Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/968c9b1f-bc22-3c8b-b9c9-742a7f749d69.roa
File:                     968c9b1f-bc22-3c8b-b9c9-742a7f749d69.roa (raw, json)
Hash identifier:          5f/RonoRD56hhISglLusTGcl0CHWIeg1G23KXMIuEPY=
Subject key identifier:   7B:1D:FA:04:7A:BC:51:42:7A:EA:62:8B:9C:77:58:65:98:0F:AD:EB
Certificate issuer:       /CN=0b71e1b2-5595-44cf-aa4d-6b5d35ad380e
Certificate serial:       010D0C9F4328584120725D83BAAABB3F14942880
Authority key identifier: 08:F6:D4:68:F1:09:F2:E8:3E:A1:E9:A5:0B:29:2E:88:DB:B8:F0:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/968c9b1f-bc22-3c8b-b9c9-742a7f749d69.roa
Signing time:             Tue 28 Feb 2023 18:57:57 +0000
ROA not before:           Tue 28 Feb 2023 18:57:57 +0000
ROA not after:            Mon 02 Jun 2025 04:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:700::/48 maxlen: 48
                          2602:fc3b:400::/48 maxlen: 48
                          2602:fc3b:500::/48 maxlen: 48
                          2602:fc3b:600::/48 maxlen: 48
                          2602:fc3b:800::/48 maxlen: 48
                          2602:fc3b:900::/48 maxlen: 48
                          2602:fc3b:a00::/48 maxlen: 48
                          2602:fc3b:b00::/48 maxlen: 48
                          2602:fc3b:c00::/48 maxlen: 48
                          2602:fc3b:d00::/48 maxlen: 48
                          2602:fc3b:e00::/48 maxlen: 48
                          2602:fc3b:f00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:20:72:5d:83:ba:aa:bb:3f:14:94:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b71e1b2-5595-44cf-aa4d-6b5d35ad380e
        Validity
            Not Before: Feb 28 18:57:57 2023 GMT
            Not After : Jun  2 04:00:00 2025 GMT
        Subject: CN=a96cd2ce-1f38-4627-b03f-5c6fd71dc8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ee:1c:4a:1a:6f:aa:36:9f:c7:64:4f:98:fd:
                    a3:bc:ac:be:f5:72:e4:fe:0a:09:27:7b:f1:77:66:
                    4a:c7:99:54:62:9c:d6:03:04:2d:61:34:96:16:4a:
                    35:13:05:74:7f:9c:9d:07:fe:87:88:bb:69:c3:6b:
                    60:88:63:20:94:ff:15:0e:bb:37:86:45:16:d8:80:
                    67:6d:43:f3:a3:69:a3:ce:3c:35:eb:fc:98:52:df:
                    0a:ac:9f:3f:56:2d:f7:eb:12:ed:50:9c:a0:53:4b:
                    2e:ed:64:a5:2d:46:2d:2a:8a:64:7b:14:bd:ac:b4:
                    6a:e4:1d:4a:5d:50:d2:a9:48:17:54:84:f0:00:2c:
                    3b:41:36:ec:fa:96:e2:89:7c:15:b9:53:df:89:63:
                    15:7f:47:81:c9:cd:c6:ff:4f:0a:4b:69:e8:65:93:
                    99:02:bc:b0:2f:73:00:58:2d:60:54:e3:dc:13:45:
                    2e:3e:92:0d:69:cb:8b:99:05:a7:a8:68:5e:94:cc:
                    a6:d4:6b:36:52:4e:8c:94:33:f2:4b:0f:5f:87:27:
                    d5:37:44:7e:b5:98:00:0c:26:66:00:4a:a7:8b:17:
                    fa:7a:1d:ec:c7:32:7e:f1:ec:1c:69:d1:a1:aa:66:
                    57:c4:a3:bd:04:5b:98:00:51:81:c6:fd:79:cf:cd:
                    92:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1D:FA:04:7A:BC:51:42:7A:EA:62:8B:9C:77:58:65:98:0F:AD:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/968c9b1f-bc22-3c8b-b9c9-742a7f749d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e.crl

            X509v3 Authority Key Identifier:
                keyid:08:F6:D4:68:F1:09:F2:E8:3E:A1:E9:A5:0B:29:2E:88:DB:B8:F0:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:400::/48
                  2602:fc3b:500::/48
                  2602:fc3b:600::/48
                  2602:fc3b:700::/48
                  2602:fc3b:800::/48
                  2602:fc3b:900::/48
                  2602:fc3b:a00::/48
                  2602:fc3b:b00::/48
                  2602:fc3b:c00::/48
                  2602:fc3b:d00::/48
                  2602:fc3b:e00::/48
                  2602:fc3b:f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:1a:ec:19:e9:f3:23:05:e4:30:08:29:1c:c8:ae:2f:63:c0:
         8b:9c:c8:28:53:a0:c0:1c:1f:21:3c:e2:03:16:27:74:29:a8:
         15:a7:c7:fb:03:4a:39:c5:45:90:12:bf:0c:98:52:85:9e:d1:
         5e:a5:f2:23:a5:79:a0:12:4b:91:e4:5e:3f:28:d1:f4:5c:ce:
         09:8b:db:c3:0d:c9:68:70:7f:28:cb:f3:13:c5:58:2c:14:54:
         ec:89:2e:58:e3:29:d0:fa:2c:86:de:10:42:1f:5d:de:a9:9f:
         8d:2a:4f:d2:b1:90:48:45:f5:df:2f:11:81:91:4f:bf:47:fc:
         2a:ec:c1:53:8b:02:06:b8:46:df:da:73:1f:97:4c:b8:c4:3f:
         68:4e:cc:a3:5e:c8:19:7c:f9:17:4b:5c:e2:b3:7f:91:f8:21:
         48:1b:2f:9a:0c:2a:6f:6e:7a:d1:6e:f0:90:ce:8e:3e:33:f4:
         23:e7:8c:3a:29:02:c2:f7:15:ef:e4:a6:3d:65:77:d1:51:cd:
         69:eb:48:22:02:1c:eb:23:7f:2e:1a:f0:b1:e0:91:e3:0d:87:
         5a:99:ee:29:56:7d:d6:3a:0c:89:78:05:a6:b6:02:57:76:e9:
         53:15:f8:b1:b1:c3:4e:33:33:d9:d5:c7:77:2a:17:58:7b:64:
         53:8b:17:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org