Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/fde54c99-938c-346d-911e-b3a36062bb7c.roa
File:                     fde54c99-938c-346d-911e-b3a36062bb7c.roa (raw, json)
Hash identifier:          5vM9/QkKAl/OjvlXH8mohnN1UrtpC9Opv+pGtm9Kf5Y=
Subject key identifier:   83:A9:4E:17:D8:A2:8E:9F:00:DE:A7:20:2F:1F:43:67:5F:8A:33:33
Certificate issuer:       /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial:       010D0C9F432858485B6AFA8EE179CCAC3BA83380
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/fde54c99-938c-346d-911e-b3a36062bb7c.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     13627
IP address blocks:        2602:fba3::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6a:fa:8e:e1:79:cc:ac:3b:a8:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=06f20042-a43c-4d5d-a0d6-0893584ab973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b9:d8:be:40:36:82:06:8f:44:b1:4c:eb:ce:
                    5c:35:b6:3b:2c:02:e8:7a:f8:d1:83:98:9c:e4:3c:
                    3c:75:d9:c1:0a:29:c2:58:7c:1b:bf:cd:ef:7f:1d:
                    00:c8:6c:b0:53:5b:4e:9a:24:02:18:6e:87:9c:45:
                    a2:cf:cb:8f:d5:3d:15:ac:a5:b3:9a:c9:d7:09:e8:
                    86:86:e9:69:6d:4b:be:5e:28:21:04:ba:5b:6f:0d:
                    ef:c0:82:10:bd:79:d8:23:da:e8:4e:b8:5d:cd:0e:
                    ba:bf:bc:ec:21:3a:00:07:e6:19:a5:8f:c8:51:c1:
                    d4:78:74:b4:65:2a:25:87:48:d6:6e:d7:99:15:df:
                    d2:73:70:c7:41:5e:30:2b:2d:7c:74:1c:46:51:ec:
                    e1:59:9b:a1:ad:15:30:5f:08:89:8e:73:68:d2:18:
                    99:1d:0e:70:a5:8f:9c:6c:66:06:ce:cd:b8:e1:0b:
                    4b:48:96:de:67:d7:72:53:51:82:c1:ff:ed:3a:f5:
                    22:4c:b5:2a:54:e1:1b:74:4e:55:55:c0:95:8d:58:
                    ba:8e:a7:7f:e1:10:b2:56:9b:9a:b6:d5:bf:a6:7f:
                    95:19:f3:08:b1:67:81:20:14:9d:98:37:13:c8:75:
                    b6:b5:a4:59:78:02:71:fd:1f:68:ad:a7:fe:4f:0b:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A9:4E:17:D8:A2:8E:9F:00:DE:A7:20:2F:1F:43:67:5F:8A:33:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/fde54c99-938c-346d-911e-b3a36062bb7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl

            X509v3 Authority Key Identifier:
                keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba3::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:0c:cb:67:d6:e7:a1:08:ca:ed:d0:80:a9:41:0a:a3:95:24:
         98:76:fa:1d:89:05:ec:9d:fa:47:4a:7d:b6:2f:cf:d4:25:e9:
         b8:e4:d8:d8:5d:5e:bb:a3:6b:32:42:07:1c:a3:a7:26:3d:fd:
         c4:5c:09:cf:9f:c7:46:49:4a:40:00:75:d5:d5:fb:70:30:92:
         6d:33:d2:50:a7:91:cb:c5:9f:fe:8a:b6:49:b0:be:94:9b:30:
         0e:df:c4:42:f2:24:72:c6:8f:35:64:68:c6:2d:16:af:0b:d1:
         ac:1f:cc:1a:67:f9:ef:09:4e:10:52:c8:ea:3a:0f:e8:bd:b1:
         fb:55:89:f6:4f:8c:84:1b:ea:79:a8:c4:a1:e2:a7:8a:39:6f:
         df:1e:c7:1f:a6:4d:74:e5:c3:bc:fc:98:4f:4e:8f:97:7b:2c:
         99:92:bb:68:66:b1:56:82:d6:d1:87:9a:25:d0:6c:e8:94:ea:
         d6:ba:4f:62:21:3d:ac:0c:22:01:52:ce:73:92:3e:b5:6c:cb:
         dc:ad:d1:86:8a:a7:7c:3b:ae:32:65:7a:e1:0b:d0:cb:e8:cb:
         2f:ae:44:80:41:3c:e7:dd:a9:cc:cd:91:d1:46:b1:f0:b0:fe:
         02:41:1e:9c:47:2b:05:f3:b5:35:ba:e7:50:9e:ea:17:50:f6:
         a6:36:02:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:59:05 2025 by rpki-client