Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/be8002dd-9cf0-381d-8e61-bf0f66901598.roa
File:                     be8002dd-9cf0-381d-8e61-bf0f66901598.roa (raw, json)
Hash identifier:          kFvFOtQtDHWQhxigW9LE0z/Tr4LrpXwXZvPVN5f8eSM=
Subject key identifier:   64:50:2D:C5:5C:76:85:A3:12:86:69:94:47:D7:2D:5E:B1:8E:01:8E
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584812D52F4082EB70AD726D56D0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/be8002dd-9cf0-381d-8e61-bf0f66901598.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     396955
IP address blocks:        2001:468:c07::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:2f:40:82:eb:70:ad:72:6d:56:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=de585bda-c023-4679-910d-0e466e27385c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:01:ee:45:b6:b1:79:db:68:d0:ba:b9:86:b1:
                    fb:98:e5:58:d3:b1:d2:b9:19:5d:2b:bf:1a:41:b6:
                    fc:a2:9e:80:2a:38:3d:7c:5a:a6:67:1f:4d:6a:0a:
                    85:a1:b1:09:44:ad:ad:92:c6:e8:3a:1c:37:4a:c8:
                    0a:f7:60:5e:42:ad:5b:fd:e1:3e:b9:cf:bf:b7:31:
                    db:52:f8:3e:9e:f4:19:99:ab:17:5d:60:67:fb:89:
                    7c:5e:5c:6b:eb:ed:04:e0:74:ce:9b:51:af:1e:9a:
                    45:76:3e:cd:8f:f2:dd:54:09:2f:28:09:6f:e8:de:
                    d4:3a:51:d2:3c:64:ce:3b:bf:01:41:b4:27:57:a4:
                    2b:5f:65:7d:c6:eb:5e:a7:36:ab:32:f0:b0:bc:37:
                    52:ef:26:cf:da:eb:dd:d6:52:c2:b7:19:91:ca:1a:
                    c0:a4:95:a0:c8:c3:3d:dd:6e:fe:13:8d:23:bb:00:
                    82:11:4c:83:5e:da:f3:79:97:2a:01:1a:e2:2f:a7:
                    98:da:56:fc:b5:52:83:d0:50:c8:b9:48:33:cb:ff:
                    4c:05:9d:34:eb:70:67:15:4c:35:d8:d9:bd:40:65:
                    ba:d1:a8:30:71:0d:bf:d8:b6:b2:fa:2f:a8:8a:6b:
                    e9:7c:43:af:b7:00:c4:52:9d:ad:42:8a:70:d7:8b:
                    81:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:50:2D:C5:5C:76:85:A3:12:86:69:94:47:D7:2D:5E:B1:8E:01:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/be8002dd-9cf0-381d-8e61-bf0f66901598.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:c07::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:9a:48:5c:e0:26:80:82:2e:54:62:bf:e1:f6:8a:7e:c8:9e:
         f9:29:5e:2d:e4:89:b1:f4:b3:4c:ca:75:e2:d7:69:cb:cc:9a:
         b6:48:24:e0:70:33:fa:15:88:c1:f8:48:36:52:98:b3:0a:7f:
         13:3e:5d:1b:36:d8:24:b0:6c:52:33:26:c0:60:c7:0d:54:39:
         26:66:c4:a4:8c:da:5d:8f:d7:46:03:2d:21:23:42:ef:05:f3:
         01:bc:f8:8e:e0:6d:4a:31:7e:23:dd:04:8e:5c:e5:4b:f4:2b:
         14:b1:50:3b:40:7b:e3:82:af:af:15:c4:7e:80:79:d7:8c:95:
         c8:46:7d:00:32:94:3a:52:6b:b0:e2:cd:0c:ff:94:cc:5e:b6:
         80:57:85:6d:c1:88:5c:17:a9:18:4f:f6:4b:bc:2c:3e:7a:89:
         4f:37:54:e2:17:0f:61:7a:65:6a:20:ff:f2:57:8a:ee:4e:6a:
         bf:b1:33:aa:16:b8:52:0c:a2:ee:ee:19:e4:31:ed:db:f3:44:
         c6:2a:7f:26:89:66:96:2b:a4:d5:dc:1b:51:d4:72:18:d8:8e:
         12:aa:91:29:c0:2e:e4:18:e4:8d:4b:77:e0:29:31:b2:73:82:
         88:10:d1:98:ba:f8:be:67:37:19:fd:95:fa:49:e7:75:6e:d3:
         de:fa:03:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:28:24 2025 by rpki-client