Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/d0fd6487-29e2-3994-932b-a653c88c8dab.roa
File:                     d0fd6487-29e2-3994-932b-a653c88c8dab.roa (raw, json)
Hash identifier:          uKGDCK1Ai4FKz1USPtmno71wn61fXjAQOv8hrZUBZtA=
Subject key identifier:   7C:35:49:1E:AA:56:1F:45:FC:EB:81:31:A7:90:1E:F0:77:14:FD:63
Certificate issuer:       /CN=c2b3ef98-2711-4f31-8824-1bf41e5c5c17
Certificate serial:       010D0C9F43285841BFD6DF4F12B91521ACE6EA40
Authority key identifier: 0F:16:CB:94:5C:C3:DB:6C:BD:60:65:B5:5D:E7:2F:ED:2D:A0:97:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/d0fd6487-29e2-3994-932b-a653c88c8dab.roa
Signing time:             Mon 01 May 2023 18:14:44 +0000
ROA not before:           Mon 01 May 2023 18:14:44 +0000
ROA not after:            Fri 01 Aug 2025 04:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:54::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:bf:d6:df:4f:12:b9:15:21:ac:e6:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b3ef98-2711-4f31-8824-1bf41e5c5c17
        Validity
            Not Before: May  1 18:14:44 2023 GMT
            Not After : Aug  1 04:00:00 2025 GMT
        Subject: CN=dd471c5f-c30e-4ff4-8d64-0b141686f2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:11:00:17:04:e7:7a:f7:8b:5e:cb:93:93:7b:
                    f0:0c:0f:b6:72:6b:b6:5f:a3:28:88:ca:28:87:9d:
                    ef:25:ef:7f:4d:ee:8b:62:ed:21:c3:3f:e9:0d:fb:
                    d4:70:f2:47:1d:e4:1d:37:14:f5:bd:44:7c:ad:e1:
                    4c:de:76:32:de:f5:08:12:f9:da:d9:bf:f7:9d:e7:
                    c0:e8:7a:c2:1d:2c:a0:ec:4c:da:b9:fa:a5:cc:18:
                    3d:5e:c7:6b:15:c6:d9:d8:10:f9:c4:cd:26:a4:47:
                    b5:70:95:db:46:25:06:57:e7:a2:45:67:69:c9:75:
                    62:08:ea:1e:f0:fa:13:cf:4b:f5:d7:f9:87:1b:44:
                    16:19:b8:27:62:a2:c7:13:6f:98:16:49:80:69:89:
                    75:b6:4a:55:df:96:fd:bc:84:6b:0b:75:db:e6:08:
                    a9:59:e7:5f:93:49:c7:de:c6:23:dd:92:af:86:ca:
                    8e:44:2c:d9:45:77:b2:2f:54:a0:6d:8c:bb:15:81:
                    0b:15:6e:09:06:c4:39:c8:6c:ca:c5:d0:6c:71:97:
                    af:27:e3:26:81:cb:fd:a1:9f:53:1a:76:a9:bb:b5:
                    f1:f1:dc:22:df:e4:8c:89:c9:ce:2d:7f:96:1f:41:
                    8d:cb:1c:bd:7a:43:b2:ea:5e:7b:90:c0:04:3c:a4:
                    f4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:35:49:1E:AA:56:1F:45:FC:EB:81:31:A7:90:1E:F0:77:14:FD:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/d0fd6487-29e2-3994-932b-a653c88c8dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.crl

            X509v3 Authority Key Identifier:
                keyid:0F:16:CB:94:5C:C3:DB:6C:BD:60:65:B5:5D:E7:2F:ED:2D:A0:97:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:54::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:9a:45:13:50:4c:70:8a:a0:53:7e:5c:75:46:37:c1:3d:fb:
         a9:48:2b:56:84:5b:03:25:41:c2:9f:58:78:0d:1d:3b:17:e1:
         8b:b0:b8:f7:32:3b:83:9e:f9:f5:bb:46:ff:42:49:87:60:93:
         fa:ac:93:8d:98:b3:30:2f:ed:d2:46:56:be:cc:cb:a9:19:b0:
         0f:6b:63:67:41:e3:a9:46:5b:af:e6:47:43:62:d8:00:e2:32:
         af:9f:d7:c9:4f:1a:f6:a0:3e:4f:8c:e2:95:e0:d8:6e:8f:da:
         12:e4:77:82:92:65:47:75:6f:ea:c9:57:46:b8:44:94:a7:c6:
         da:39:41:4a:98:12:0c:51:77:43:a1:1b:2c:14:01:7c:19:9c:
         4d:d2:3a:79:fc:53:48:16:8d:7b:16:7f:93:8b:3e:0e:fa:3b:
         30:8c:0c:b2:df:7b:81:b9:cf:45:04:91:3c:62:34:9d:94:ae:
         de:44:ea:80:43:88:aa:88:cf:6e:76:0a:e6:98:4b:6e:50:9c:
         5f:37:dd:d2:cd:51:d6:5c:ef:c1:f8:04:61:be:8b:69:55:f7:
         8b:0f:20:d2:1b:70:71:b6:0e:23:64:64:32:0a:1e:2b:76:df:
         f0:d1:0e:c8:68:57:1a:1b:92:08:c7:22:94:fa:bd:68:0e:f2:
         8d:f5:40:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:41 2024 by rpki-client on console-ams.rpki-client.org