Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/caf872ab-d6eb-36e3-97d9-31e61d413ec5.roa
File:                     caf872ab-d6eb-36e3-97d9-31e61d413ec5.roa (raw, json)
Hash identifier:          yTSInVO/CgJtfn+Su62y/JyadgcYay+0LBsl4GbZ2tE=
Subject key identifier:   5B:2E:A5:96:8C:0E:48:43:41:49:03:C7:5A:EB:17:E0:4D:99:49:C1
Certificate issuer:       /CN=7671ed9c-f209-4882-bd38-5f129f761a08
Certificate serial:       010D0C9F432858417291F5CC9FC572260882FB40
Authority key identifier: 78:9F:AB:3B:E2:30:79:06:0D:3E:CF:07:F5:DD:F6:46:B9:08:EB:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/caf872ab-d6eb-36e3-97d9-31e61d413ec5.roa
Signing time:             Tue 04 Apr 2023 19:04:07 +0000
ROA not before:           Tue 04 Apr 2023 19:04:07 +0000
ROA not after:            Mon 07 Jul 2025 04:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:72:91:f5:cc:9f:c5:72:26:08:82:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7671ed9c-f209-4882-bd38-5f129f761a08
        Validity
            Not Before: Apr  4 19:04:07 2023 GMT
            Not After : Jul  7 04:00:00 2025 GMT
        Subject: CN=925581d0-deea-4ad7-936f-576c86a7a418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:b9:70:e5:1e:7b:85:8b:87:3f:8d:6b:79:
                    62:7b:a7:f6:2e:f0:95:a6:c2:f8:1d:03:de:e7:03:
                    85:ff:55:1b:b0:de:c7:6b:81:75:cb:55:58:20:5f:
                    fa:46:93:70:08:04:d5:9b:17:0d:4c:d8:6b:84:e5:
                    b7:87:8e:dc:cb:51:00:2b:f5:60:67:e5:6f:ae:83:
                    24:bf:75:68:a7:ec:cc:9c:37:e6:fc:d1:61:bf:53:
                    c5:68:2b:6b:ce:c9:fd:51:06:fd:c4:6a:fa:e5:87:
                    d2:2a:7e:e9:65:74:01:74:c9:80:e8:86:e7:7a:17:
                    41:3b:18:33:a1:b2:28:98:69:b6:d7:b3:b3:43:3b:
                    4a:d9:64:fc:be:ab:e9:25:d0:72:93:c8:01:85:0d:
                    3b:c8:f9:24:d7:f2:be:37:ee:9f:63:25:9b:00:8b:
                    78:98:da:94:1e:df:84:01:e1:18:7a:8f:7b:28:74:
                    23:20:47:a8:b5:7a:9d:d7:c8:f4:ce:2b:b0:aa:1d:
                    72:82:39:d2:d1:21:71:40:7a:a8:8b:42:64:ad:a9:
                    95:4e:e3:06:12:cd:88:db:50:90:34:25:2d:1c:49:
                    84:ba:ed:4d:75:6c:93:e7:15:35:09:fb:66:d9:88:
                    53:98:47:d8:e5:05:6c:ce:d7:2b:59:72:09:9d:0a:
                    34:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2E:A5:96:8C:0E:48:43:41:49:03:C7:5A:EB:17:E0:4D:99:49:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/caf872ab-d6eb-36e3-97d9-31e61d413ec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/7671ed9c-f209-4882-bd38-5f129f761a08.crl

            X509v3 Authority Key Identifier:
                keyid:78:9F:AB:3B:E2:30:79:06:0D:3E:CF:07:F5:DD:F6:46:B9:08:EB:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:bb:3a:27:24:8c:00:d0:c1:56:9f:f8:2e:4c:db:78:ff:cb:
         20:bb:04:bb:22:1d:51:cc:67:29:92:d5:7f:31:4e:c8:5f:7f:
         0e:97:b1:5a:72:4b:fb:a3:bb:a8:02:72:07:99:07:d5:ef:ef:
         09:48:0c:99:7a:63:20:ae:05:5a:87:64:87:8d:68:0e:9f:6f:
         c5:c3:8e:dc:1c:c2:9d:04:7b:f8:f3:14:50:e4:f2:f4:59:b1:
         16:50:fb:c4:fd:28:ae:46:9c:16:a1:d7:ed:75:11:17:21:2f:
         58:2a:1e:c1:02:29:2e:c9:53:dc:7e:1e:ac:71:5a:e2:43:f1:
         df:96:a5:bb:12:92:3e:c7:7f:0e:c3:bd:b5:7d:fd:7b:7f:49:
         f1:7a:8c:a0:90:85:58:16:7d:f6:54:71:44:ab:c3:c5:ea:85:
         16:da:4f:80:42:b5:fd:73:b1:89:3d:12:46:aa:3e:09:7b:24:
         13:6a:4c:43:0d:59:85:47:3f:35:61:73:88:3c:cb:27:00:f7:
         93:6f:bb:0a:0d:65:4d:e5:3f:b5:0c:3c:89:3c:61:a6:26:22:
         c9:49:bb:5d:74:e7:51:1d:70:b1:f2:26:44:c6:d8:e1:67:4f:
         81:36:1b:9f:20:b2:6f:05:e7:b6:8a:15:32:72:ed:24:96:66:
         c1:ba:30:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org