Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/25fb142e-ccd0-3668-8fbd-c0120e93f29f.roa
File:                     25fb142e-ccd0-3668-8fbd-c0120e93f29f.roa (raw, json)
Hash identifier:          wb495H/kwI40yQ3e/T8+04GT4P5Sz0QHrB36RFs7XYk=
Subject key identifier:   FC:65:6F:08:C8:D0:BE:9A:DA:81:D8:A9:3B:18:A9:E0:79:1A:27:28
Certificate issuer:       /CN=e102a5ad-786a-444b-bd0b-6bd116f20466
Certificate serial:       010D0C9F43285848021504B4E72F88A8EF609D00
Authority key identifier: 98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/25fb142e-ccd0-3668-8fbd-c0120e93f29f.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     33680
IP address blocks:        2604:9d40:8000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:15:04:b4:e7:2f:88:a8:ef:60:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e102a5ad-786a-444b-bd0b-6bd116f20466
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=e103bf8f-0908-44a5-a46d-c8c1367477cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:34:ce:f4:0d:4a:62:bd:f2:1d:50:6b:37:52:
                    e2:b7:1c:26:87:23:d6:33:e3:c0:c8:5a:01:9e:73:
                    3e:21:7b:fc:f8:91:51:d0:d0:3a:87:1b:f1:14:dd:
                    81:67:fd:c8:be:7f:05:d3:db:08:e7:4c:9a:9f:c5:
                    c2:bd:30:3d:32:4a:b7:20:88:d8:39:43:40:f0:82:
                    ec:a6:fe:c1:f7:fd:97:c3:09:7b:54:bf:ac:be:10:
                    2c:b4:95:e0:74:3c:61:92:7e:1e:eb:8d:77:85:1a:
                    d5:ba:4c:ed:3d:41:3b:ee:07:86:72:62:e6:17:0b:
                    85:7a:bd:b8:58:b3:23:43:a4:4b:b0:89:4b:aa:fc:
                    e0:bb:ff:18:ae:3a:49:9c:a4:9c:1b:50:a6:85:c6:
                    dd:52:76:51:da:11:03:85:43:75:06:f1:90:ba:63:
                    c1:82:cc:59:8c:33:f7:13:09:c0:a5:08:60:b1:2e:
                    62:09:88:7c:60:25:a8:fc:6d:d3:f2:96:03:c0:33:
                    12:61:9e:1f:24:04:4f:98:cb:0d:66:ea:0c:c7:2f:
                    ae:41:a6:bc:79:81:30:1e:42:25:c4:16:81:71:1d:
                    27:af:43:0e:63:68:72:0f:8f:96:69:e0:c1:4c:8e:
                    67:09:a5:76:f7:16:de:da:56:5a:2d:42:30:60:30:
                    09:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:65:6F:08:C8:D0:BE:9A:DA:81:D8:A9:3B:18:A9:E0:79:1A:27:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/25fb142e-ccd0-3668-8fbd-c0120e93f29f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.crl

            X509v3 Authority Key Identifier:
                keyid:98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9d40:8000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:5c:a4:28:93:79:a9:25:3a:dc:72:67:ef:31:63:60:64:5f:
         a3:be:c6:37:60:c6:b4:20:f8:a8:c6:17:a3:db:3c:87:dc:a1:
         74:67:f7:52:c9:3a:68:99:68:6c:89:30:4a:ee:18:3d:3d:6b:
         b8:8b:81:70:6c:47:76:ca:90:7b:63:52:88:81:e9:77:ed:23:
         ad:ee:49:39:8d:af:9f:f8:da:b3:e0:e2:84:ea:d1:e0:dd:82:
         4a:ac:96:03:0a:9a:2f:f6:c5:ca:ec:7a:b3:e0:7a:cf:51:f4:
         4a:6c:06:84:0d:d2:64:20:a9:7f:76:c7:3b:40:d0:45:9a:37:
         46:e1:7c:70:c3:4a:d5:40:73:e0:a1:6f:18:be:4b:b9:52:de:
         9e:75:31:a5:3c:c9:94:ab:a1:6f:1f:76:56:96:76:35:d9:a3:
         1a:93:9f:31:2f:0c:c8:79:f6:7f:59:c2:56:87:da:99:69:92:
         e1:04:20:7b:af:3d:9d:5f:43:51:82:0f:43:af:a2:e4:12:54:
         26:67:d6:e4:25:29:aa:f7:d0:78:31:55:6f:5f:a8:c4:93:73:
         34:91:bc:5d:6b:fa:c8:c1:11:ad:5d:fb:70:f6:27:21:17:ba:
         4d:64:4b:d7:d0:96:26:bc:47:7e:03:46:38:9d:3f:7a:af:eb:
         4e:bf:3a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:00:13 2025 by rpki-client