Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b026a338-2420-3466-9787-79afa7d7ac4c.roa
File:                     b026a338-2420-3466-9787-79afa7d7ac4c.roa (raw, json)
Hash identifier:          ZQUJ7Cz9OQRty+pGJ/Qh08HmvFk4T6ZE6MJ2D4qiRgE=
Subject key identifier:   E4:07:54:6A:1A:70:39:6A:74:08:DF:5C:20:7A:1E:CF:54:49:CC:C2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858483860268BD467A08EF7665340
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b026a338-2420-3466-9787-79afa7d7ac4c.roa
Signing time:             Mon 16 Dec 2024 00:45:53 +0000
ROA not before:           Mon 16 Dec 2024 00:45:53 +0000
ROA not after:            Sat 15 Mar 2025 23:45:53 +0000
asID:                     13335
IP address blocks:        2606:4700:302c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:60:26:8b:d4:67:a0:8e:f7:66:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 16 00:45:53 2024 GMT
            Not After : Mar 15 23:45:53 2025 GMT
        Subject: CN=15e702bc-a676-43c1-9dc0-a8810ad4e1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6b:e4:07:c7:5a:ec:d6:73:b4:4c:b9:17:bc:
                    46:99:90:17:1d:b4:16:9c:5c:87:ff:9e:50:9c:6e:
                    91:5b:54:d5:fc:11:b9:c2:7b:95:9f:72:91:bd:07:
                    4c:b7:11:82:58:7b:f5:0d:6e:68:17:96:d7:2c:e7:
                    37:39:d6:d3:a9:98:b2:75:b5:36:73:ed:8d:1c:74:
                    99:e7:05:76:02:f9:a5:9e:d4:2c:be:76:c9:f5:7e:
                    a6:99:5a:a7:47:44:a3:c9:fd:b3:cd:32:a6:1e:a9:
                    51:b2:80:65:87:af:1d:c8:5a:8f:88:e5:52:69:62:
                    e0:6c:a4:d1:df:e8:52:14:55:48:64:2b:25:fa:0b:
                    8e:38:e3:8c:b1:46:b3:bf:20:7c:80:cb:42:cf:c5:
                    b4:f5:7c:a6:97:12:42:fa:90:5b:35:08:25:ec:62:
                    15:fb:da:d6:a4:e5:42:6f:ae:bd:e7:bc:1d:43:8e:
                    c6:bd:1e:6a:db:8a:9e:a7:cd:8b:5d:d9:8c:e5:fd:
                    02:89:40:4f:49:8c:a2:c3:ec:de:59:d9:94:45:3a:
                    57:53:53:3c:a2:de:a7:72:fc:39:bc:61:92:90:6d:
                    7c:bd:b3:a3:11:62:0b:2d:f9:22:ed:fa:25:85:cd:
                    b5:8a:0f:f7:0a:c0:78:bd:b9:d6:a2:14:3e:04:dd:
                    d3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:07:54:6A:1A:70:39:6A:74:08:DF:5C:20:7A:1E:CF:54:49:CC:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b026a338-2420-3466-9787-79afa7d7ac4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:302c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:91:04:85:ac:6a:83:39:3c:74:10:6e:3b:da:df:7c:ff:cc:
         4f:04:87:d4:ea:76:0b:60:39:8a:3a:5d:6d:93:ed:b4:5f:d9:
         66:7f:18:b7:ff:2d:ea:d6:4e:99:1d:ff:3a:0c:64:9b:ef:59:
         b7:71:aa:fa:2e:50:41:89:3f:1c:ac:cb:3b:1a:d1:49:7c:06:
         55:fe:51:0e:52:67:9a:6a:18:9c:42:b5:01:8a:96:de:86:37:
         d8:2e:45:3e:ab:11:f5:37:aa:41:ae:81:f4:b4:3f:5d:be:3e:
         e4:48:83:b7:ef:c8:44:82:61:5f:2c:69:02:5b:92:dd:e0:58:
         7e:07:32:bd:47:f4:a7:3f:c4:12:70:f3:36:a9:72:58:78:95:
         a8:d6:37:5d:98:4c:72:84:95:b4:11:9d:c8:f6:23:5a:c0:06:
         13:6a:22:a7:69:4d:77:bf:3f:ea:3b:39:95:44:0c:3d:f3:43:
         f9:56:e3:56:46:23:f1:f4:3e:f8:f7:1c:a8:c9:a7:b3:9c:87:
         ef:91:7a:4c:5d:f4:9a:87:ef:d0:d9:a2:57:0d:22:a6:32:64:
         0b:db:f3:41:ce:27:c1:35:ed:f1:38:77:e6:fa:7a:af:d9:4d:
         26:3b:fc:9e:2f:f9:84:35:02:c8:ad:ea:3a:26:96:8b:46:c9:
         7e:f7:64:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:08:19 2025 by rpki-client