Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7eac81a8-5845-3303-a59d-861e9da5df0d.roa
File:                     7eac81a8-5845-3303-a59d-861e9da5df0d.roa (raw, json)
Hash identifier:          naTbwFHHVo+TSKFPhz9gnKKZkj8w6SqAwVB47d3AGKk=
Subject key identifier:   90:7F:62:C8:DA:F8:98:A5:8A:47:8B:20:DE:3A:47:62:4D:2D:91:1E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848389112F2F2D0BA6FAF23B280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7eac81a8-5845-3303-a59d-861e9da5df0d.roa
Signing time:             Mon 16 Dec 2024 02:24:28 +0000
ROA not before:           Mon 16 Dec 2024 02:24:28 +0000
ROA not after:            Sun 16 Mar 2025 01:24:28 +0000
asID:                     13335
IP address blocks:        2606:4700:3116::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:91:12:f2:f2:d0:ba:6f:af:23:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 16 02:24:28 2024 GMT
            Not After : Mar 16 01:24:28 2025 GMT
        Subject: CN=0217582c-79c0-456c-9371-bdd5b1410a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2e:eb:28:4e:8c:d1:d0:0c:d8:63:25:93:e1:
                    85:ec:89:fa:c3:7d:4f:77:24:09:59:25:e9:3b:0b:
                    7c:51:02:97:11:ed:4a:60:3a:45:c3:d8:56:4a:83:
                    33:85:14:83:22:ce:6a:a1:7c:e4:e4:e9:60:db:e7:
                    b2:c5:15:6e:a7:67:26:af:3c:12:54:96:9e:2f:e8:
                    dc:b9:b3:06:c4:fa:86:8d:80:95:7e:65:1f:9f:85:
                    91:27:42:e2:31:6c:e6:e1:7e:62:c3:c5:b4:83:08:
                    c6:3f:b1:73:5f:a0:c9:39:cf:4c:f3:fa:bf:00:e7:
                    f5:7c:86:c1:34:9a:35:8e:bf:bf:7b:9b:44:37:3e:
                    62:f1:9a:d1:3a:b1:72:23:3e:0a:7d:8e:f4:10:e0:
                    d3:7e:98:97:5f:f0:4f:d3:d7:70:e1:34:d5:83:36:
                    e2:57:fa:bf:28:42:f4:de:df:80:50:08:80:ed:1a:
                    d5:54:ee:1e:c6:0e:e1:a3:06:15:d9:df:26:81:22:
                    67:c1:f6:54:92:b1:51:29:b9:f7:85:44:df:40:44:
                    1b:54:ea:3e:40:2b:c0:59:61:4e:0a:4f:90:04:43:
                    b6:21:83:87:8e:77:c8:7e:ae:32:fd:c2:16:21:6c:
                    6b:6d:59:cc:00:f0:4f:9d:0d:6c:16:1b:84:bf:88:
                    aa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7F:62:C8:DA:F8:98:A5:8A:47:8B:20:DE:3A:47:62:4D:2D:91:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7eac81a8-5845-3303-a59d-861e9da5df0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:3116::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:46:32:e8:2a:26:e9:f8:7b:f3:be:48:76:03:d6:e8:b4:25:
         80:1d:07:c8:35:d8:21:f4:f8:ec:aa:33:1e:5c:61:83:f7:00:
         6d:1b:85:49:08:53:bd:33:91:fb:24:67:2c:5f:0e:8a:85:58:
         74:4e:63:4a:35:c4:37:da:39:05:4f:ce:35:87:d4:65:1f:ac:
         7f:eb:6e:1a:b2:a1:bc:9c:2e:71:fd:9b:5b:af:a9:ae:15:5d:
         74:f4:cb:79:7b:80:6e:1f:21:68:91:3e:be:2f:ac:de:ff:32:
         ff:f3:34:c6:25:bd:36:ce:c5:b7:22:36:98:d3:a1:3d:92:30:
         af:09:55:c5:32:f9:ca:5a:1e:18:38:f5:3d:7c:24:9f:70:e7:
         bd:c6:97:c4:18:d5:0b:8f:46:02:a8:84:52:94:62:d1:87:24:
         4b:5d:f9:70:3a:ec:15:35:11:e3:7c:7c:74:22:9f:dd:d3:be:
         f4:b9:b8:1e:de:78:d6:44:28:86:ab:1f:1a:4e:b5:f0:f3:78:
         e0:2b:2c:af:18:02:f8:41:9b:1f:98:74:81:fd:b9:56:6e:3f:
         02:3a:2c:fa:69:bf:bf:0f:bb:e1:32:9e:5b:99:24:a5:2d:29:
         d9:ff:9c:3d:2b:69:25:ef:bc:39:bd:a6:f0:c3:92:fb:ac:c8:
         dd:d8:eb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:05:28 2025 by rpki-client