Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa
File:                     298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa (raw, json)
Hash identifier:          SP53ffawST7l+gZNrnYYJOiFco1NxJ2THTKUIJSTf0E=
Subject key identifier:   DB:33:AB:DB:CB:BF:35:F3:69:B2:94:26:BD:50:E2:51:70:07:30:04
Certificate issuer:       /CN=29dfb106-65b1-4e83-81d9-8b97730bd706
Certificate serial:       010D0C9F43285847F1C066E8EF01BF53EC4E3500
Authority key identifier: 34:8B:1E:CC:F6:88:70:10:77:D8:70:1F:E9:00:7A:54:AA:6A:84:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa
Signing time:             Wed 20 Nov 2024 17:37:26 +0000
ROA not before:           Wed 20 Nov 2024 17:37:26 +0000
ROA not after:            Tue 18 Feb 2025 17:37:26 +0000
asID:                     14333
IP address blocks:        2602:f793:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:c0:66:e8:ef:01:bf:53:ec:4e:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29dfb106-65b1-4e83-81d9-8b97730bd706
        Validity
            Not Before: Nov 20 17:37:26 2024 GMT
            Not After : Feb 18 17:37:26 2025 GMT
        Subject: CN=7d03ca8a-e700-4354-8394-b1b44e0b434c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:86:02:a6:ff:be:c8:94:9f:bc:24:fd:8d:c5:
                    89:2a:42:49:6d:68:8d:f5:ad:3e:60:da:b6:5f:f8:
                    a7:d7:a3:69:de:da:f8:f8:4f:7d:3d:d5:6b:7e:f4:
                    16:39:b8:a9:a0:f8:b1:28:fa:46:51:d8:ec:ab:85:
                    f1:a7:ae:91:de:1d:d0:81:20:81:40:89:f9:04:55:
                    42:82:05:5e:22:0a:cc:fb:81:c2:61:5b:ef:52:fe:
                    ce:88:28:99:48:30:c3:0a:d3:c3:96:1d:44:c4:0c:
                    6b:cb:5a:07:a1:ea:60:44:70:96:df:94:43:5a:43:
                    8d:78:dd:85:bb:be:fc:f3:68:fa:a0:a4:3b:b4:c8:
                    0b:40:45:0d:7e:21:82:f7:aa:03:09:b5:65:84:4e:
                    51:07:ea:4f:e7:e1:41:bc:16:fd:77:e9:40:a5:fb:
                    44:86:34:6d:1d:df:4a:a4:68:82:fe:c4:cc:06:3f:
                    b4:1e:54:5c:a2:48:cc:0c:76:fe:7d:4c:04:bb:b5:
                    68:e3:80:98:68:b8:f0:71:c2:ad:b2:18:bd:62:a7:
                    b7:b6:2e:69:80:7e:bd:40:8d:58:db:60:f8:b5:61:
                    50:4c:94:78:cf:4b:b8:f9:4a:38:21:36:e8:23:a6:
                    be:c4:d6:d9:54:47:cc:78:25:1a:11:2f:8a:53:f9:
                    a4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:33:AB:DB:CB:BF:35:F3:69:B2:94:26:BD:50:E2:51:70:07:30:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/29dfb106-65b1-4e83-81d9-8b97730bd706.crl

            X509v3 Authority Key Identifier:
                keyid:34:8B:1E:CC:F6:88:70:10:77:D8:70:1F:E9:00:7A:54:AA:6A:84:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f793:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:33:bf:ab:e8:31:bf:d2:05:c5:13:f4:46:de:bc:67:d8:1c:
         ee:20:73:cf:be:3c:aa:8e:fa:27:9d:b4:e8:8a:3f:e3:87:9b:
         f1:76:02:b4:9d:b4:18:39:7c:1c:68:23:09:b6:7a:f7:16:82:
         e8:35:45:40:70:f4:79:78:54:86:96:0b:d5:db:74:21:38:71:
         d9:8f:48:7c:2a:fe:20:50:7f:1d:d9:b5:ac:6b:62:e7:35:de:
         98:18:10:74:d2:15:3b:aa:59:3a:da:24:b4:94:36:b0:94:0b:
         e8:67:10:d2:e7:12:41:8a:84:14:a3:43:27:56:b4:c7:3e:88:
         2d:90:64:3f:fb:1f:01:9f:5e:19:22:cb:3f:b0:08:9d:81:be:
         ee:e9:74:21:ba:42:3b:33:db:4d:7a:2a:86:3c:fd:07:11:3a:
         53:ab:f9:90:22:b2:c8:fc:68:9f:25:31:5d:e1:f0:8a:b0:2f:
         08:db:86:18:9c:d4:13:6d:1d:3c:98:9a:57:ed:93:c3:86:0a:
         40:c0:72:ae:da:bf:49:dc:58:51:bc:8a:81:5e:d5:85:2c:e9:
         3f:0e:98:37:00:26:a5:02:9a:98:e2:e1:7d:2c:9e:0a:a0:e3:
         95:ac:a4:ff:18:30:79:80:d9:04:6b:65:11:8a:1f:ba:ef:05:
         d3:72:73:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:39:44 2025 by rpki-client