Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/e8616674-f91f-350d-82cc-d009a5a6c585.roa
File:                     e8616674-f91f-350d-82cc-d009a5a6c585.roa (raw, json)
Hash identifier:          e8H9K9P5UfBMqcy9LxBTAJHDJ3f3rDiGqV/oDA89RAM=
Subject key identifier:   63:6D:73:EB:E8:F2:91:E7:84:CE:62:98:1B:B4:53:F7:91:F4:69:3E
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584869606CC2310C9231929EB8F0
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/e8616674-f91f-350d-82cc-d009a5a6c585.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     216401
IP address blocks:        2602:fb54:240::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:6c:c2:31:0c:92:31:92:9e:b8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=290e3b14-7019-4d63-aa67-d9da9fddb65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:29:9d:71:24:16:49:ba:19:5d:fe:20:d7:8b:
                    9b:04:07:61:f4:7e:ec:d2:51:7d:2b:88:13:b0:45:
                    8e:14:5a:f0:8e:81:6d:8b:db:a1:14:aa:06:6f:56:
                    fb:a5:ca:e1:45:28:0f:b4:4d:f9:1b:de:55:e1:21:
                    6f:8d:33:ae:87:ab:54:42:27:4b:27:fe:2b:ad:f5:
                    b3:a0:f0:82:6e:94:af:39:48:b6:8e:9f:50:28:4b:
                    0a:3d:eb:8b:a3:15:a0:09:23:df:54:f0:12:4e:21:
                    06:fd:dc:7a:91:97:ad:b7:f8:4d:5c:9d:f6:3d:0c:
                    6a:99:01:b0:02:02:aa:9b:ac:cf:71:eb:8d:0c:6f:
                    2d:3e:e2:ba:da:5c:4e:1b:dd:86:1e:a0:03:ff:dc:
                    a1:64:4d:64:0a:76:7a:f0:3a:81:80:b1:67:60:52:
                    8a:a3:0c:83:96:c9:8e:f3:a9:88:ee:04:72:b1:62:
                    74:3d:01:4a:8f:10:dd:cf:83:a8:fb:10:0a:47:8a:
                    d5:69:4c:ee:e6:15:e1:cb:8b:e4:3b:e5:51:d9:d6:
                    38:7d:96:03:33:b3:b9:c5:12:6b:05:dc:f4:b3:ba:
                    bf:fe:c5:f9:a9:55:af:4d:ba:95:df:70:a8:f6:d9:
                    62:13:80:01:90:52:28:e6:82:8f:9b:88:23:ea:6e:
                    c5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6D:73:EB:E8:F2:91:E7:84:CE:62:98:1B:B4:53:F7:91:F4:69:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/e8616674-f91f-350d-82cc-d009a5a6c585.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:240::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:cb:40:40:b8:23:ae:65:7a:3c:b6:71:b8:a5:85:48:05:03:
         b2:68:3a:50:b8:a3:46:e8:c3:ba:21:65:c0:ee:76:1d:a7:12:
         65:2e:1d:57:43:20:e1:49:72:08:c4:f9:a9:56:7c:f2:52:88:
         07:34:c6:e0:1e:ed:00:d6:2a:a0:bf:01:b3:46:3c:41:97:1e:
         c3:fc:fb:f6:f4:78:3d:2b:fc:fb:1d:e9:01:dc:5e:3a:de:a6:
         c7:20:8e:02:19:1f:04:a3:c1:74:4e:78:1d:a7:0e:0a:59:c8:
         3b:80:07:df:51:9a:b4:9a:39:c7:bc:ee:d6:ef:16:b7:c9:85:
         d4:e5:55:35:a8:ae:e2:13:ff:e9:17:e1:4f:83:6a:ad:01:04:
         c2:91:59:c3:9b:55:3e:9f:93:78:c5:27:3b:84:0b:97:35:f9:
         56:22:71:22:89:ff:37:c8:7a:b8:e4:0b:6f:16:b0:76:ab:ee:
         42:cd:de:28:41:25:41:82:1e:fd:a6:5a:ba:13:12:04:75:3f:
         54:2c:11:46:7e:c7:de:8f:95:2b:10:58:36:69:3f:ae:de:36:
         a9:50:30:fb:57:d7:ea:61:05:44:ac:92:88:05:c2:0f:5f:58:
         78:2e:5b:b3:37:19:4b:10:56:a2:71:39:fc:03:41:db:93:d4:
         ce:fc:14:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:37:53 2025 by rpki-client