Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8aae9afe-07e9-3e54-840c-a7fbebdb6eee.roa
File:                     8aae9afe-07e9-3e54-840c-a7fbebdb6eee.roa (raw, json)
Hash identifier:          jwKKptrSeNHc9iz9Iol9Mw0RmdpbxnWEj0YkXe+z05Y=
Subject key identifier:   F9:F3:99:71:A8:A0:66:A1:4A:AC:61:29:68:50:57:DC:13:B2:C1:30
Certificate issuer:       /CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
Certificate serial:       010D0C9F43285848960B54646C5A34621BB04F80
Authority key identifier: 10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8aae9afe-07e9-3e54-840c-a7fbebdb6eee.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     2381
IP address blocks:        2001:4e0:1010::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:54:64:6c:5a:34:62:1b:b0:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=59092639-5eb7-4c7a-9904-3d0dcb29fd52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:44:66:ed:ed:d3:8d:4c:53:c5:65:fe:46:29:
                    a5:a2:02:e3:9e:d6:d2:2d:02:92:5b:02:32:fc:d3:
                    55:10:c0:1f:f5:eb:78:30:19:87:ad:63:9b:c0:d9:
                    79:07:d0:93:84:66:f4:48:56:98:54:65:96:9e:78:
                    38:29:e8:5a:d4:f0:bd:d9:41:54:2d:27:af:f1:a3:
                    b8:f8:87:0f:08:fa:17:51:13:b6:d9:27:03:88:eb:
                    c8:82:e0:94:38:1c:89:19:83:3a:c9:9a:25:e0:74:
                    b1:e6:98:31:bf:7b:ac:9c:10:5b:b5:9d:67:65:fb:
                    47:1e:24:95:59:38:32:94:10:50:90:a2:81:c4:1e:
                    1a:c5:9d:a5:7a:c7:91:a4:76:69:db:61:c1:38:2c:
                    c6:a5:59:2e:48:4d:06:81:56:b5:5a:95:5c:32:92:
                    99:83:f6:dc:14:f8:66:39:8d:38:4a:b7:c3:a4:3b:
                    2b:b1:29:7d:e2:e6:a8:13:3a:3c:ac:19:d8:de:e8:
                    9f:09:02:be:b6:4c:56:f1:2f:98:8a:19:d1:a4:4d:
                    e1:b2:86:a4:22:42:d9:bd:fe:69:15:48:be:2e:c3:
                    d7:f1:5c:03:05:51:c7:7e:b0:2d:2c:e1:4d:11:ff:
                    41:81:e1:ce:51:e8:60:6d:f1:e9:03:6b:df:8d:bb:
                    c8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F3:99:71:A8:A0:66:A1:4A:AC:61:29:68:50:57:DC:13:B2:C1:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8aae9afe-07e9-3e54-840c-a7fbebdb6eee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl

            X509v3 Authority Key Identifier:
                keyid:10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4e0:1010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1a:9d:dd:fc:f0:7a:83:f2:45:69:10:db:6c:31:9f:04:f9:
         ca:16:f5:63:e4:12:21:ed:0c:62:5c:69:e3:06:14:99:5b:07:
         03:3f:9e:04:26:33:68:b8:1f:ed:85:2f:98:b3:d8:fb:25:ea:
         44:a6:91:04:f3:88:34:87:70:01:41:37:91:4d:f2:14:d7:65:
         dc:19:aa:a0:cd:c2:1d:5b:3f:1b:bf:68:d3:a1:9b:51:cb:31:
         25:f8:34:77:99:f1:ec:ee:b2:19:bc:10:b6:90:c8:67:84:af:
         c5:cd:9b:a2:dc:09:6b:79:9f:be:59:43:28:9f:21:5f:f1:cc:
         64:ba:50:09:cf:ec:6f:61:66:9a:c1:01:41:c8:95:43:42:c8:
         8b:2b:24:49:cd:22:72:45:d4:d4:09:76:02:35:c9:b0:c9:49:
         fd:16:66:79:ee:47:b4:30:25:b2:c5:3e:da:a6:dc:fb:55:32:
         21:1b:27:39:ad:84:24:e6:df:72:e2:00:69:8d:ab:38:aa:6d:
         78:bb:6d:75:dc:f9:a1:87:7b:cb:9c:dd:af:9c:15:00:d5:59:
         bb:fa:52:72:91:e6:49:37:20:5e:c1:ee:9d:44:99:e0:e6:bc:
         f0:2e:ab:1a:04:b2:24:51:21:72:c0:eb:bb:47:6d:51:07:3b:
         0a:70:69:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:20:51 2025 by rpki-client