Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/03daf42c-4aab-3744-bbc7-04370b66cdf3.roa
File:                     03daf42c-4aab-3744-bbc7-04370b66cdf3.roa (raw, json)
Hash identifier:          3kEyu5oVr/hl3mfTHVHQF39agf28N87CpmNDFVyxgqM=
Subject key identifier:   A5:17:51:6B:6F:7A:E6:1A:78:A2:FE:03:07:E9:27:79:9E:45:2A:9C
Certificate issuer:       /CN=4272c123-bab5-43cb-a3b9-ac162a3b30af
Certificate serial:       010D0C9F43285848E9CBE211012A5FFEB951CD80
Authority key identifier: F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/03daf42c-4aab-3744-bbc7-04370b66cdf3.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     400013
IP address blocks:        2602:80c:1002::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:e2:11:01:2a:5f:fe:b9:51:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4272c123-bab5-43cb-a3b9-ac162a3b30af
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=8e20ea48-882b-4a74-81b1-ce28b34025ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c4:29:16:a9:80:a8:ca:31:4f:6b:14:4a:42:
                    b9:e0:e6:f9:ca:d7:da:aa:70:24:43:09:dc:9d:62:
                    99:f5:f1:09:d6:97:50:06:31:47:91:fd:b6:d9:2b:
                    1b:63:15:d4:12:db:01:e3:78:64:52:9e:c5:e6:8e:
                    59:01:1e:45:d6:2c:6a:0c:ee:de:f9:a1:3b:38:c8:
                    04:28:17:21:e1:ea:98:7f:04:d8:69:09:67:8f:80:
                    41:5e:50:03:b7:c2:7f:3d:cb:d9:c8:0c:76:61:96:
                    c4:08:4e:92:88:76:88:1e:72:61:21:dc:99:dd:87:
                    0c:26:24:91:7d:ca:12:f0:b4:95:48:2c:a7:76:18:
                    32:8e:0d:6d:15:c3:1d:11:67:35:e8:79:ff:30:e4:
                    f3:f0:d5:ab:b7:9f:50:72:45:7e:74:1b:a6:a5:bb:
                    75:57:37:f8:f8:2d:dc:7b:e5:04:68:0b:f1:ef:72:
                    b2:fd:d1:42:cb:64:46:02:f6:d3:2b:58:78:b9:c7:
                    89:d5:0c:d0:c1:82:71:88:06:07:20:ea:32:d3:e6:
                    62:41:96:b3:7f:d0:cf:a2:df:6e:2b:be:60:64:ca:
                    54:79:da:2f:c5:6d:9d:fd:43:8f:6c:19:b1:ee:cb:
                    86:12:54:04:35:4e:6c:bc:08:98:49:19:3b:61:d6:
                    e3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:17:51:6B:6F:7A:E6:1A:78:A2:FE:03:07:E9:27:79:9E:45:2A:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/03daf42c-4aab-3744-bbc7-04370b66cdf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl

            X509v3 Authority Key Identifier:
                keyid:F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:1002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:c9:c6:0e:51:63:64:ad:7c:b3:e3:0b:d9:44:e7:55:f3:e8:
         ea:26:72:cf:05:41:66:58:41:27:25:80:d1:08:9a:37:da:d3:
         58:92:e9:89:b6:dc:af:23:eb:7b:95:e6:f4:5b:a2:c4:03:e9:
         b9:39:67:e5:83:2b:82:ca:50:46:a4:1a:d3:6c:2d:b5:e9:8b:
         a7:aa:ac:fd:e7:66:9c:eb:68:02:56:46:5a:0a:04:86:fa:60:
         c3:dc:a7:fd:b5:b9:35:bc:20:9e:2d:35:5d:7d:68:7b:5d:60:
         5e:6c:92:13:4f:a0:a0:9b:dd:88:7d:52:d6:94:53:8b:7f:8f:
         9d:f0:a5:2c:cf:1a:64:23:51:bc:54:d8:25:c3:ad:d4:a9:32:
         b9:bb:c6:c6:5a:57:3f:6f:ce:27:8a:0b:57:7f:c7:a8:5f:e7:
         b6:d7:91:c6:8c:51:9e:09:ff:85:cd:2a:b4:94:8a:45:f6:79:
         10:24:c5:85:bc:54:76:da:c2:ec:d2:a5:80:dd:36:4e:0b:3d:
         a5:e8:04:da:e4:4b:3c:f4:87:43:39:8b:11:59:25:ef:e5:64:
         83:19:4f:58:20:4a:b2:7a:d7:71:e9:50:a6:d0:07:1a:aa:56:
         12:f3:11:22:61:9f:1b:87:03:71:e8:ca:1b:34:3b:5e:31:b9:
         6a:79:eb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:31:32 2025 by rpki-client