Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/65338b5c-0997-36f8-8c09-1bcc03458993.roa
File:                     65338b5c-0997-36f8-8c09-1bcc03458993.roa (raw, json)
Hash identifier:          Zlc+o0NKp+E/EVAwPPOp3g1kxqHjgSzuNfpCg3F38xU=
Subject key identifier:   E3:E5:F9:55:6F:06:FA:6E:3A:AE:51:F8:9D:13:57:EF:B5:1F:10:90
Certificate issuer:       /CN=7671ed9c-f209-4882-bd38-5f129f761a08
Certificate serial:       010D0C9F432858417294BEF56B4BC50509AFA880
Authority key identifier: 78:9F:AB:3B:E2:30:79:06:0D:3E:CF:07:F5:DD:F6:46:B9:08:EB:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/65338b5c-0997-36f8-8c09-1bcc03458993.roa
Signing time:             Tue 04 Apr 2023 19:04:07 +0000
ROA not before:           Tue 04 Apr 2023 19:04:07 +0000
ROA not after:            Mon 07 Jul 2025 04:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:900::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:72:94:be:f5:6b:4b:c5:05:09:af:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7671ed9c-f209-4882-bd38-5f129f761a08
        Validity
            Not Before: Apr  4 19:04:07 2023 GMT
            Not After : Jul  7 04:00:00 2025 GMT
        Subject: CN=614cd164-c25e-4c4b-9ba5-816173912538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:74:e6:0f:7d:5d:11:4c:39:34:b2:40:74:39:
                    85:76:da:90:9c:ca:8b:36:f7:cb:10:66:d3:a0:cd:
                    96:85:ff:35:dd:1b:5f:5f:63:97:ce:e0:62:e4:6a:
                    83:ff:66:11:36:73:26:74:e5:bb:d5:13:ac:c9:d5:
                    65:9b:13:a9:ae:e4:89:df:96:c5:5c:d3:e7:69:3d:
                    79:74:78:7c:23:ed:4f:b2:dd:48:a6:35:8a:05:b2:
                    a0:38:6e:76:53:a8:b9:07:b5:23:b4:7a:c5:a5:a5:
                    f3:b0:49:b5:4c:10:bc:66:fd:5c:07:e8:e8:9d:a9:
                    d1:51:17:dc:33:05:03:1f:91:00:39:bd:2b:6a:dc:
                    37:b5:34:16:9b:08:77:ad:70:3c:ab:58:d6:15:49:
                    1e:57:ee:23:ab:3d:8e:73:0a:99:42:8d:33:59:eb:
                    ae:48:db:e4:3b:a2:bf:18:1a:db:ca:9e:f2:8a:5e:
                    ac:c5:16:aa:89:6b:f8:f8:8b:ff:b2:7c:e3:c2:29:
                    31:9c:e8:f9:0c:54:1d:5c:bb:c4:2d:ac:8f:56:91:
                    c5:88:09:f2:b8:d4:2a:d1:9b:4b:d1:4b:24:84:fb:
                    01:6e:d9:6d:5e:b6:6e:df:94:60:52:46:33:2a:21:
                    61:a8:5f:d2:b0:a3:43:4c:e5:ac:86:82:35:d8:62:
                    a6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E5:F9:55:6F:06:FA:6E:3A:AE:51:F8:9D:13:57:EF:B5:1F:10:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/65338b5c-0997-36f8-8c09-1bcc03458993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/7671ed9c-f209-4882-bd38-5f129f761a08.crl

            X509v3 Authority Key Identifier:
                keyid:78:9F:AB:3B:E2:30:79:06:0D:3E:CF:07:F5:DD:F6:46:B9:08:EB:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:900::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:18:6d:59:97:ee:a8:60:be:b2:58:52:c9:ee:d7:a2:52:34:
         04:4e:28:77:a5:d5:b6:d2:08:b4:69:67:bf:08:24:71:fa:01:
         60:e6:87:b5:c8:9b:10:90:f2:3c:a7:06:c0:77:14:78:9e:90:
         d7:1a:61:e7:8d:ac:03:bb:c3:e7:a5:f3:ae:2a:a1:64:3a:61:
         cf:2d:4c:3f:d4:df:56:ac:b4:c5:e2:d8:45:01:30:d9:26:84:
         99:8b:09:38:cc:2c:9b:db:18:d7:31:0e:28:4a:bb:05:a7:8f:
         e6:70:1d:c3:57:63:3d:b4:2d:c8:d3:f4:4c:73:70:36:05:b0:
         d2:c3:14:54:68:9b:7b:11:1c:4a:fc:db:fd:bd:9b:12:32:87:
         fb:d5:5d:ab:94:e9:3a:83:3f:16:1f:dc:12:fa:0b:57:79:20:
         b0:cd:38:14:09:06:7b:8c:f2:dd:40:c4:bd:42:bf:70:ce:57:
         eb:57:2d:d5:28:b1:18:bf:93:1b:03:ca:9e:e1:68:cf:8d:96:
         aa:84:a3:ef:e4:ae:5c:5a:c3:aa:22:7c:ae:15:1b:98:5a:6c:
         6e:66:8a:89:07:28:43:44:b4:31:de:d9:6c:c3:3f:cc:76:d2:
         b1:63:57:b1:8f:31:43:d1:fb:2f:ec:13:7e:d0:13:06:3f:01:
         5f:34:97:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org