Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/06cf7f0e-bd5f-31d3-8ef4-8a76bdca230c.roa
File:                     06cf7f0e-bd5f-31d3-8ef4-8a76bdca230c.roa (raw, json)
Hash identifier:          NG0UwyIl9WiXDM0ephgWJEuF0Qi/FWDkjcW0ynlp4NI=
Subject key identifier:   55:A7:12:F8:AA:FB:77:6B:9A:F8:E0:ED:70:DE:29:75:A2:D0:B0:D1
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584832F0361F9921552880502080
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/06cf7f0e-bd5f-31d3-8ef4-8a76bdca230c.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     206216
IP address blocks:        2602:fb54:400::/40 maxlen: 40
                          2602:fb54:500::/40 maxlen: 40
                          2602:fb54:600::/40 maxlen: 40
                          2602:fb54:700::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:36:1f:99:21:55:28:80:50:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=decddd82-be3e-4039-8987-fe157f1fea0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0d:3d:cf:31:d3:b4:85:0e:b4:d7:c2:82:39:
                    d6:f6:f6:a7:8f:89:c4:f4:9f:f9:9a:d3:f5:5d:cd:
                    59:f2:51:bf:19:b4:20:36:f4:cc:aa:74:94:db:af:
                    62:91:c4:3a:0e:22:e4:ab:68:a8:b3:fa:df:08:ba:
                    37:a3:fd:4a:d3:62:5a:6e:21:8e:6a:fd:51:6a:09:
                    b1:e9:6b:78:49:ce:74:8f:19:d0:4b:4a:e6:cd:aa:
                    9d:f0:b3:8b:cb:e8:72:71:71:ba:71:f2:3a:86:22:
                    db:14:d7:40:ac:b9:42:c7:8a:fe:c5:cc:fe:9d:81:
                    20:f6:5c:d9:b1:80:be:68:74:6b:08:94:de:27:48:
                    90:50:fd:ce:9d:c5:4e:b4:82:1b:77:40:be:38:6e:
                    74:f7:7e:17:94:17:bb:fb:5c:92:fb:97:44:3c:3d:
                    56:b0:70:cb:ca:c7:b5:e3:b0:64:51:b8:70:f4:4d:
                    5b:67:50:44:7d:2e:57:34:9f:75:20:10:1e:ad:27:
                    7e:41:bb:75:8c:ae:bd:12:21:e4:3c:05:02:42:9b:
                    47:d5:47:d3:ba:59:8f:77:b2:af:dc:98:e5:84:da:
                    98:1e:64:95:e5:c8:b7:6d:19:78:61:a1:74:22:92:
                    49:2a:15:a6:a7:d2:e8:52:52:22:df:18:ca:34:30:
                    f7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A7:12:F8:AA:FB:77:6B:9A:F8:E0:ED:70:DE:29:75:A2:D0:B0:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/06cf7f0e-bd5f-31d3-8ef4-8a76bdca230c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:38:d7:4d:64:9d:4a:f3:4c:10:80:d7:96:c0:a3:23:c9:78:
         f7:aa:d9:12:5e:ee:a6:fb:3e:df:e5:e2:e1:1c:a0:c5:0d:53:
         33:82:e6:d6:59:a1:67:6f:dc:1f:60:9a:72:5b:e0:84:e4:67:
         6e:a5:0c:3a:a8:db:7f:ee:31:f4:09:ae:d9:8a:6d:56:9d:94:
         9f:b7:2b:97:ac:b4:8d:f5:44:a9:63:60:d1:0d:00:dc:8a:68:
         35:82:65:f5:b8:b1:b2:a2:2a:ce:93:4d:0d:30:8f:58:53:b9:
         f9:fa:ea:4d:c8:6a:c1:4b:cd:89:9c:3b:80:59:ba:c0:5e:40:
         80:e4:fe:9b:dd:d2:33:b2:1f:b0:70:49:70:58:3f:89:aa:c4:
         99:72:36:8b:d0:35:8d:02:16:86:01:8e:e0:e4:67:e1:3a:88:
         8f:78:75:a6:23:de:db:64:28:4f:e9:9c:61:a7:ca:0a:ab:81:
         21:58:57:10:b8:b0:d9:36:bb:e4:a9:2f:32:3a:e9:f7:b6:71:
         1a:a8:dd:88:63:a8:fd:42:08:e7:71:37:3f:ad:05:53:e4:b3:
         b4:2b:18:81:28:d3:23:a2:ca:4f:58:60:04:ea:9a:0e:74:63:
         2c:0c:1b:27:4b:be:3c:41:01:be:7f:38:3b:85:10:b6:42:55:
         72:c0:82:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:47 2025 by rpki-client