Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/048a3109-db11-313b-a682-3462d66d1f6a.roa
File:                     048a3109-db11-313b-a682-3462d66d1f6a.roa (raw, json)
Hash identifier:          Bqp4GLNz6IavInXXP4Vx9iWUQ2RwaMDiDHa3st5IWPI=
Subject key identifier:   95:7A:3F:6D:A2:B7:BE:5B:B7:A8:39:79:77:3A:00:A8:48:6D:B7:83
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584957F415E884BA58295DE98730
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/048a3109-db11-313b-a682-3462d66d1f6a.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     271
IP address blocks:        2607:f8f0:204::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:15:e8:84:ba:58:29:5d:e9:87:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=1db670b8-8ad3-4d43-97bb-24433667658c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:b9:4d:77:84:89:b6:ed:3b:f5:8f:28:a5:
                    1f:a1:8c:a7:53:73:fe:3d:d9:76:e6:3a:61:c1:4c:
                    b7:a1:a7:01:d8:4d:d4:af:e6:c2:25:dc:d7:59:0f:
                    d9:ae:38:b6:9b:35:18:2e:f8:5e:6a:0d:38:b5:77:
                    61:af:82:41:4b:68:e6:23:30:08:09:62:81:05:8b:
                    d6:07:30:ae:66:63:d8:67:fd:a4:44:e4:4d:07:fb:
                    3b:82:25:85:8c:c1:05:ce:3d:f8:11:fb:b2:02:e0:
                    f0:1f:e6:ab:f5:6b:3b:70:31:ec:93:d7:9f:77:a2:
                    6a:23:d2:16:bf:b6:05:b1:0a:e6:c6:c0:e0:d6:6a:
                    d5:2d:96:5f:5c:d4:70:c5:7d:2e:c0:60:23:74:e5:
                    24:d9:4d:b1:10:ab:61:82:7a:95:6e:c9:72:7c:9e:
                    62:64:87:1a:3f:08:c4:ac:80:f7:5a:9c:8c:64:59:
                    47:9d:04:b1:57:ce:78:f9:fa:3e:97:73:94:d2:13:
                    cd:c8:4c:4f:6f:e3:dc:5b:2b:de:43:7a:95:3a:cf:
                    fb:06:40:8a:55:8f:9e:8c:4d:36:7a:de:53:81:3d:
                    03:c5:3d:3f:ab:f3:81:3e:32:6f:dc:5f:0d:ef:d0:
                    c8:f0:5e:63:42:01:f2:f6:55:b3:6c:d4:4f:92:b0:
                    85:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7A:3F:6D:A2:B7:BE:5B:B7:A8:39:79:77:3A:00:A8:48:6D:B7:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/048a3109-db11-313b-a682-3462d66d1f6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:204::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b8:f2:f8:c7:d0:f0:cd:54:14:15:03:fb:d7:3b:60:28:49:
         60:7f:3a:a8:7d:36:ab:0e:cf:d2:f8:42:44:9a:72:df:c6:d7:
         fc:6d:9c:42:dd:de:08:3f:59:36:0d:53:dc:d0:89:a6:94:80:
         d1:77:a9:96:78:a4:72:5c:a0:da:68:b9:ad:f5:3a:98:fc:c3:
         a1:03:de:c0:30:df:5c:f0:04:26:7b:11:44:4b:9e:08:8b:a0:
         f9:29:8f:60:2a:8e:eb:48:0e:cf:48:cc:15:ef:b1:78:90:5f:
         c2:39:43:ec:c8:c6:90:d9:4e:7e:ca:f3:89:6d:55:47:05:6c:
         25:81:73:4f:0c:cc:01:b9:97:34:a5:14:65:be:94:06:47:d6:
         3e:89:bf:d8:24:21:4f:3a:53:5b:e5:9e:0b:d2:0d:0d:e4:09:
         2a:53:6c:5a:eb:e9:26:b2:23:63:8b:09:44:f5:3d:06:fa:82:
         91:af:f6:13:4c:ac:0e:ec:a1:77:5a:c3:98:2d:7a:8b:58:0a:
         ef:35:7e:d9:fd:b3:d9:1f:be:a9:20:de:8b:0f:82:86:58:da:
         6a:49:4d:13:a0:04:cd:e5:c7:47:e9:bf:7d:93:29:6d:b1:3e:
         be:07:c2:cb:22:d8:f5:30:73:f9:b2:f0:bf:7c:de:69:fa:0b:
         bf:63:d7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:50:47 2025 by rpki-client