Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/61a6ecd9-9633-3eaa-9cdb-a619ad1b2c23.roa
File:                     61a6ecd9-9633-3eaa-9cdb-a619ad1b2c23.roa (raw, json)
Hash identifier:          NNQFEOQAmAOp3aN+spDYgYgLyJenNTIqxZCPaeK9cIA=
Subject key identifier:   4F:3E:C5:B7:CB:56:68:83:C8:D6:CF:B6:06:E6:3D:13:84:53:D2:56
Certificate issuer:       /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
Certificate serial:       010D0C9F43285848F7C1445C115946BAEDA6D580
Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/61a6ecd9-9633-3eaa-9cdb-a619ad1b2c23.roa
Signing time:             Sat 22 Feb 2025 14:00:52 +0000
ROA not before:           Sat 22 Feb 2025 14:00:52 +0000
ROA not after:            Fri 23 May 2025 13:00:52 +0000
asID:                     160
IP address blocks:        2605:9a00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f7:c1:44:5c:11:59:46:ba:ed:a6:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
        Validity
            Not Before: Feb 22 14:00:52 2025 GMT
            Not After : May 23 13:00:52 2025 GMT
        Subject: CN=1dfec35b-59f7-49ab-9db7-93f22b9b7832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:24:b3:77:ee:2d:65:6d:df:82:2a:58:22:
                    ad:58:0a:01:fd:ed:1d:92:db:72:b4:df:8a:20:52:
                    ee:bd:b5:03:94:15:73:95:da:72:3d:e8:cb:9c:04:
                    6e:04:9c:4f:68:96:14:85:f2:cf:64:2a:f9:c0:cb:
                    96:9a:74:94:2d:df:4e:d1:b1:e0:ec:d6:91:d1:3a:
                    64:7c:0a:83:89:1a:aa:3f:23:49:fb:e4:7b:a9:9e:
                    99:68:90:31:2c:94:4c:d1:21:2d:8e:89:69:6c:e1:
                    fc:b0:14:61:29:42:9f:2c:9b:7b:17:98:fd:c8:d4:
                    9c:97:9c:6d:b0:3f:92:3e:a1:61:9a:07:8c:a2:2e:
                    a4:8d:77:1f:f2:30:ab:e8:14:9d:77:bf:89:dd:3f:
                    0e:df:11:9c:f1:16:74:64:4a:1d:8a:f7:c7:42:a1:
                    0d:16:04:91:4c:71:eb:fc:a4:30:85:c4:f6:d6:1d:
                    6c:ba:14:09:cd:db:ec:28:b2:a2:c3:27:c5:05:ad:
                    77:7d:0b:f1:1f:74:13:31:14:fa:83:71:94:dd:c3:
                    97:ce:e4:6a:8a:35:47:de:6d:3b:b1:e9:bd:37:97:
                    a5:31:32:76:1e:32:be:a8:03:4f:c1:42:c1:0b:fd:
                    2f:d8:ee:43:8c:11:37:8e:24:ea:77:77:6c:b0:6a:
                    e7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3E:C5:B7:CB:56:68:83:C8:D6:CF:B6:06:E6:3D:13:84:53:D2:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/61a6ecd9-9633-3eaa-9cdb-a619ad1b2c23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9a00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:50:78:50:0b:4f:35:2b:f2:05:1c:78:5f:ed:94:d9:ae:ac:
         e2:18:ff:0b:ea:cb:9f:18:dc:87:03:72:a5:74:09:03:f9:f3:
         5d:55:43:40:83:4a:89:56:13:45:dd:6d:f5:81:38:26:c0:2e:
         3d:ea:53:3a:09:e7:cb:87:3a:94:78:c2:d8:4b:2b:3b:0e:11:
         2d:22:94:88:f4:33:1e:4a:53:80:31:b0:09:6f:b7:f6:c1:32:
         58:3f:31:68:d2:68:f2:b2:fe:7a:cd:d8:3a:b0:e4:55:53:51:
         ca:03:0d:9b:13:fa:0d:4a:e8:1f:13:9c:ca:34:ad:d7:4d:2a:
         7b:ee:d4:17:39:85:33:81:06:9a:33:df:d2:fc:46:72:eb:dd:
         64:f5:52:7d:c0:fc:25:58:f6:6a:8d:3d:78:b4:3a:4c:19:6e:
         c4:39:9f:92:5c:02:60:aa:d8:65:0f:af:1d:02:26:62:fd:3a:
         4c:4f:29:c6:e9:7e:82:05:06:32:79:5a:02:5b:d5:e9:a7:e9:
         dd:6b:6f:7f:34:26:c0:a0:d3:0e:98:8a:8a:ef:f4:33:8c:4e:
         78:d8:08:3a:f1:ec:dd:02:27:10:aa:b2:4e:f5:e4:53:7e:8a:
         36:50:42:a6:79:20:2c:6d:e1:c5:28:e4:4f:85:2b:57:31:92:
         bb:41:b0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:51:40 2025 by rpki-client