Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/a9ccb72e-2783-3fd9-8638-95d8d918072b.roa
File:                     a9ccb72e-2783-3fd9-8638-95d8d918072b.roa (raw, json)
Hash identifier:          lC7w6mJ0wTeh75El4CGYpG+McMASTvQ5b1Bng8WN6x0=
Subject key identifier:   A0:4C:FD:18:77:AD:A2:83:CB:78:97:FD:74:E0:CD:8F:D8:BF:DB:AF
Certificate issuer:       /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial:       010D0C9F4328584919418461FB498A4A87452180
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/a9ccb72e-2783-3fd9-8638-95d8d918072b.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     400544
IP address blocks:        2607:76c0:30::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:84:61:fb:49:8a:4a:87:45:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=38146521-e24d-498f-9a8d-a6278cd07460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:e6:14:b9:4c:06:43:ca:ae:2e:67:33:ba:
                    8b:2f:0a:db:75:86:40:54:d2:7b:e8:f7:73:93:81:
                    ba:d2:1a:68:22:53:e2:f3:9e:a0:3d:f5:1b:5b:83:
                    0b:28:51:73:d3:2f:93:07:b1:93:d5:70:f8:2c:66:
                    04:42:c9:4a:6e:ab:3d:f9:ed:9f:6c:e7:94:11:46:
                    34:ad:19:07:10:1c:61:52:54:58:c6:df:62:f5:38:
                    4b:f8:f4:00:ff:a8:30:b5:17:68:07:d4:83:5e:a1:
                    e4:12:03:07:37:1c:a9:34:a3:99:55:60:bf:ce:11:
                    61:49:0d:49:80:85:47:b5:5a:7d:e4:a7:be:c8:27:
                    c5:12:54:a6:37:d1:93:3e:22:c6:a2:4e:74:fc:bd:
                    67:80:70:61:67:35:dc:a4:ca:15:cb:7e:8c:61:85:
                    13:0c:b7:42:5b:1e:27:27:3c:46:61:e3:63:13:59:
                    cc:cf:00:8a:98:84:2d:91:c6:ee:ab:fe:38:58:27:
                    93:af:80:c9:4e:0b:fe:f8:18:d6:72:20:52:2e:5a:
                    c2:8d:95:89:e8:9d:0d:6a:aa:92:22:f6:7c:ea:32:
                    b3:21:99:70:5e:4a:dd:42:45:ad:7c:f2:ff:13:8d:
                    a2:c9:07:11:a4:26:6d:ee:a2:c8:45:13:c6:83:b8:
                    e1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4C:FD:18:77:AD:A2:83:CB:78:97:FD:74:E0:CD:8F:D8:BF:DB:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/a9ccb72e-2783-3fd9-8638-95d8d918072b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:76c0:30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:ff:20:16:6a:ae:9c:d3:2c:b7:a6:4e:60:a5:2e:d2:d7:81:
         9c:be:58:7f:92:0d:08:67:4d:26:95:b9:c8:30:76:e6:f3:b4:
         51:90:21:98:ee:fb:c9:3f:b4:c5:de:53:15:08:da:a2:be:8e:
         60:f2:de:b5:0f:19:9d:fc:39:d0:99:45:39:fb:9e:19:b8:56:
         62:06:f7:37:31:5e:03:1a:94:80:74:2d:11:a3:78:92:d9:4a:
         de:1d:02:1b:17:1e:81:14:33:6a:60:5f:86:d4:ed:b3:23:8e:
         42:79:b7:10:41:39:af:dc:16:79:ac:1c:8e:4b:bf:08:dd:e6:
         e8:21:b4:b9:bf:10:47:62:b4:c8:b3:d1:48:da:cf:2d:26:74:
         55:a8:ee:a6:1b:8e:fc:1a:91:a1:be:f5:02:94:8f:38:d3:d0:
         de:4e:05:0d:0d:fb:b1:e6:c2:df:84:44:28:86:6b:9c:78:63:
         ec:20:7d:80:de:15:43:26:78:7a:0a:73:3b:b3:20:b4:cd:54:
         5e:eb:60:80:cd:be:e6:12:42:72:b6:dd:88:08:10:b6:53:e2:
         c9:d9:64:59:bc:76:b0:b5:a5:35:74:be:26:a5:f2:0b:e0:ba:
         c2:d0:d7:2e:f0:e0:19:80:7a:21:bf:a7:dc:18:7b:c7:61:78:
         fe:2a:aa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:58:22 2025 by rpki-client