Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/bb2b2dbb-5dd8-3459-9740-927ca0ad07e9.roa
File:                     bb2b2dbb-5dd8-3459-9740-927ca0ad07e9.roa (raw, json)
Hash identifier:          VNbNzF38ZGYrhw9REX/W3ongxnIzV77s24J+yvjKT/E=
Subject key identifier:   64:19:B9:23:E1:B7:BD:E2:E0:D8:31:C6:FB:E1:2F:2D:2C:1E:4A:2F
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F432858491941755B3DB6874B32E5A5C0
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/bb2b2dbb-5dd8-3459-9740-927ca0ad07e9.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     64201
IP address blocks:        2607:6003:2301::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:75:5b:3d:b6:87:4b:32:e5:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=027584a1-eff2-411f-ad75-1f3f7ba841dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:22:ff:03:be:6f:d7:b8:2d:7a:36:8e:f3:a3:
                    76:cc:47:e0:13:90:ed:70:04:b4:84:af:a3:73:17:
                    48:dd:6e:2a:9c:54:b1:cd:eb:ef:05:92:6b:f1:7e:
                    74:af:a2:d8:b0:24:94:c1:2a:e2:ff:2d:79:dd:13:
                    87:38:0a:1d:e0:a9:b2:4c:1e:20:cd:4e:20:5b:62:
                    27:2f:54:be:40:81:86:af:16:61:d8:83:78:bf:dc:
                    01:bf:70:f1:87:ab:28:28:1d:50:11:6a:c4:c5:5e:
                    01:fd:6b:1a:8e:5a:2e:72:14:f3:1f:e8:aa:8e:e3:
                    3b:9d:ec:07:c5:f3:14:f5:f1:95:89:e4:7f:fa:37:
                    e5:51:41:14:f5:d0:7e:dd:88:6d:ef:a7:d7:48:77:
                    55:5e:05:00:15:fb:80:76:d8:c1:0d:c7:25:72:76:
                    db:3e:18:e1:68:72:f5:05:7c:93:34:b5:19:dc:73:
                    48:5d:c4:42:56:0c:7c:1e:34:09:4a:97:7b:4d:f8:
                    5a:9f:9d:3e:95:13:fe:48:55:3c:6c:ec:00:bd:aa:
                    f1:a2:13:0a:26:68:97:53:12:2a:eb:65:17:12:af:
                    01:8c:1f:ed:2d:51:87:7c:cb:c6:ab:d0:c4:dd:be:
                    9b:a3:31:e5:ce:78:0d:0a:ff:72:2a:6e:fd:d1:ba:
                    41:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:19:B9:23:E1:B7:BD:E2:E0:D8:31:C6:FB:E1:2F:2D:2C:1E:4A:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/bb2b2dbb-5dd8-3459-9740-927ca0ad07e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6003:2301::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:1c:10:54:79:25:4b:2b:10:43:ee:d1:74:d7:a6:e4:c2:82:
         2b:7e:77:9e:6e:22:83:cc:46:cf:06:c8:fa:c1:aa:cf:ee:10:
         79:94:c5:bc:8d:a9:29:b6:0d:33:f1:9e:c3:51:27:cd:79:04:
         de:3e:bf:30:0d:62:ba:6f:67:db:81:94:b1:9c:1d:5b:68:a9:
         f7:65:b8:a9:c9:c7:e5:29:dc:b8:ab:8b:8e:eb:37:f0:09:6e:
         38:bc:c6:71:ec:70:60:0e:61:2a:55:3a:ff:ab:a2:10:0e:46:
         41:3c:ac:74:86:ba:67:50:4c:67:74:75:3b:94:a1:1a:14:62:
         9b:cb:31:4a:fb:33:3f:51:89:a3:37:22:b8:91:e0:47:bb:6d:
         af:87:9b:08:7f:f9:65:84:53:8a:b5:08:6b:f9:4b:60:98:79:
         3b:5a:34:0f:e7:cf:6c:8e:14:d3:b7:46:aa:dd:c1:af:54:f7:
         df:e8:f6:00:84:87:44:08:d9:1b:7b:c4:17:63:a6:4a:ee:62:
         f1:0c:ed:17:ef:52:15:a1:29:d5:91:82:5d:9a:d7:0a:37:6e:
         d7:d4:44:93:a6:c7:a5:43:0f:67:68:60:89:96:be:76:59:61:
         9f:39:0f:68:ee:92:ab:59:88:94:16:d3:e7:85:0d:ad:1d:30:
         3a:93:ac:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:40:51 2025 by rpki-client