Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/2add4ef4-f884-3221-a442-c89372ccceca.roa
File:                     2add4ef4-f884-3221-a442-c89372ccceca.roa (raw, json)
Hash identifier:          rMj7xzAm7zCpnC0wsXBYFpRMSeDSVaQJvcvF13CXTnA=
Subject key identifier:   34:A0:79:7A:BD:49:65:7B:58:91:38:22:53:6F:FE:FA:97:86:5D:10
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F43285849568EB343278B6F9733604530
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/2add4ef4-f884-3221-a442-c89372ccceca.roa
Signing time:             Fri 28 Mar 2025 13:00:51 +0000
ROA not before:           Fri 28 Mar 2025 13:00:51 +0000
ROA not after:            Thu 26 Jun 2025 13:00:51 +0000
asID:                     27385
IP address blocks:        2602:fdaa:c1::/48 maxlen: 48
                          2602:fdaa:c2::/48 maxlen: 48
                          2602:fdaa:c5::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:56:8e:b3:43:27:8b:6f:97:33:60:45:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Mar 28 13:00:51 2025 GMT
            Not After : Jun 26 13:00:51 2025 GMT
        Subject: CN=285803a2-8110-402d-ac6b-b3b887949681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:02:42:6e:cd:73:5d:91:1c:b2:2d:79:12:2a:
                    ba:0f:9e:83:0c:68:5f:a9:36:b9:56:ab:2b:d4:ab:
                    d0:c0:a8:00:c7:47:fb:69:61:83:68:3c:45:38:a2:
                    00:c5:42:55:fe:ec:60:bc:a9:85:6a:89:4d:2d:37:
                    51:1b:8b:32:54:ba:cf:e0:99:ce:8f:fc:18:24:1e:
                    cc:a5:5a:74:41:98:bc:ed:85:35:bc:d0:3b:9d:dc:
                    f0:16:92:a8:65:07:6e:3e:ac:9c:7c:a6:fa:c1:a3:
                    4c:36:8d:3d:f7:3f:88:a2:19:82:44:81:17:d0:bf:
                    d4:a7:1a:b5:2f:bf:d2:73:25:8a:3f:09:22:ad:c5:
                    94:7a:1a:07:ec:4b:ae:b2:8f:69:ba:27:9f:a1:d2:
                    45:0f:63:08:95:44:14:56:71:a4:86:47:64:e0:15:
                    06:6b:0f:7f:62:59:b2:53:d6:4a:7e:52:a8:77:88:
                    81:88:04:b6:0e:c2:cc:e1:4e:0c:ea:ca:70:57:1e:
                    9c:05:43:8f:cc:5c:9b:46:82:50:4e:51:c9:18:1d:
                    63:b5:68:6c:7f:55:45:8f:4a:b9:3d:0e:99:47:17:
                    a6:ca:da:d9:56:3a:6b:88:54:ed:67:2b:9a:d9:25:
                    6e:54:8d:ec:9d:4b:c2:9b:38:5c:ab:fc:ca:85:c9:
                    da:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A0:79:7A:BD:49:65:7B:58:91:38:22:53:6F:FE:FA:97:86:5D:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/2add4ef4-f884-3221-a442-c89372ccceca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:c1::-2602:fdaa:c2:ffff:ffff:ffff:ffff:ffff
                  2602:fdaa:c5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ec:2f:cd:1a:11:ea:02:51:38:f4:27:b0:c0:49:4a:28:38:
         d1:31:66:7e:0c:f7:35:be:8a:8b:9e:33:48:c2:0c:19:08:89:
         bd:0a:e4:01:ea:9b:93:91:37:6b:78:de:80:b3:f4:dc:9e:61:
         f6:ea:91:04:fa:47:8d:a4:3f:0d:e5:88:6e:da:a9:db:60:13:
         67:8e:00:be:33:56:74:56:df:e1:1e:a8:ca:24:18:be:15:32:
         fd:63:07:04:8d:64:98:32:6b:8c:b9:13:b2:9b:60:b0:1e:9e:
         3c:41:e7:60:d3:9d:30:22:e0:35:f2:44:44:1f:0e:0a:b1:0a:
         ec:a1:bf:d2:6b:6c:e0:e4:07:42:e3:8a:a2:72:59:0b:85:34:
         15:c0:fd:23:e9:df:ad:fc:1a:ba:ac:cb:41:25:62:da:9a:d2:
         de:7e:93:38:9f:86:8f:c5:9c:bb:fa:38:83:60:1b:fd:71:0b:
         08:e1:4e:70:e0:93:02:8d:5b:e1:5f:36:5d:63:2b:4e:f0:fd:
         b3:74:97:93:90:a4:f4:5b:3f:4d:83:8e:09:7f:e5:bc:a3:fe:
         25:9f:77:fd:08:a5:0e:07:06:93:67:48:02:54:e0:0c:2a:ef:
         0f:bd:0d:af:d9:f0:73:9d:a5:ad:ad:43:92:33:63:70:91:b0:
         67:27:e8:a5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:36:10 2025 by rpki-client