Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/602e6f0b-4f08-3440-b652-c052f5b5663c.roa
File:                     602e6f0b-4f08-3440-b652-c052f5b5663c.roa (raw, json)
Hash identifier:          G/jPIIx3+ZaFXu/UMlh94h/lp4Vn3pck87AgV1U4kGc=
Subject key identifier:   08:45:B7:43:E0:26:0F:02:7E:15:EE:FA:0A:01:19:3B:36:16:A4:F6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B81FDF5D18A0E0AF626CF0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/602e6f0b-4f08-3440-b652-c052f5b5663c.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     577
IP address blocks:        2001:4958:1808::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b8:1f:df:5d:18:a0:e0:af:62:6c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=b4e7a5f7-e306-409f-ad89-61d4723cabf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:88:00:62:ea:a2:49:c4:1f:91:4d:ef:60:
                    49:8f:e6:ab:eb:da:c4:56:02:2f:1b:f3:6e:77:1b:
                    a7:d1:5e:8d:3a:ee:7b:99:71:cf:bb:d3:47:da:1c:
                    73:19:80:8b:e5:c1:2e:ae:bf:a3:ac:5b:43:9e:eb:
                    8a:7a:f0:34:6e:3a:3c:cb:9e:0e:06:ba:02:33:a3:
                    46:92:c8:37:9e:f1:5b:03:d4:dc:c2:55:05:1b:ba:
                    41:7c:3a:7a:e0:4c:3c:50:21:08:d3:32:ea:af:1c:
                    d9:1d:cf:e7:5f:64:dc:b7:98:6b:7b:b8:09:0b:8d:
                    f1:ec:d1:de:2c:ab:f2:ff:16:12:c4:79:36:db:ad:
                    8a:1a:8a:65:79:17:87:bb:6e:6b:22:63:74:95:92:
                    60:c4:b1:e6:bc:a6:90:7a:a3:d7:cc:23:ca:0b:a7:
                    86:9c:d2:cf:42:63:da:f9:f8:25:a7:b5:8f:c8:2b:
                    0a:ac:05:bf:c7:a9:cb:87:97:fe:40:1d:41:71:e3:
                    ac:52:5e:db:f2:39:0a:01:25:d5:e2:2e:f8:92:a5:
                    65:93:b7:43:cc:34:db:13:57:73:fc:59:4e:9e:38:
                    6f:19:9f:db:a4:98:8d:a6:a2:95:6e:9f:66:5b:ce:
                    b5:99:9c:5b:f8:a3:99:2e:b8:24:8c:f1:87:69:e6:
                    c2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:45:B7:43:E0:26:0F:02:7E:15:EE:FA:0A:01:19:3B:36:16:A4:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/602e6f0b-4f08-3440-b652-c052f5b5663c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958:1808::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:9e:bc:97:93:99:87:5b:87:b4:75:ca:77:9b:da:b9:ed:8d:
         2b:6d:e6:17:35:46:76:db:f4:c1:5b:76:8d:f2:70:44:e4:dc:
         7d:f2:6d:3d:00:bd:51:39:9c:b5:87:06:c9:4c:85:79:20:a0:
         83:98:4b:b5:2e:ea:91:64:ea:48:88:2f:bd:a5:62:42:ca:8b:
         bc:b1:c6:bb:4e:0b:5f:29:10:44:35:98:37:56:fd:4b:d1:7f:
         cc:e5:d9:02:62:81:ef:d3:59:b8:09:12:9e:d2:0b:8e:58:51:
         f4:5b:9e:16:79:1c:85:67:c2:74:9a:bb:cb:ba:b0:c4:c1:6a:
         33:6f:89:41:06:67:9f:04:aa:e5:d6:62:78:e0:00:c1:97:8d:
         b7:49:7b:b8:47:e3:af:90:ce:9b:84:66:d4:37:04:22:2b:1f:
         64:fd:12:a7:20:b2:53:7c:bd:1b:dd:62:44:c6:28:32:e9:9d:
         97:f0:6c:88:67:60:e8:55:92:f8:6e:85:04:5d:65:22:f2:91:
         1b:c2:86:49:be:db:a3:25:f8:49:31:4a:b3:a1:15:50:6c:7b:
         67:75:57:8b:60:59:d4:93:72:cc:a0:99:8d:15:8c:b3:dc:97:
         ee:c0:7e:30:1c:1a:c1:70:73:24:6c:ab:d1:6a:2c:3e:82:90:
         df:a0:23:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:54:44 2025 by rpki-client