Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b51fbfd6-2b4e-3028-aad8-eff39da41f02.roa
File:                     b51fbfd6-2b4e-3028-aad8-eff39da41f02.roa (raw, json)
Hash identifier:          sIUwCKQixqL9eUpP1dUKfuO7Hge2wxLyv+39bugdCLY=
Subject key identifier:   92:AF:FC:CE:CA:3F:C9:1B:AC:37:3E:C4:65:5D:EF:16:5C:BA:88:96
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858484C10341D0865C87F46D43A80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b51fbfd6-2b4e-3028-aad8-eff39da41f02.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     2914
IP address blocks:        2001:418:3801::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:34:1d:08:65:c8:7f:46:d4:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=aaf96480-1748-4554-8d7c-6b13383e256d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ef:0d:58:2f:0f:b1:15:90:16:d1:61:8b:76:
                    5b:29:62:fa:e3:8f:e8:de:56:58:a4:7d:41:29:eb:
                    25:4c:72:a9:21:f9:cd:44:56:1e:01:10:84:f9:89:
                    48:0a:97:69:3a:ba:11:1d:e8:80:bb:56:e2:fd:1c:
                    77:1b:94:16:11:3f:d1:51:42:60:ff:c7:2b:56:7b:
                    3d:4c:cb:9c:e0:8b:dc:c0:9b:8c:47:bf:de:58:af:
                    1b:6d:96:aa:42:92:10:30:17:e4:e7:e9:cb:25:f7:
                    d3:27:55:b4:00:01:ed:29:c2:de:00:65:bc:b4:18:
                    f5:ee:cf:40:d7:8f:52:c7:df:d1:a2:25:62:64:25:
                    4f:c1:04:b6:80:b9:3c:8a:fd:c4:aa:8f:cd:44:8a:
                    bc:6b:e9:6f:00:c7:2d:9e:18:dd:74:52:e5:dd:08:
                    2b:1b:c7:bc:ad:c6:13:40:1a:67:cd:59:81:e8:81:
                    77:c9:ad:18:f0:a4:4d:b4:1d:2f:ba:96:af:00:63:
                    a2:b5:b1:1a:d4:1c:7f:83:da:13:eb:b3:27:76:ca:
                    b4:0b:af:ed:45:24:d5:f3:e3:4a:66:f2:90:8a:9b:
                    ab:aa:94:57:ed:1c:f1:b7:ca:d8:d0:51:30:88:56:
                    34:e7:86:7c:3e:a1:e3:67:6b:09:1a:82:c9:82:6c:
                    77:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AF:FC:CE:CA:3F:C9:1B:AC:37:3E:C4:65:5D:EF:16:5C:BA:88:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b51fbfd6-2b4e-3028-aad8-eff39da41f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:3801::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:0e:9f:c6:4a:ca:3a:31:4b:53:2a:67:cb:e9:b7:a4:32:18:
         bb:cd:61:ef:25:bb:14:e1:94:27:ec:3f:bc:72:9b:39:ba:c4:
         10:24:b6:0d:60:7b:06:8a:b9:9b:88:7b:75:37:3a:38:10:01:
         c0:f3:00:19:3d:3f:a4:1e:8f:e4:3e:14:65:39:d4:4d:27:1d:
         52:58:82:16:35:32:d4:db:76:87:0e:10:78:c1:23:33:3f:ff:
         63:8c:4a:3d:a8:38:b3:bc:a6:60:12:1c:71:07:7d:87:75:74:
         68:35:b5:18:b4:b1:77:ce:03:42:ca:be:63:e3:26:9e:62:90:
         09:9c:09:14:7f:9a:94:95:a4:f3:d7:e9:df:fa:4d:b0:bb:29:
         40:8d:ff:f5:42:41:2b:40:5a:da:fd:c2:87:6c:69:58:72:80:
         98:42:5b:05:8b:71:f4:ed:ff:e1:b7:c9:52:7f:fe:8a:ae:b0:
         41:e3:7b:0e:f3:62:80:e7:9a:82:e9:cf:23:03:38:98:2a:1a:
         d8:5a:d6:09:ed:fe:67:94:4b:07:07:9d:8f:86:dd:5f:fe:50:
         14:00:38:fb:0a:31:19:ed:07:a2:cf:dc:b2:17:38:59:20:c1:
         ff:4e:a5:b3:67:8e:18:61:25:33:d0:35:a7:4d:fc:4d:a9:54:
         ae:e5:ae:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:46 2025 by rpki-client