Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/cc57eb4c-51e7-3d55-9de4-b57aa6e58a55.roa
File:                     cc57eb4c-51e7-3d55-9de4-b57aa6e58a55.roa (raw, json)
Hash identifier:          gmdvQfBpsAxw/+D5YA34S4QTHfQaYVkRaiC0TYR+Qik=
Subject key identifier:   C0:73:9B:9B:ED:F4:FF:06:D9:93:93:B0:86:42:40:FD:F9:CF:BD:37
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F43285848037A45C3FA9F51DB35F6F880
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/cc57eb4c-51e7-3d55-9de4-b57aa6e58a55.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        2606:3dc0::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:45:c3:fa:9f:51:db:35:f6:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=46077339-62c6-41cd-a4d7-0d6d0fd1cf51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3b:c2:be:93:7f:80:80:7a:ce:04:67:a3:28:
                    b3:3e:d5:7d:dd:5d:55:34:d2:8e:7d:17:f5:50:96:
                    07:92:47:b5:09:e8:fa:f4:db:10:55:1b:b8:1a:57:
                    22:fc:81:cc:60:fb:ed:7d:6c:dd:f6:8b:f3:68:0c:
                    2b:be:c7:cb:12:f2:3f:c4:a4:76:68:25:7f:4e:37:
                    e3:02:e1:2b:79:cc:4b:e8:72:2a:b3:e2:27:b2:10:
                    00:98:c6:e3:64:84:79:96:a4:5f:a1:76:53:f9:44:
                    ca:ac:7b:a0:70:f3:8e:c6:59:92:25:c7:5b:2f:dc:
                    69:03:77:7f:53:3d:cc:c6:14:bb:17:7e:a2:93:b7:
                    b2:35:7a:4e:fb:40:d7:27:ff:72:6a:31:e6:93:43:
                    a2:c2:8c:cb:fc:60:11:59:cb:f3:aa:e5:09:ab:cb:
                    b3:ea:91:f8:75:04:cc:95:b9:9b:30:89:d7:f9:20:
                    00:81:3b:1c:dd:64:c3:5d:76:86:37:6f:eb:25:5e:
                    27:04:7d:c7:c1:e7:7e:63:bc:35:51:5a:57:17:4f:
                    55:07:be:4f:01:e4:d7:2a:20:0c:4b:f1:2c:3e:b5:
                    f3:5c:a4:7c:e6:31:b9:aa:c7:b0:9d:5e:f0:45:94:
                    55:b6:e0:00:6f:82:45:84:fd:39:0d:51:91:b2:93:
                    ba:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:73:9B:9B:ED:F4:FF:06:D9:93:93:B0:86:42:40:FD:F9:CF:BD:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/cc57eb4c-51e7-3d55-9de4-b57aa6e58a55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3dc0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:c5:68:60:21:31:a8:24:cc:02:8b:df:c6:6f:fc:05:03:09:
         03:62:45:57:ec:d0:74:8b:be:aa:50:86:6a:ae:f3:b7:0f:7c:
         8e:b0:f1:ca:ad:55:32:07:87:65:68:88:f4:af:f2:cb:f2:f5:
         1e:9a:0b:32:f9:94:a1:b0:be:c9:4e:74:eb:49:8e:d6:0b:c1:
         32:ae:24:fa:b4:4c:2e:ee:53:a8:3f:fd:12:c2:dc:cc:3c:bd:
         d7:e3:be:fe:fe:44:c5:fb:fc:ae:b3:43:52:18:79:be:ce:b5:
         f0:f9:26:10:a3:29:69:0a:58:63:31:9d:74:a0:0c:d1:cf:f0:
         49:fc:a5:62:7f:2e:b1:50:b4:f0:12:55:40:e6:f8:4f:0a:ea:
         08:0c:b6:86:e6:82:e9:12:2a:8d:e4:61:3c:3d:a0:3d:dd:6f:
         04:c0:d5:de:c0:ba:4d:55:cc:11:91:4d:06:42:10:7f:3e:d1:
         ba:c3:63:a7:6a:a4:e4:a0:70:c3:1d:af:b1:18:3e:36:e8:96:
         19:a8:1f:67:e7:f0:7f:23:47:5a:91:f9:ac:f2:77:e2:6d:f4:
         72:78:b6:c4:1f:c4:0d:47:56:91:42:2f:cf:ac:aa:2a:a1:3d:
         46:67:65:11:f0:a4:93:00:68:03:a4:47:39:0d:c2:88:03:99:
         d0:f6:bc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:34:49 2025 by rpki-client