Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba507904-601f-3c1d-8158-f5c297c1052e.roa
File:                     ba507904-601f-3c1d-8158-f5c297c1052e.roa (raw, json)
Hash identifier:          DtShHiLa6GiKz3obVW7qigB5rYxNubfjXMl7/1h+zlM=
Subject key identifier:   3B:18:A6:B4:72:97:08:01:93:20:2D:AC:A0:C2:C3:83:C2:9B:5B:28
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285848388554A7457857F2177BC980
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba507904-601f-3c1d-8158-f5c297c1052e.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     1225
IP address blocks:        2001:418:7:4::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:54:a7:45:78:57:f2:17:7b:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=6e089ed6-d6f9-4c38-a49a-90370fbd7281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e1:67:d6:d6:a0:51:5d:ae:50:b8:b1:11:8d:
                    83:95:3a:b9:e7:1a:b8:a8:73:b9:1e:bb:43:7e:d4:
                    43:5c:ab:fe:b7:c0:62:fd:ec:5b:ae:54:f2:19:2a:
                    0f:0d:c0:0d:b4:49:d8:7f:41:22:1f:ec:26:f4:4e:
                    71:b3:34:29:9b:d6:56:f0:15:3d:62:32:c7:12:0e:
                    1a:e9:9f:a7:f0:12:ac:59:56:fd:35:e9:a9:f9:98:
                    5e:40:fc:fe:b5:aa:9c:d7:f4:25:64:50:3b:f0:bd:
                    a6:b2:0b:5d:a4:fe:d5:d2:20:3a:ba:29:ae:8d:b9:
                    ec:91:f3:be:7d:58:e2:40:56:55:79:c5:62:66:57:
                    57:bf:c7:46:fd:0e:66:c1:3b:81:72:d1:6c:18:78:
                    f4:bf:89:8d:32:3c:c0:c3:14:f4:21:60:0d:33:9b:
                    d9:39:e9:f2:5d:50:7b:22:20:c4:d1:8e:d8:e9:55:
                    4a:e5:0a:e6:50:5c:b3:dc:84:f6:f6:0e:5d:58:c8:
                    67:0b:4c:03:ac:76:82:7e:7f:6c:9e:50:62:c2:bf:
                    e0:b7:e8:38:89:d2:e6:43:a2:2d:83:03:1f:ca:7a:
                    b7:58:ca:40:cd:3f:4e:dd:6e:ba:98:9c:75:af:4a:
                    f3:1b:fd:08:8e:2a:ba:2f:5b:cd:02:10:bc:36:41:
                    dc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:18:A6:B4:72:97:08:01:93:20:2D:AC:A0:C2:C3:83:C2:9B:5B:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba507904-601f-3c1d-8158-f5c297c1052e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:7:4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:5c:2b:05:77:fd:22:40:ca:9e:3e:94:9e:fc:78:a5:19:4d:
         5d:f2:02:29:23:60:cb:86:06:c1:ec:b3:e8:96:f2:0f:2c:1f:
         f7:29:63:88:29:f6:59:9f:6f:50:5e:d1:1b:d3:04:cd:98:a0:
         ac:06:11:6e:2b:46:95:76:ed:95:62:0e:af:04:ae:90:3c:27:
         b8:90:e3:b5:8e:e7:e3:83:4b:75:b6:4c:51:cf:ad:c0:78:a9:
         0f:eb:19:0f:74:2c:36:d0:5b:ef:71:3f:0b:ac:6f:f0:70:b2:
         24:ed:35:32:da:04:ac:69:2a:54:99:42:cb:b3:3d:75:ac:5f:
         96:61:63:a1:80:4b:ad:76:98:26:be:06:27:42:a2:df:dd:d8:
         59:12:f9:c2:0a:49:74:cd:97:e8:f6:30:24:16:a5:17:b2:df:
         6d:53:bd:32:ce:2b:98:ef:ec:9c:3b:1c:c7:9a:4a:ba:2d:7a:
         13:aa:8f:4e:f1:c7:8b:16:dd:be:ed:23:4f:71:2a:0c:de:b0:
         b6:e6:1d:77:51:af:8c:0a:5e:2d:4f:41:79:fc:7e:51:ce:9e:
         a8:81:31:51:2f:7d:f1:6e:d7:68:3b:be:ad:0b:9c:d1:7e:03:
         80:19:c8:5d:58:c1:7b:c0:05:9f:d4:00:30:2d:07:de:f2:8d:
         75:8f:8c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:08:47 2025 by rpki-client