Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/6a093ec8-9aed-3637-8024-8dac0b00cfbd.roa
File:                     6a093ec8-9aed-3637-8024-8dac0b00cfbd.roa (raw, json)
Hash identifier:          z44vBhtmoNvbo8UCJBw81F9IcXB9KIWxVOsmxl40qx0=
Subject key identifier:   73:E0:8F:91:55:93:14:D0:F5:DD:5B:B5:E0:1D:FE:C4:77:B2:8B:28
Certificate issuer:       /CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
Certificate serial:       010D0C9F43285847FDE4CDA25FE90BC0E8E06760
Authority key identifier: 40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/6a093ec8-9aed-3637-8024-8dac0b00cfbd.roa
Signing time:             Mon 25 Nov 2024 02:00:28 +0000
ROA not before:           Mon 25 Nov 2024 02:00:28 +0000
ROA not after:            Sun 23 Feb 2025 02:00:28 +0000
asID:                     42615
IP address blocks:        2602:fafb::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:e4:cd:a2:5f:e9:0b:c0:e8:e0:67:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
        Validity
            Not Before: Nov 25 02:00:28 2024 GMT
            Not After : Feb 23 02:00:28 2025 GMT
        Subject: CN=2ceeb32b-30f8-4b76-a824-608c49f07fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:af:1b:f4:a5:b4:78:35:7b:6a:a5:53:e6:82:
                    27:3b:bd:b3:8e:9f:13:27:a7:4b:51:ad:71:ef:a2:
                    62:23:ce:a0:8c:1a:af:94:21:9a:0a:4d:76:f8:63:
                    d2:95:dc:d2:4c:3f:a4:6b:a8:6b:b9:32:7d:c7:43:
                    41:e7:35:18:4d:d8:ce:e3:80:e6:84:64:15:05:30:
                    6b:29:c7:d0:7a:1f:e4:6a:68:88:7d:82:19:19:3e:
                    cc:dd:b1:65:ca:0b:75:e5:f5:0f:69:85:8f:36:96:
                    3f:d0:c7:5a:f9:8e:c6:44:ca:3e:1b:d1:b8:17:3c:
                    92:57:2d:d3:0f:d3:e8:7b:44:47:16:d7:69:da:0a:
                    a1:b0:65:ab:03:6e:89:05:99:0b:d8:da:35:ad:4a:
                    01:7c:03:64:19:0f:59:98:0c:3d:3a:4f:d2:c8:d7:
                    e2:98:b4:c3:6b:91:72:7f:85:db:eb:91:94:4a:80:
                    02:cd:10:bc:58:a8:79:8a:4e:2d:f1:aa:ab:72:77:
                    60:49:e4:f8:1b:a3:01:6c:7b:11:1e:eb:ba:de:e4:
                    cb:1b:da:44:cd:84:2b:22:7b:bc:67:01:0b:63:e6:
                    76:f0:38:70:48:96:cb:13:13:41:e4:58:fb:4a:58:
                    f0:6d:a5:41:fe:85:8b:ab:0c:63:6a:6e:00:5e:16:
                    b4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E0:8F:91:55:93:14:D0:F5:DD:5B:B5:E0:1D:FE:C4:77:B2:8B:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/6a093ec8-9aed-3637-8024-8dac0b00cfbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl

            X509v3 Authority Key Identifier:
                keyid:40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ba:2a:fd:08:53:9d:f5:7b:98:b6:c6:98:6f:51:00:69:82:
         0a:7b:8f:4a:54:f5:c6:1c:56:4b:14:b4:58:91:46:a9:1d:bd:
         6a:43:9c:ed:bf:18:85:3f:02:f8:5f:29:04:f0:0f:42:bd:43:
         45:03:9e:bf:b0:f7:91:c4:e0:d3:ff:46:37:93:26:c1:02:03:
         00:61:1f:e3:3c:08:dc:19:76:45:42:5b:3c:ac:2a:bb:44:00:
         76:65:4c:81:e8:e2:84:e9:25:3a:8d:08:49:16:ac:0d:d3:f0:
         6e:74:32:46:60:27:3d:7a:16:5d:dc:92:5b:1f:1e:24:fe:4b:
         58:3c:24:37:78:1f:48:ff:3b:9a:f9:ac:5e:52:2f:5a:69:72:
         04:18:59:a1:ab:f7:ce:0f:d4:19:dd:50:a9:32:24:6d:45:66:
         0b:85:52:ca:20:26:29:e5:ca:32:6b:56:74:9d:56:5a:d0:f6:
         35:8c:fe:00:dc:28:bf:df:dd:e2:78:19:37:0c:5d:ff:f5:1c:
         dc:53:19:dc:45:c8:62:09:e6:9c:9e:49:43:c8:11:07:3e:d2:
         03:3e:c8:f4:ab:45:19:5a:3f:e4:29:fa:e1:7f:ee:89:b9:d7:
         5f:87:64:42:c9:f5:4e:0d:0b:32:51:4c:b5:a6:1e:04:21:fb:
         d0:dd:9c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:24:50 2025 by rpki-client