Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa
File:                     d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa (raw, json)
Hash identifier:          1p5rUzcBvgikB1NCrE+hv+lug3sIX1C7ufOPIaR6/sU=
Subject key identifier:   C5:C0:05:8A:F0:23:90:CF:70:5B:C5:9F:55:1A:EF:0D:95:17:45:CB
Certificate issuer:       /CN=8f46af7b-8a51-4d0c-82e1-bf0e75108610
Certificate serial:       010D0C9F43285848B5CC29B81D4F48509CBF7280
Authority key identifier: DE:D8:1F:3F:53:F4:CF:D5:7D:27:98:13:16:CF:00:F7:61:C9:61:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa
Signing time:             Wed 29 Jan 2025 22:59:34 +0000
ROA not before:           Wed 29 Jan 2025 22:59:34 +0000
ROA not after:            Tue 29 Apr 2025 21:59:34 +0000
asID:                     396982
IP address blocks:        2602:f708::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b5:cc:29:b8:1d:4f:48:50:9c:bf:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f46af7b-8a51-4d0c-82e1-bf0e75108610
        Validity
            Not Before: Jan 29 22:59:34 2025 GMT
            Not After : Apr 29 21:59:34 2025 GMT
        Subject: CN=203a5010-fa0c-4384-ae83-a824ead76293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:02:0b:31:86:54:31:1d:7f:e1:30:a1:73:
                    79:35:a4:67:c0:a4:5f:66:45:0e:fd:0d:b3:79:df:
                    38:66:d1:92:b3:cc:26:13:5e:0b:06:a6:3c:ce:86:
                    d8:a1:d2:0e:d8:ae:dd:63:d8:ed:02:12:54:b5:a2:
                    91:e5:15:70:b8:2f:14:73:c8:d5:e6:5a:53:dd:30:
                    a4:b9:e2:f5:ca:ee:7c:80:da:aa:20:37:f5:59:ef:
                    c4:b3:a1:2b:e0:9f:b9:63:82:35:77:20:f4:7e:38:
                    20:e7:38:a9:1f:b7:57:4d:fe:44:46:df:4c:2d:9b:
                    3c:1f:4a:77:de:cb:cf:e1:09:22:81:a6:3f:8b:9a:
                    db:8a:60:0f:54:c2:81:51:f3:d2:f7:d6:9a:f4:89:
                    cf:19:a1:69:77:f1:5c:cb:05:a4:2d:72:eb:c4:ac:
                    dc:8c:a9:cf:ef:8d:b2:80:fa:97:c4:91:2f:15:8f:
                    bc:91:b1:91:9a:b7:7a:97:1b:42:00:c7:e9:1d:87:
                    b1:21:50:92:02:1d:a1:17:8f:28:8f:ac:53:ee:a3:
                    96:7b:61:6a:b4:05:28:e8:0e:9a:ad:b2:89:22:bd:
                    97:bc:e7:f9:36:51:59:2c:2e:f9:a0:98:01:56:88:
                    6c:61:e0:39:7e:82:b0:02:2e:87:b1:9d:41:1d:33:
                    45:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C0:05:8A:F0:23:90:CF:70:5B:C5:9F:55:1A:EF:0D:95:17:45:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/8f46af7b-8a51-4d0c-82e1-bf0e75108610.crl

            X509v3 Authority Key Identifier:
                keyid:DE:D8:1F:3F:53:F4:CF:D5:7D:27:98:13:16:CF:00:F7:61:C9:61:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f708::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:78:78:bb:7d:84:a2:f0:7a:1c:ee:f6:69:fc:d9:8b:5b:f3:
         61:91:e1:79:68:ef:31:23:a4:3c:a0:b5:20:f4:ba:38:e8:5c:
         02:08:c6:19:cf:67:40:bf:1e:33:82:e6:fe:a2:41:45:74:a8:
         17:9e:60:d0:e4:7a:68:2f:94:31:b2:7f:0b:16:9f:58:c8:a4:
         12:03:97:ac:33:84:03:34:3c:b8:a7:17:67:74:75:ae:5b:ab:
         2f:ab:6f:f9:3a:53:f1:72:d0:13:3e:5d:6a:09:aa:7d:e2:94:
         67:85:0f:3b:30:46:b5:61:c8:a2:a1:e3:a2:21:36:40:da:ae:
         26:bb:b9:28:89:ed:64:9e:a0:5e:86:6b:fd:44:80:db:cb:55:
         b8:23:9e:f4:4d:92:69:8a:22:8c:c9:09:b0:ea:5a:47:fe:30:
         8e:74:26:b9:b1:37:e1:88:df:ee:d4:97:23:ee:fc:22:6a:d6:
         27:d8:c7:b5:60:82:64:83:92:13:38:f5:d9:2b:bd:1b:04:86:
         e1:8e:79:69:24:0b:48:30:86:35:f2:3a:11:82:c0:44:37:d9:
         9f:ff:41:08:6c:8a:37:f8:92:09:97:8a:56:4e:b1:5f:89:43:
         1a:65:14:4e:43:72:8b:59:2b:34:1c:62:90:63:95:60:a1:8e:
         e3:8e:ae:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:02:32 2025 by rpki-client