Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/be4079cf-80e4-3661-a891-3c88869964cd.roa
File:                     be4079cf-80e4-3661-a891-3c88869964cd.roa (raw, json)
Hash identifier:          ve8Oo7BsPVriVzIFhvHJFeLh6/nJ6UbMlmnA0th9W0s=
Subject key identifier:   D0:C7:32:92:32:02:AE:16:C0:D7:5F:31:DB:4D:2B:06:88:AE:8F:1C
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285848A830A950305E3A9F0D21E100
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/be4079cf-80e4-3661-a891-3c88869964cd.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     396955
IP address blocks:        2001:468::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:a9:50:30:5e:3a:9f:0d:21:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=fab27021-fb79-4fc7-88d8-b2d9a215d1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:58:83:8a:d3:56:a1:47:92:f5:53:7a:97:1e:
                    86:96:ce:44:52:d5:96:50:84:f0:3e:54:04:61:16:
                    85:f6:8d:dc:e2:25:d6:53:b4:90:70:e7:48:b2:32:
                    a5:7a:4b:6c:9a:7d:2b:7d:f8:a6:27:a8:30:f6:ae:
                    76:99:94:9e:c6:76:9a:6f:9e:3a:73:53:82:55:e5:
                    9f:8e:6f:4d:e9:73:94:13:be:49:fa:43:a8:c6:76:
                    e6:b7:49:16:6a:dc:14:dc:85:e6:9b:5c:a6:8b:6d:
                    24:e1:65:08:fc:35:a5:3e:67:ca:30:f0:42:4d:08:
                    22:08:a7:71:23:65:c3:2d:99:2d:13:94:88:b9:b0:
                    e1:48:f2:04:80:f0:94:04:ad:65:af:21:2c:69:23:
                    c7:6d:84:86:b5:57:2d:85:5b:0f:f6:d0:f9:f2:bb:
                    43:0d:0e:09:d5:06:3f:9c:68:77:ce:9b:5c:25:00:
                    d9:29:02:0c:dc:35:87:a7:2e:c2:d9:6c:24:66:b8:
                    8d:ed:ab:e8:57:69:f0:7c:9f:49:de:93:b6:ad:12:
                    58:75:7d:a4:ea:c4:c0:f7:93:a5:54:06:f7:d1:68:
                    7e:45:d1:41:c0:24:be:08:ef:5f:30:64:c7:0d:8d:
                    11:41:bc:23:1b:69:72:cd:75:85:5a:ac:16:cd:5b:
                    8a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C7:32:92:32:02:AE:16:C0:D7:5F:31:DB:4D:2B:06:88:AE:8F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/be4079cf-80e4-3661-a891-3c88869964cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:86:3f:87:91:36:98:61:36:4b:3b:9d:3c:73:9d:a6:fb:aa:
         02:d1:46:d4:c9:fd:06:8f:73:3b:55:e5:c8:9e:c3:fb:b6:87:
         ce:d2:1f:5b:35:91:1e:2b:bb:90:16:24:5e:8d:f1:0d:51:64:
         b8:92:b7:65:44:ac:a8:9c:97:15:0d:97:62:3e:59:da:a0:d2:
         ed:1e:5d:bf:a9:96:6a:d3:3e:2a:aa:4f:35:ce:69:97:1f:ad:
         45:46:59:e2:74:8f:45:a2:09:74:3d:ec:af:75:e1:f3:12:07:
         78:30:05:16:28:ac:e9:a1:26:90:ed:d3:b5:03:fb:e7:3e:81:
         3f:58:cb:0d:bd:5c:ed:bf:f2:dd:b6:a7:ac:a7:2e:da:a8:c5:
         8d:02:6f:c8:26:19:a6:3a:8e:e9:1b:a2:e3:ce:35:2b:db:41:
         db:12:33:db:af:79:25:a2:b1:87:58:d3:29:55:81:84:3f:13:
         93:74:58:b0:0f:8d:67:31:a9:0a:4e:ce:fb:8f:c5:ba:bd:ba:
         5f:07:75:c5:79:6b:92:7a:9e:0c:59:cb:e4:c2:68:ad:d9:f6:
         f7:5a:a1:16:17:3b:a6:a4:14:11:38:b8:d7:7c:5e:ea:6f:98:
         bf:3f:5b:71:80:a3:87:96:4d:73:3f:af:3e:12:47:5d:6e:1f:
         b9:83:cf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:21:37 2025 by rpki-client