Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/208befef-81e0-35bd-b5ca-73892691acbb.roa
File:                     208befef-81e0-35bd-b5ca-73892691acbb.roa (raw, json)
Hash identifier:          WwvE7qC1kOvSs3rlxA5ypHXlQUg1aitt/SXnsSIePvE=
Subject key identifier:   E3:C3:F0:0E:63:67:53:41:96:07:00:4A:4D:5D:5D:D6:2C:AE:08:A9
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F432858492184017C1D974AF978C28A00
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/208befef-81e0-35bd-b5ca-73892691acbb.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     393336
IP address blocks:        2602:ffd1::/48 maxlen: 48
                          2602:ffd1:2::/48 maxlen: 48
                          2602:ffd1:3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:01:7c:1d:97:4a:f9:78:c2:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=bbfbd6d2-79ee-4e51-b215-36e60cc837b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:68:23:ee:04:76:8e:13:23:2a:c1:e1:57:64:
                    83:47:10:e9:f7:5d:41:bd:92:ae:e2:3a:bd:8f:f3:
                    03:27:eb:f5:55:e3:b1:26:4b:92:73:51:c2:16:ea:
                    9b:69:24:d1:e1:ec:4e:91:0a:ef:7d:80:ab:3b:1b:
                    07:b9:c8:01:9f:a9:2d:ba:7f:24:3f:9a:a8:a8:35:
                    be:09:21:31:72:05:21:aa:93:f0:bd:35:47:a7:1b:
                    42:62:e1:3d:8c:64:b2:63:32:8b:ba:cf:42:e0:aa:
                    35:5c:15:dd:61:37:ef:a8:b1:0f:f8:a8:97:1a:45:
                    07:00:27:30:5f:35:97:dd:17:b1:b0:35:c1:32:fb:
                    67:c4:d1:96:1f:76:6b:f9:75:9e:ce:5a:14:c7:7b:
                    65:43:3b:28:16:40:32:ac:ef:68:c2:f5:cd:c6:85:
                    9a:71:e0:e3:1f:bf:a9:85:f9:77:90:28:f7:45:56:
                    77:ae:6c:fb:56:4f:8c:b9:52:bf:58:44:0f:bc:8a:
                    30:2c:d9:e6:50:25:25:1b:21:1d:f9:ae:66:7a:be:
                    08:9b:af:9c:d6:98:51:08:6a:45:2a:69:8a:eb:be:
                    89:37:9e:27:a9:9d:e3:2d:bb:15:54:67:32:09:fd:
                    c6:d3:64:fe:33:e3:fb:8d:87:fe:10:f5:fb:62:f3:
                    42:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C3:F0:0E:63:67:53:41:96:07:00:4A:4D:5D:5D:D6:2C:AE:08:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/208befef-81e0-35bd-b5ca-73892691acbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffd1::/48
                  2602:ffd1:2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ec:19:d6:a5:fe:b0:60:7d:ca:26:89:cb:66:91:6f:70:1c:b1:
         37:46:7b:43:32:8b:da:1d:e5:ae:81:b7:0b:12:ef:32:41:b4:
         42:13:07:a1:d1:fa:80:64:df:77:b1:85:ca:81:75:18:a0:48:
         d0:1a:aa:82:e5:4b:63:b5:4b:77:2a:f3:99:af:69:ad:a4:88:
         c7:df:13:a4:26:c1:00:56:87:a7:4c:d0:75:0b:4a:8a:89:9f:
         4b:b8:0e:22:fb:d4:3f:ec:ac:54:a6:c7:97:c4:f2:98:f6:37:
         eb:55:71:d5:a7:b0:3d:cc:bd:c2:6b:ea:50:5e:54:01:0c:11:
         33:d4:de:5d:de:e6:9a:83:7a:bc:c9:63:59:aa:30:f6:e1:2b:
         19:34:e9:cd:73:86:10:e7:5b:a4:ba:25:11:c7:fc:a5:9a:04:
         7c:7a:2f:e1:57:7f:55:2c:c0:45:92:d0:ce:7c:ed:dd:74:5d:
         3d:94:72:5e:4f:5f:20:70:30:da:4b:60:66:73:dc:8c:71:54:
         7b:60:ee:9e:66:b4:f1:b7:4d:9b:de:44:3b:c6:8c:b2:a3:23:
         d9:1b:a6:6f:d2:c3:d5:61:90:8d:8f:6b:9f:da:75:9f:7f:fe:
         a6:7c:ea:c5:7a:b7:09:fd:fd:0c:30:44:9b:7d:c9:65:14:8b:
         c3:2c:eb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:24 2025 by rpki-client