Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3/46ecfb72-bc2d-3ce7-8450-3c91ef1b6841.roa
File:                     46ecfb72-bc2d-3ce7-8450-3c91ef1b6841.roa (raw, json)
Hash identifier:          Kq5/ujzEULmO1AIv6Gfb3uHh+aNO+1+HP5VwVJruhQw=
Subject key identifier:   44:71:D7:9E:3F:AF:B9:20:76:85:80:D4:B5:1B:FD:DF:0C:45:91:5B
Certificate issuer:       /CN=1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3
Certificate serial:       010D0C9F43285848BBBB816772AF3709A30A7800
Authority key identifier: F6:6D:E5:BA:E9:79:27:A3:36:56:95:B1:80:7B:AA:91:04:C3:FA:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3/46ecfb72-bc2d-3ce7-8450-3c91ef1b6841.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     15199
IP address blocks:        2620:b8:8000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:81:67:72:af:37:09:a3:0a:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=d333699f-b1d8-4ddc-9eb0-256a8c2ccac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:59:4f:81:ee:c1:64:7e:17:ce:5c:bd:be:
                    ea:4f:e5:21:df:29:81:c0:48:4a:90:e8:60:b2:87:
                    a3:37:9e:cd:cb:50:40:65:c1:ba:99:24:bd:d7:b8:
                    ba:15:46:f0:77:48:a0:91:7f:46:5e:67:70:89:ae:
                    2b:31:6f:9f:bb:c7:d4:6c:67:a4:cf:08:56:91:84:
                    4f:7f:1f:f7:be:ad:85:a3:3e:e6:ff:7d:47:4a:dd:
                    92:b3:ed:04:64:fa:66:14:ca:45:fa:64:f0:70:85:
                    49:4e:e3:14:7b:0f:c9:fe:cd:6f:59:b4:7d:88:8c:
                    1a:64:5e:63:76:98:02:e1:04:dc:da:e8:b4:31:c7:
                    7f:0d:5a:2a:34:ae:32:1b:b7:8d:c8:5f:97:63:f3:
                    58:4d:b6:dc:e4:99:b6:07:ab:b9:b8:3d:47:02:5b:
                    ed:6f:ed:bd:70:a2:04:bf:a7:76:63:c6:50:a4:d0:
                    19:2d:33:55:83:36:c8:ec:85:8a:3c:6f:5a:97:1c:
                    b9:e2:35:de:54:a3:7c:c2:90:c6:1a:31:76:8b:a9:
                    b9:a5:c5:86:f6:b5:a6:bf:62:83:fd:cf:8e:3a:d3:
                    36:d9:ff:01:98:1f:9a:64:02:74:60:56:18:fa:57:
                    ba:df:0b:8c:13:39:e2:b9:ed:5e:af:23:14:f0:88:
                    0b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:71:D7:9E:3F:AF:B9:20:76:85:80:D4:B5:1B:FD:DF:0C:45:91:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3/46ecfb72-bc2d-3ce7-8450-3c91ef1b6841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6D:E5:BA:E9:79:27:A3:36:56:95:B1:80:7B:AA:91:04:C3:FA:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c7c9af6-a7ab-4eaa-b2fc-1a51478059f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b8:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:54:8f:13:92:91:ca:39:d6:55:10:be:59:44:c7:6a:39:ac:
         1d:c7:bc:84:71:f6:5f:a3:e8:fe:fb:68:55:cf:0b:11:b2:8c:
         52:24:f1:ab:05:4c:47:ef:6f:4c:44:fa:12:8b:92:bb:a0:45:
         fd:a0:36:cb:9b:f4:3d:5b:44:db:5b:43:0b:2c:2b:9e:6d:31:
         a7:5e:86:92:01:4e:e9:3c:08:ca:b3:9d:95:f8:e2:f2:e0:ed:
         a6:84:1e:ae:70:9a:a3:33:98:bf:f5:fc:6c:03:9d:e1:e8:c2:
         1f:e4:81:fb:8a:59:73:d1:88:59:8a:64:30:69:da:93:07:f2:
         b5:19:12:71:47:b4:e3:d1:43:d7:a2:fb:7f:a1:b6:35:f3:c9:
         3d:32:73:10:e1:55:42:fa:bc:39:ff:f3:e8:8f:50:4a:8f:8f:
         9b:ba:43:11:21:5b:65:4d:7d:cb:7a:7d:b6:c7:4d:69:65:6c:
         c9:7f:b3:a5:d4:f0:eb:d6:91:d2:9b:bb:94:ba:9b:3e:a7:9b:
         bf:d6:89:2e:25:57:5b:47:8e:a5:71:fd:18:34:c5:b7:29:bb:
         a4:f4:9f:cd:5a:5c:c5:f1:ab:d2:09:70:76:9a:e4:67:c7:dc:
         21:d0:65:f9:80:1f:9f:92:f7:47:f7:16:22:ff:bc:a5:6b:c6:
         06:01:0f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:58:32 2025 by rpki-client