Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46946eb-f29d-4f00-bfbe-49adb9ecc76b/8b3669b0-0542-3f0b-8582-ed23a2b7a4ab.roa
File:                     8b3669b0-0542-3f0b-8582-ed23a2b7a4ab.roa (raw, json)
Hash identifier:          bLEha7nrD8oQqg1ybTCQJJrwHkpuGa8SKvtN51DWxp0=
Subject key identifier:   89:D8:E0:22:1E:70:2F:7D:B3:C9:1A:6F:AB:80:B0:63:0C:24:36:26
Certificate issuer:       /CN=d46946eb-f29d-4f00-bfbe-49adb9ecc76b
Certificate serial:       010D0C9F43285848100A899A70E5C0F14ADC8000
Authority key identifier: A3:C4:57:39:CA:27:F2:06:2E:68:B8:E2:53:57:3C:3A:3E:47:43:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46946eb-f29d-4f00-bfbe-49adb9ecc76b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46946eb-f29d-4f00-bfbe-49adb9ecc76b/8b3669b0-0542-3f0b-8582-ed23a2b7a4ab.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     16509
IP address blocks:        2602:fd40:ca1::/48 maxlen: 48
                          2602:fd40:ca2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:89:9a:70:e5:c0:f1:4a:dc:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46946eb-f29d-4f00-bfbe-49adb9ecc76b
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=11f81fc7-679a-4528-84b2-f7bb7ec53b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:26:a7:11:69:8a:d4:62:aa:98:9d:87:e9:d0:
                    b5:24:18:20:d8:ed:c7:41:05:1f:e5:95:82:32:53:
                    9d:c5:32:54:d8:e4:cc:f6:9e:44:18:84:96:e3:e9:
                    2e:af:e4:67:07:32:9b:f5:24:c7:01:f8:65:5c:c9:
                    56:c8:dc:fb:88:8b:a7:bb:e3:ac:7e:c4:20:bc:34:
                    11:3f:66:d7:d5:de:bb:9a:af:13:65:f8:7d:00:7d:
                    f5:ec:01:7b:09:9d:ba:14:21:35:68:8d:76:a9:55:
                    20:30:75:c1:44:6f:5f:e5:3d:84:63:82:00:45:9d:
                    5a:9c:e7:91:2d:3d:f0:9d:3b:ca:1e:14:9f:a2:76:
                    4c:25:f2:31:ce:ff:fc:45:e0:46:ed:5f:ee:49:b3:
                    1c:dd:96:44:b2:61:09:76:10:93:bb:17:bd:3a:f3:
                    7b:74:05:ac:a3:ab:15:ef:4f:45:c9:ff:ac:67:45:
                    a6:e1:3d:18:06:58:ab:0f:3f:38:e2:7e:fc:12:5f:
                    81:97:4a:45:2b:22:d5:23:13:99:4c:77:e5:94:0f:
                    cd:7f:47:95:fa:75:e3:10:e8:08:7a:b6:4e:7e:2b:
                    5b:e9:0a:8d:86:50:38:b8:e1:6b:4e:cd:2e:de:94:
                    fd:81:82:07:5f:b2:db:c6:05:fd:22:dd:c2:95:7a:
                    9d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D8:E0:22:1E:70:2F:7D:B3:C9:1A:6F:AB:80:B0:63:0C:24:36:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46946eb-f29d-4f00-bfbe-49adb9ecc76b/8b3669b0-0542-3f0b-8582-ed23a2b7a4ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46946eb-f29d-4f00-bfbe-49adb9ecc76b/d46946eb-f29d-4f00-bfbe-49adb9ecc76b.crl

            X509v3 Authority Key Identifier:
                keyid:A3:C4:57:39:CA:27:F2:06:2E:68:B8:E2:53:57:3C:3A:3E:47:43:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46946eb-f29d-4f00-bfbe-49adb9ecc76b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd40:ca1::-2602:fd40:ca2:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f8:af:d0:e0:99:43:6d:1f:ae:8d:0d:5d:17:90:c1:c3:a6:
         79:6d:0f:a8:4d:66:2d:91:95:37:f4:d3:b7:74:8b:2b:d8:e5:
         54:af:36:ec:b7:f9:c5:be:0e:ac:69:a8:6e:20:33:cf:c3:63:
         94:16:60:d8:a9:a1:ad:23:cf:9e:91:14:e2:4b:61:3f:88:bc:
         dc:f0:c1:b6:1c:55:58:0d:ee:93:4c:d7:cc:54:e8:04:6f:d8:
         66:0c:29:33:ef:d4:58:ac:21:6f:ee:1b:1a:b0:70:cd:20:a5:
         c8:eb:e3:a5:2c:3e:aa:49:5a:86:b8:8f:c5:45:34:16:69:63:
         88:6a:c0:55:43:dc:2c:88:55:36:98:0a:d2:50:b0:7b:c5:f5:
         58:d4:af:0e:ff:f6:f5:5c:f9:3e:8d:49:69:1c:57:b5:2b:5c:
         c8:b8:11:9e:25:4f:03:d6:1c:66:ae:4b:f9:0f:81:03:55:ac:
         d0:f2:83:ad:9c:aa:32:5f:c3:ff:a0:77:8f:75:94:dd:65:56:
         ab:25:df:09:bf:ef:c3:05:ba:26:4c:73:22:c7:b4:da:07:01:
         53:32:63:41:9c:ca:43:b2:6a:2a:a9:3c:8c:df:14:6a:07:17:
         13:68:ee:63:f9:be:02:c9:b3:bb:03:e1:42:65:75:fa:f6:bd:
         e6:7f:6b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:13 2025 by rpki-client