Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/05d0703b-a8c2-35d6-b441-e90d1aa28c41.roa
File:                     05d0703b-a8c2-35d6-b441-e90d1aa28c41.roa (raw, json)
Hash identifier:          3Kx5DBHD2BqmcGCDyiiBqsLmDZ2g7FECHiV6VP9WMXw=
Subject key identifier:   BB:03:2F:EF:1E:0B:9F:48:8A:94:57:5F:84:56:D9:0A:CE:57:44:8F
Certificate issuer:       /CN=d06d1174-4bf4-465b-9f0b-1091633e6717
Certificate serial:       010D0C9F43285848401FF0C7910D1FEEA4D9D200
Authority key identifier: F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/05d0703b-a8c2-35d6-b441-e90d1aa28c41.roa
Signing time:             Wed 18 Dec 2024 19:22:59 +0000
ROA not before:           Wed 18 Dec 2024 19:22:59 +0000
ROA not after:            Tue 18 Mar 2025 18:22:59 +0000
asID:                     16509
IP address blocks:        2602:fb00:a0::/48 maxlen: 48
                          2602:fb00:a1::/48 maxlen: 48
                          2602:fb00:a2::/48 maxlen: 48
                          2602:fb00:a3::/48 maxlen: 48
                          2602:fb00:a4::/48 maxlen: 48
                          2602:fb00:a5::/48 maxlen: 48
                          2602:fb00:a6::/48 maxlen: 48
                          2602:fb00:a7::/48 maxlen: 48
                          2602:fb00:a8::/48 maxlen: 48
                          2602:fb00:a9::/48 maxlen: 48
                          2602:fb00:aa::/48 maxlen: 48
                          2602:fb00:ab::/48 maxlen: 48
                          2602:fb00:ac::/48 maxlen: 48
                          2602:fb00:ad::/48 maxlen: 48
                          2602:fb00:ae::/48 maxlen: 48
                          2602:fb00:af::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:1f:f0:c7:91:0d:1f:ee:a4:d9:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d06d1174-4bf4-465b-9f0b-1091633e6717
        Validity
            Not Before: Dec 18 19:22:59 2024 GMT
            Not After : Mar 18 18:22:59 2025 GMT
        Subject: CN=7ca44f5b-d058-451c-aa28-85d85d259d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:b6:65:a1:c2:9f:24:fb:d6:35:47:5f:1f:
                    90:c2:7a:e7:a7:92:23:ed:92:b6:9d:98:0e:35:0a:
                    76:cf:f8:ed:af:24:1d:89:dc:f8:d7:57:3a:c2:ce:
                    ab:6f:9a:d6:bb:f7:ce:19:63:c4:54:ec:e4:db:b1:
                    45:0a:50:9b:85:c8:07:e2:ec:80:db:4b:68:ef:89:
                    d3:f3:cb:49:af:ce:83:44:1f:e4:a1:76:d2:74:7a:
                    23:38:99:ad:a6:01:a5:e1:f5:67:6f:1c:ee:24:f3:
                    97:aa:c4:ad:ab:4b:51:11:cf:29:48:ed:d5:e8:0b:
                    bd:60:2b:ae:7d:fd:e8:a5:fd:08:00:b9:30:e9:ff:
                    d9:42:43:19:b1:6e:85:10:22:24:e6:fc:65:95:5c:
                    24:a7:21:b9:5d:97:2a:88:6a:5d:99:c2:10:9c:73:
                    68:ff:50:18:2b:21:80:0d:b5:e5:a3:9c:58:d8:91:
                    de:ef:46:48:64:fa:0b:f6:ec:53:85:a5:55:6d:da:
                    c8:db:08:1c:aa:55:d7:73:d5:70:ec:2a:ad:ca:0f:
                    da:78:3d:71:c0:81:bf:15:34:d5:dc:47:95:72:bc:
                    c0:2a:48:bf:e6:cf:81:bd:99:96:f6:86:fe:cf:00:
                    26:49:90:aa:06:39:dc:56:43:f4:c4:ec:f6:dc:c8:
                    44:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:03:2F:EF:1E:0B:9F:48:8A:94:57:5F:84:56:D9:0A:CE:57:44:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/05d0703b-a8c2-35d6-b441-e90d1aa28c41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl

            X509v3 Authority Key Identifier:
                keyid:F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb00:a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:79:5e:5e:eb:9c:65:9a:f4:a7:50:a5:62:96:34:bb:6c:f9:
         7c:d4:c8:45:d4:67:72:29:15:51:a4:be:80:99:58:64:81:82:
         95:08:54:2f:1e:fc:aa:1e:ec:a8:fa:f5:71:ec:55:49:04:32:
         c5:5d:b4:c6:01:4e:54:f7:22:4b:9d:a2:a4:99:20:2f:37:e6:
         32:21:97:fe:57:7d:c4:ad:07:a1:68:de:33:82:90:5e:d1:a3:
         35:b5:b9:5a:51:66:cc:05:f0:c4:29:c9:7a:bf:cc:d0:f2:15:
         36:7e:b7:35:2f:de:29:14:1b:15:21:a9:6b:25:ec:ab:42:92:
         73:6d:1e:50:fe:75:e7:51:bf:94:ed:20:0e:b5:64:0f:c9:cd:
         15:63:5e:fa:bc:34:a0:6e:b1:ea:e6:a9:98:0d:0b:ab:7c:35:
         5e:b4:7e:6d:75:4a:09:bd:b6:c7:d0:0f:7a:78:7d:26:b6:36:
         45:25:11:32:31:c2:ad:a1:c5:15:b7:98:de:28:5b:62:28:34:
         0d:28:ff:a8:4e:e2:da:85:cb:e4:a7:35:d2:29:1b:dc:bd:c0:
         45:22:6f:73:d7:2c:ed:95:56:31:d7:34:b2:11:47:77:b1:4d:
         4a:c5:5d:a5:77:0e:73:0a:73:64:cc:4a:fd:e9:70:87:ad:50:
         db:55:9e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:43:22 2025 by rpki-client