Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ba97ddda-59d8-332c-998b-792212c57382.roa
File:                     ba97ddda-59d8-332c-998b-792212c57382.roa (raw, json)
Hash identifier:          yupreCAyBUffcmvlvC4+1k+kF4BGsszsWmbUTvGk9JY=
Subject key identifier:   A1:7C:B5:F7:00:11:44:E4:1C:CA:A2:5B:71:53:67:69:2D:D2:33:D6
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285848037B63E28773E82715DF2D80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ba97ddda-59d8-332c-998b-792212c57382.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11164
IP address blocks:        2001:468:f000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:63:e2:87:73:e8:27:15:df:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=ac675b5b-1855-4b52-809e-7b2265bcfd85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:df:c0:2e:db:51:4e:b2:81:4f:aa:d4:d0:4a:
                    ca:74:2e:0e:10:e5:6b:f8:58:1b:98:ad:c6:be:29:
                    d9:6f:07:32:df:f3:bb:94:6e:9f:31:27:89:a0:45:
                    34:a3:41:01:38:a1:a6:3d:9c:06:a6:dd:cf:0e:c4:
                    64:91:7b:34:df:15:74:89:ed:1d:a5:55:ad:c2:2d:
                    6b:e8:2b:c1:40:9d:a2:a1:f8:d3:52:59:98:99:e6:
                    e6:5b:57:e7:94:47:a3:79:6e:28:1d:56:14:cb:72:
                    53:a8:36:e5:0c:71:03:ce:c8:2a:cc:4e:71:3b:9f:
                    5f:57:79:73:5a:0f:9d:57:69:b0:3e:50:b4:52:57:
                    02:58:99:36:87:0a:02:0e:43:4c:f0:94:fa:97:6d:
                    8f:8f:93:0d:3e:ce:39:15:90:7c:d7:0a:6e:a4:5d:
                    3b:76:ad:ae:b2:f2:99:65:a3:9e:c9:8f:25:7a:88:
                    e8:03:b2:ef:2a:60:9e:8b:1c:fe:aa:8a:5b:1f:b9:
                    1f:8e:58:d3:09:42:c7:b4:e7:c7:ad:0e:a0:eb:11:
                    9b:6e:50:1a:78:7e:04:6d:f4:f4:ae:e6:06:d6:d4:
                    d0:92:26:a6:0a:e5:ee:eb:0d:36:23:c2:a0:59:d5:
                    e0:33:d6:c6:07:64:78:b0:1e:ba:5a:ea:a5:5e:c2:
                    f5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7C:B5:F7:00:11:44:E4:1C:CA:A2:5B:71:53:67:69:2D:D2:33:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ba97ddda-59d8-332c-998b-792212c57382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:12:68:86:c9:c7:e4:e8:da:a2:cf:81:61:53:22:8b:b1:04:
         02:ed:2b:79:32:45:3d:c1:f0:70:32:c7:31:be:a1:df:64:49:
         fa:f6:e8:70:bb:e1:b8:87:74:bd:b1:1c:80:34:f9:ba:26:d5:
         fc:8b:51:79:78:de:99:e7:86:52:a2:1d:e0:6c:5e:79:a9:ac:
         5f:02:bf:04:9d:c9:1f:93:99:0e:03:d9:c5:de:51:dc:ac:ea:
         8e:7c:84:a1:ee:ea:b7:e9:3a:2a:53:a0:4b:23:82:59:84:3c:
         bc:19:89:2c:07:3a:1e:a1:ca:a7:82:b0:24:6d:2c:c2:d5:5d:
         a8:8e:d0:8a:0e:8c:c1:39:dc:e4:52:2e:f4:df:ad:4a:a4:05:
         b4:25:05:3b:42:cf:8c:df:1b:9c:93:ff:eb:66:d9:15:63:ec:
         1d:b9:b7:7e:ba:31:74:94:83:0b:4d:2f:da:e2:d3:ba:55:02:
         12:59:7d:eb:fe:eb:da:46:36:c1:42:24:7e:12:2f:22:80:52:
         03:09:65:e0:02:f9:e8:f3:a7:02:e2:12:1e:31:03:12:f3:96:
         54:f1:bd:eb:66:26:ad:f3:ae:0a:9d:ee:36:cb:1e:21:6e:a9:
         58:ea:87:2b:59:2c:8b:19:61:e6:4e:0a:a1:3c:75:b6:bf:0e:
         dc:65:f8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:49:13 2025 by rpki-client