Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/ff63752b-29e7-3fc0-b6b1-6ebef74cb0d1.roa
File:                     ff63752b-29e7-3fc0-b6b1-6ebef74cb0d1.roa (raw, json)
Hash identifier:          tY9w/pdEOKESA+pv4riFqRR6zZDoh3GZxaKXxCrwdmo=
Subject key identifier:   2F:52:96:8F:6A:0F:34:82:3E:54:FA:D8:4F:3A:A9:3E:76:5D:C9:8C
Certificate issuer:       /CN=c52f54e9-4dc6-4976-963e-f51088184223
Certificate serial:       010D0C9F43285849287E692BDA30CE64E0A46A20
Authority key identifier: 59:54:A7:EF:DA:24:0C:DB:76:A3:58:FA:9D:33:06:2D:0E:1A:7D:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/ff63752b-29e7-3fc0-b6b1-6ebef74cb0d1.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     33973
IP address blocks:        2602:815::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:69:2b:da:30:ce:64:e0:a4:6a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c52f54e9-4dc6-4976-963e-f51088184223
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=56d35978-c536-4f09-8ac2-2c481fbaed4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:70:fa:da:88:aa:a4:ff:aa:47:64:f0:2a:1a:
                    b7:43:84:d0:5d:87:51:5c:a9:37:56:48:93:b1:8a:
                    51:36:8f:99:11:a9:ec:68:10:8a:15:dd:55:40:cf:
                    22:6c:1c:48:e5:96:ed:e1:97:97:89:b4:9c:6e:44:
                    79:af:62:ae:e2:35:1e:53:ac:28:b2:f0:e7:af:f6:
                    52:05:f5:9a:09:15:36:2b:72:f2:ae:c0:3c:d0:7e:
                    a9:3d:15:a0:ea:fb:b7:85:1f:d6:b7:da:97:88:c4:
                    7b:df:b7:af:a4:bd:a7:23:3e:39:b6:24:e8:76:95:
                    3d:1f:cd:74:b3:40:d2:64:88:e5:58:c7:85:a3:15:
                    e7:a9:53:1b:7c:f9:3c:f5:ac:79:4c:c4:32:82:cb:
                    9d:30:2a:49:8b:34:5c:d4:8d:1e:38:70:3d:78:37:
                    cf:5f:55:bc:13:e0:18:92:08:62:fe:d7:cb:09:f1:
                    e3:31:40:44:09:38:6e:05:11:d7:c0:a5:68:4e:69:
                    6e:c7:2f:99:87:b9:57:be:34:a7:a4:63:91:6b:7d:
                    90:45:66:86:d9:3f:4f:25:c3:f4:85:51:1f:21:33:
                    03:a0:32:a5:5c:2f:96:69:9f:76:87:eb:a4:89:52:
                    22:4b:2d:eb:63:b5:60:f7:8b:dd:4b:ab:49:47:0c:
                    19:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:52:96:8F:6A:0F:34:82:3E:54:FA:D8:4F:3A:A9:3E:76:5D:C9:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/ff63752b-29e7-3fc0-b6b1-6ebef74cb0d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/c52f54e9-4dc6-4976-963e-f51088184223.crl

            X509v3 Authority Key Identifier:
                keyid:59:54:A7:EF:DA:24:0C:DB:76:A3:58:FA:9D:33:06:2D:0E:1A:7D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:fd:be:f8:ab:3b:df:e1:2e:ce:f6:bd:33:ae:74:9c:e7:92:
         16:46:46:e0:a5:ec:99:ee:cf:1a:3d:6a:8e:2f:6e:2a:63:cc:
         ad:af:0a:02:2f:c2:a6:68:45:01:08:f9:2c:ea:60:5b:09:05:
         c7:18:bd:8a:73:33:3d:a6:c4:a2:87:57:84:1f:61:27:d5:a7:
         b3:80:ea:0b:bc:92:2f:83:e1:76:ff:73:37:90:21:93:0d:f8:
         92:a9:dc:08:7c:09:f5:e7:c2:62:f8:68:87:2e:bd:08:de:5f:
         4b:3e:00:74:ec:51:8a:9b:51:4f:64:e5:95:6a:86:39:ab:6d:
         3c:0f:5e:7e:a7:6f:bb:10:28:ab:2f:dd:b4:92:49:67:2b:92:
         0a:29:08:17:ec:7d:de:e6:79:d2:07:be:fd:6f:8c:c4:9f:81:
         68:1c:bc:76:73:e1:6b:81:44:cd:31:00:f9:9b:cd:1f:30:60:
         d0:cc:16:4e:59:25:2b:dd:b0:1e:18:36:d9:60:b0:ad:fd:2b:
         bd:66:1b:ea:69:6e:87:9a:a9:8c:4d:3c:4e:e7:db:73:23:7b:
         7e:db:ab:bd:1f:d8:80:9a:39:2b:69:4b:f0:ac:f6:4a:a6:af:
         42:24:cf:f5:2d:b6:b3:0f:10:0b:f9:21:a3:30:73:7b:e4:50:
         10:ef:e3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:41 2025 by rpki-client