Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/a22aeb02-0963-3e93-a748-ce4988390984.roa
File:                     a22aeb02-0963-3e93-a748-ce4988390984.roa (raw, json)
Hash identifier:          EtRdMjXBeRQ/2ZPDDvRc13ySGlwylKm2fXfC15j0+U8=
Subject key identifier:   52:17:18:EB:ED:48:B0:BF:E9:C9:20:77:A8:AC:83:92:FF:0B:C8:2C
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584886B07A8F9F8AE932DCA9D500
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/a22aeb02-0963-3e93-a748-ce4988390984.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     198949
IP address blocks:        2607:cc80:7000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:7a:8f:9f:8a:e9:32:dc:a9:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=2a4e4f21-dcee-47d3-910d-90e3ba3a0457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:39:3c:5e:a7:8c:5b:63:88:77:e6:d5:b3:96:
                    ef:49:19:79:bb:c1:4d:c2:d7:64:15:76:ea:87:f8:
                    ce:67:21:4f:8f:99:81:5a:ba:29:8a:b0:37:e6:93:
                    67:ba:44:d1:a6:97:76:97:09:30:18:6b:1f:21:ad:
                    0d:a7:82:fb:60:c5:75:96:b9:23:2b:98:ba:8d:3c:
                    6c:29:1c:b2:dc:b4:a6:5a:62:7b:9d:e1:a1:9c:5f:
                    a3:b5:da:73:84:1c:ea:c7:3b:7d:fe:60:04:a4:9d:
                    f5:b2:af:d1:ac:bd:e0:91:81:42:54:41:c1:0d:d6:
                    32:2a:34:cc:2e:e3:18:02:40:56:32:85:81:86:8c:
                    54:7a:1e:fc:7e:b8:1d:15:e1:fe:6a:3c:67:05:7f:
                    1b:3b:f3:aa:97:ce:bf:c4:d6:e4:98:9a:cb:7f:1a:
                    f1:f1:0a:f9:2d:9b:6c:8e:cc:55:e9:dd:3c:49:ac:
                    31:22:48:05:b5:82:45:c1:a3:3b:b2:6a:7a:d6:29:
                    47:25:f2:80:fa:9b:57:65:76:fd:02:a4:24:77:63:
                    08:54:1a:32:a8:14:71:03:91:42:dc:e5:5e:40:c8:
                    14:13:92:b9:51:66:cc:00:22:9b:d4:68:b8:9c:ce:
                    73:75:77:a6:4a:06:1c:f4:ed:29:43:e0:85:5e:c1:
                    61:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:17:18:EB:ED:48:B0:BF:E9:C9:20:77:A8:AC:83:92:FF:0B:C8:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/a22aeb02-0963-3e93-a748-ce4988390984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:7000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:af:dc:53:4c:97:80:69:30:f0:c0:dc:81:9a:80:77:a2:ae:
         74:a1:3e:79:b8:b4:78:f8:07:80:3b:d2:5e:e2:5a:c4:7b:4b:
         b8:be:db:0d:79:42:a0:31:38:b3:0b:4a:cb:27:77:4e:c0:ba:
         89:7e:64:f3:eb:ac:cf:f1:2f:9d:68:44:d3:bb:70:8b:3f:1f:
         15:bf:b7:aa:7e:e8:42:83:4a:40:25:21:d4:04:8f:b0:20:9e:
         c0:da:02:3f:4d:21:1c:6b:bb:85:db:fa:f6:e4:80:12:d2:1a:
         c1:81:6d:e8:bc:8c:d2:f8:cb:d9:3a:c3:80:d5:13:93:17:2e:
         c9:c9:35:5c:64:47:79:c3:9c:c2:56:27:cc:64:93:66:22:64:
         28:a0:75:03:d9:2f:a4:44:05:f4:5e:7e:84:d9:12:a2:2c:d6:
         41:fa:25:36:ad:0d:28:5b:9f:a8:2e:1f:1f:f4:eb:40:39:72:
         9f:eb:c3:0f:ec:4b:c3:60:97:50:3c:94:a3:99:ab:5c:97:10:
         ed:7e:51:99:67:22:37:3a:be:4e:b0:dc:c0:1e:84:40:1f:42:
         de:27:15:ad:18:e6:b1:34:13:f5:39:dd:a6:98:a1:78:1a:bc:
         6c:de:e5:4e:8b:4d:aa:66:0c:8b:79:97:61:62:1f:7f:4b:26:
         8f:94:43:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:35:31 2025 by rpki-client