Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/6ea97c3a-6f34-3e64-8b41-667f0bc14b5a.roa
File:                     6ea97c3a-6f34-3e64-8b41-667f0bc14b5a.roa (raw, json)
Hash identifier:          8hbPunRyU3vcNn38cNbu1O7afILYISDobHUWRLGHsi8=
Subject key identifier:   BB:F8:E2:28:05:1F:DF:1D:F0:03:61:60:6A:F6:CC:67:A5:7F:A2:8C
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F43285848424AD80F9AE32019506A7140
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/6ea97c3a-6f34-3e64-8b41-667f0bc14b5a.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2607:28c0::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:d8:0f:9a:e3:20:19:50:6a:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=d38cd2d3-3698-4205-9425-cbc9b39f346e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0b:4b:fd:a7:78:b1:d2:09:37:37:f7:6f:2c:
                    9a:f2:b1:f2:24:44:77:b1:de:f1:51:d8:2a:76:b8:
                    d4:07:9e:cf:eb:c8:10:86:0f:83:9b:72:e7:bc:ec:
                    fb:81:b2:b7:1c:ea:11:c6:4d:cc:9d:c0:df:71:f0:
                    a2:02:a7:0c:09:d5:5a:c2:67:05:3f:d6:ee:6d:d4:
                    c4:21:72:2e:76:96:6a:d5:9b:d1:28:95:fd:21:09:
                    b9:c4:a0:9a:84:ed:e1:3d:26:c1:9c:a5:d3:35:5a:
                    84:76:cd:de:cb:8e:0e:35:80:06:0b:c2:27:b7:36:
                    5c:77:8d:bf:c0:7c:d6:e4:5b:63:42:59:28:14:ab:
                    64:ec:93:8d:4f:d4:43:35:d3:29:98:f3:bd:c1:22:
                    f3:a9:37:d4:d7:dc:f7:f8:84:09:9c:dc:f2:2c:46:
                    5c:97:b6:1f:6a:04:c5:19:17:0c:67:f9:b7:5f:c0:
                    2c:5b:9e:52:1a:e5:75:3c:ce:d7:b6:be:23:31:7f:
                    b3:4f:b5:ac:21:1e:69:3d:9c:83:6f:d0:ff:72:81:
                    49:4c:8c:1c:95:c7:27:87:c6:9c:90:8c:1c:a7:c1:
                    f4:5d:82:29:7c:9e:86:65:5f:9f:96:a4:68:95:75:
                    94:a5:c4:93:2d:47:aa:4b:d4:09:3f:d2:dd:29:d7:
                    55:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F8:E2:28:05:1F:DF:1D:F0:03:61:60:6A:F6:CC:67:A5:7F:A2:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/6ea97c3a-6f34-3e64-8b41-667f0bc14b5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:28c0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:33:30:4f:5e:5e:bd:cc:32:46:89:a6:fa:c4:7c:a2:1b:28:
         0c:73:df:50:23:7f:5d:3f:da:80:b4:df:aa:b7:df:d4:00:2a:
         00:b6:e5:ce:86:d9:aa:f9:63:38:98:81:8a:7c:de:f4:c2:bc:
         3c:9b:09:6a:87:3f:11:3c:58:b4:1e:1b:48:6b:0e:43:5c:c9:
         1a:05:55:f5:2e:55:70:47:83:04:c0:46:41:9c:b7:31:9e:f8:
         76:ae:e3:44:0a:05:b6:bb:a3:42:57:2a:12:69:5a:2e:25:33:
         66:ac:60:ac:16:be:bb:2c:16:94:79:2b:17:79:4d:4c:0e:86:
         bc:16:02:80:50:ff:52:80:cf:43:1d:df:42:7a:2c:9a:b4:d4:
         c2:58:fc:74:70:3e:da:21:6f:f2:b9:5a:f2:6a:67:34:88:de:
         59:02:99:aa:9f:4e:52:64:8e:28:39:7c:d5:f5:15:e0:9a:b7:
         e6:8a:ce:fc:ab:95:0b:64:31:75:53:cd:9f:b2:7d:9d:39:82:
         fb:d1:40:96:1a:f8:52:b0:d3:d6:cc:c8:df:e2:51:25:97:69:
         a6:0e:67:04:00:76:58:0a:b3:c2:c1:0a:2f:e5:d3:96:d3:5f:
         2c:42:f1:1d:da:f3:9c:c7:1b:22:4b:59:1a:43:a9:05:af:1b:
         c1:a3:29:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:09 2025 by rpki-client