:91:15:ec:b6:39:
                    fb:1b:a7:f2:0f:71:a0:05:bb:64:a1:7e:b1:3e:90:
                    c0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3F:BB:4F:62:78:BB:B2:66:42:57:93:A1:69:AC:77:69:08:5D:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1321cb6d-49a7-3957-bffa-6bef0799ccbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:72::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ee:ac:f7:73:99:19:13:9a:b2:c3:5e:43:63:8a:73:cb:65:
         a9:fa:f5:a8:7f:8f:4a:42:03:ff:5e:22:b9:90:a1:43:d6:96:
         41:a2:39:17:a9:18:a1:83:04:4a:7f:8d:53:44:37:50:90:9f:
         f0:9b:4b:ce:13:7e:f9:c7:95:e7:4c:dd:60:69:4c:10:06:5c:
         8d:9e:8d:55:b6:ed:e8:bc:9f:df:0f:1e:c2:d4:d2:0b:79:a6:
         c5:54:f9:bd:9c:25:73:4a:37:8b:cd:01:1f:0d:1f:41:e1:8c:
         4a:e9:4b:82:f7:93:b1:90:47:96:8b:3d:6c:5f:d3:1a:30:cb:
         7c:61:ee:95:75:4c:2b:e8:2d:e4:8a:b5:ab:36:23:76:db:f7:
         ad:84:e7:f8:9e:01:50:f6:e8:65:ab:13:66:30:f9:e0:35:a2:
         b1:07:6e:3f:2c:1e:95:c4:ef:b0:f2:bd:be:3e:77:34:7c:cd:
         f7:78:07:cd:be:65:e2:7b:83:97:8e:d0:4e:07:9f:04:0a:6f:
         93:e9:7a:45:14:0d:53:58:09:14:80:92:4b:81:fd:d9:41:59:
         c2:a3:54:f6:a3:2a:1d:06:b7:50:db:36:1c:8c:cc:7c:b6:40:
         32:97:5a:bd:41:0b:eb:21:67:4b:eb:82:bc:9e:8d:20:77:6f:
         f8:c4:16:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:24:48 2025 by rpki-client