Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/047e6206-71ba-3e6e-b73b-d50215b24061.roa
File:                     047e6206-71ba-3e6e-b73b-d50215b24061.roa (raw, json)
Hash identifier:          k+iZld4GmxiLbcH9ZqTNs4xljaGznNnnEYp7p8CLDE0=
Subject key identifier:   DA:F0:B0:6D:F2:B3:4D:9D:99:44:03:5D:DB:62:98:4C:BE:77:AD:BD
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F43285848DA70FF9F7CB5AB46D213C800
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/047e6206-71ba-3e6e-b73b-d50215b24061.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     5645
IP address blocks:        2607:f2c0::/32 maxlen: 32
                          2607:f2c0:9900::/40 maxlen: 40
                          2607:f2c0:9a00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:70:ff:9f:7c:b5:ab:46:d2:13:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=c0dbf6dc-034e-4c9e-bf27-090916b477c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0d:bb:8a:a7:52:90:46:5f:a7:56:90:4c:32:
                    2b:00:0c:e5:11:e0:c1:74:18:74:2e:4c:6f:07:ae:
                    08:92:c3:5d:c9:78:f1:32:e6:a3:ed:e8:73:42:25:
                    7a:9f:33:93:da:97:57:fc:5b:6e:44:73:f4:c4:16:
                    80:66:df:4e:be:5c:06:04:3a:a0:bd:7c:ae:c7:09:
                    31:8d:13:53:13:de:46:83:98:25:fe:d0:01:f7:ad:
                    06:11:15:f7:7c:21:75:10:cb:b5:a6:5a:6f:0c:be:
                    fc:91:a1:7e:38:36:e8:e3:53:41:56:72:da:65:8f:
                    c8:bd:a6:7c:18:4d:65:ef:f0:4d:8c:59:11:33:b8:
                    bf:40:1a:40:6c:33:40:b8:79:b5:34:ac:0d:75:8d:
                    d4:5a:de:f6:be:35:ec:bd:28:04:50:69:4e:e8:97:
                    47:2d:7d:71:a1:b2:28:37:7f:e3:f8:7c:0f:61:c7:
                    01:1f:32:f9:13:0c:66:2b:de:dc:fb:89:7d:c0:a5:
                    36:1d:61:87:b1:ac:d0:74:19:ce:1a:10:44:1d:50:
                    2d:dc:ef:d4:fd:ac:60:87:b9:91:27:68:ee:c6:29:
                    9d:d4:de:fa:a0:54:ae:ad:52:17:d5:65:bc:41:14:
                    e1:1b:88:0b:cf:06:bb:ec:f5:36:a1:97:ab:4c:36:
                    c3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F0:B0:6D:F2:B3:4D:9D:99:44:03:5D:DB:62:98:4C:BE:77:AD:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/047e6206-71ba-3e6e-b73b-d50215b24061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:01:30:b7:02:30:6a:a1:02:ff:01:0d:2a:47:8d:09:ac:98:
         de:b5:15:cd:f4:79:e8:92:3d:81:42:48:19:30:c3:e9:e4:0c:
         54:fd:7b:39:5c:10:ad:a3:eb:cc:21:26:98:33:cb:f5:93:b1:
         bd:c9:f6:66:14:8b:1e:4d:75:ea:06:c0:7b:ad:8f:99:25:fe:
         58:dd:ae:1e:4e:d8:90:34:51:9d:ce:81:3a:70:57:28:07:2d:
         c4:2d:44:cd:1a:f8:f4:9d:33:92:89:57:38:79:38:f1:62:57:
         ea:67:7a:65:49:00:d1:8b:34:f0:18:1d:7d:13:cd:75:a7:48:
         3b:f2:d1:98:49:6a:16:57:dd:3d:32:a4:6c:ac:44:1f:4a:28:
         4c:55:65:1d:b1:c2:d1:7e:40:79:86:5f:8a:70:d2:35:14:88:
         0a:0c:9b:48:18:d2:d6:42:9e:f3:bf:a0:d7:9b:48:77:a8:70:
         eb:23:d9:50:7e:4c:6f:23:1c:fa:20:bc:95:40:59:38:66:eb:
         f8:5e:62:66:55:19:74:c7:2b:58:e9:42:ac:fb:0c:4a:13:56:
         8d:ce:60:72:63:de:bc:ba:32:51:13:59:6c:14:21:ab:f3:61:
         fb:3c:5a:fa:f9:00:ed:ac:8b:75:fb:f0:bb:c5:0a:ad:8a:4a:
         33:e9:56:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:25 2025 by rpki-client