Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/6ebfdc7d-9574-380e-8a9e-985f313fa2fb.roa
File:                     6ebfdc7d-9574-380e-8a9e-985f313fa2fb.roa (raw, json)
Hash identifier:          8Mk20C1n07RP73o9SYTuv4OkPpK+V5eOK8Y09ScaN0A=
Subject key identifier:   38:C4:32:BD:AC:BC:FE:1E:08:29:F7:88:3F:DD:5C:E0:33:2E:01:C6
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F432858491D7118110A0379515033E9E0
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/6ebfdc7d-9574-380e-8a9e-985f313fa2fb.roa
Signing time:             Sat 08 Mar 2025 02:00:08 +0000
ROA not before:           Sat 08 Mar 2025 02:00:08 +0000
ROA not after:            Fri 06 Jun 2025 01:00:08 +0000
asID:                     62787
IP address blocks:        2602:f6d0:ee::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:18:11:0a:03:79:51:50:33:e9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Mar  8 02:00:08 2025 GMT
            Not After : Jun  6 01:00:08 2025 GMT
        Subject: CN=3c51942b-c066-4dac-9ef1-746c1b50083a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:42:69:8d:2a:fb:68:df:6d:f9:11:83:c8:2a:
                    76:5c:19:fb:6f:be:1a:8e:7f:5f:9e:bf:4c:95:18:
                    c6:b5:19:9c:89:20:ee:f9:8d:51:44:b7:d1:44:12:
                    51:ad:9c:d8:b0:07:a7:40:34:13:ab:b5:fc:d3:29:
                    ff:44:68:f2:36:e3:dd:d0:94:7d:84:4b:3f:01:b4:
                    b7:9d:1e:84:2d:c9:07:3e:73:d2:86:52:b8:bc:20:
                    0e:91:d9:bb:7a:0a:7c:7c:18:29:d4:6d:88:15:d5:
                    02:af:f3:26:11:02:73:be:b9:b6:3f:94:ef:5d:36:
                    3f:14:39:fe:26:cf:a8:2f:ee:8f:a1:54:8f:0c:46:
                    23:79:84:4b:38:85:0d:e3:81:f1:b5:67:31:6d:8e:
                    ed:4c:5f:b4:f5:f7:23:a6:a8:46:ee:57:0d:bd:e8:
                    97:18:f7:c9:0d:1b:43:83:29:45:4f:ee:c0:f7:66:
                    1d:38:02:87:86:5b:cf:f2:64:1a:50:b4:f0:23:ef:
                    69:8e:6b:33:bd:a4:1c:f6:08:1e:71:ce:99:80:1d:
                    ff:a7:10:ec:6c:fc:22:2f:70:f4:19:ee:42:93:05:
                    d9:e2:40:7d:15:f6:b2:61:64:6a:1d:26:e2:3c:6e:
                    f8:12:dc:c5:bf:61:d0:3c:a6:ff:9d:f5:dd:07:b7:
                    a2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C4:32:BD:AC:BC:FE:1E:08:29:F7:88:3F:DD:5C:E0:33:2E:01:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/6ebfdc7d-9574-380e-8a9e-985f313fa2fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:5b:e3:7e:cc:14:3b:d5:b5:b4:59:a1:e1:e4:65:33:92:92:
         2f:15:e8:45:56:81:eb:47:28:4f:26:48:20:55:1f:d6:6a:a7:
         9a:09:63:4c:bb:2c:1d:35:02:34:32:6b:e5:3a:33:96:2f:37:
         03:1c:bc:e2:2b:26:ae:b7:86:b3:ab:f0:23:5b:f4:d0:67:3e:
         a4:9e:53:e9:70:4d:7a:a4:93:37:19:5a:58:52:55:74:f1:be:
         0d:af:f2:0c:ef:d2:a0:3f:02:b7:6e:60:23:4e:08:54:3a:4f:
         3c:a1:59:30:8d:6d:92:aa:ef:53:75:24:fb:90:11:81:68:f2:
         62:c9:48:f3:34:ff:53:66:03:6d:c4:42:35:b9:4b:2d:8a:10:
         f9:5d:7d:76:99:1f:d8:fe:37:91:6b:ce:3b:4e:2c:a4:d9:ec:
         e1:d1:74:b0:37:70:ca:f4:11:0c:9b:a2:94:d8:f8:ac:8a:0f:
         a0:9c:11:9a:9b:3b:e4:72:ff:b1:8a:9b:b1:51:7e:ac:be:31:
         83:04:a2:43:a0:ac:4e:fd:d3:5e:16:b2:5f:77:ee:bf:6c:e8:
         f1:5d:0a:5b:e7:4a:c2:36:db:98:9b:17:f2:57:84:46:d2:fc:
         85:4f:38:2b:88:2b:16:f2:9d:6d:ae:e8:7a:7c:67:95:4c:1e:
         68:46:9a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:37:42 2025 by rpki-client