Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6aaad683-79f6-35a2-a574-00d76e7571ea.roa
File:                     6aaad683-79f6-35a2-a574-00d76e7571ea.roa (raw, json)
Hash identifier:          d5lRK1MD+xczJMmyZl22AZ1xk4toa2x/N7hjHW0Smzo=
Subject key identifier:   9E:C1:5D:26:54:4C:FE:50:AF:62:DE:9C:32:5F:CB:22:38:76:ED:2C
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858480EA519223CB2A28F9A943A00
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6aaad683-79f6-35a2-a574-00d76e7571ea.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     16696
IP address blocks:        2606:4280::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:19:22:3c:b2:a2:8f:9a:94:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=3212b816-e498-4ab4-8cfb-58e4a9fdc942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4d:48:ff:14:b6:8f:61:a9:74:85:22:8b:58:
                    77:ad:82:76:78:07:ba:d3:f1:c2:92:57:8d:e1:b4:
                    5b:5f:f7:5e:46:8c:7c:38:ec:c5:3a:0a:11:47:d4:
                    80:eb:ef:05:2e:0e:34:60:0f:2b:aa:3a:22:93:ef:
                    02:f2:9c:25:b7:3b:95:e6:8a:e5:e3:44:58:f3:de:
                    ce:08:ea:27:64:07:5f:31:b6:03:57:08:76:c5:bf:
                    6a:08:f7:bd:20:c6:f1:fa:7b:df:5a:83:c4:b7:00:
                    39:04:e5:81:9e:cb:ea:d8:a7:ba:82:80:65:0b:85:
                    d2:2d:c5:8b:70:9c:b7:de:f6:85:d9:05:cf:ac:0b:
                    69:f5:93:0f:a0:d9:64:a1:53:fc:c8:e2:1b:a4:6f:
                    63:8b:51:f7:3f:b5:ed:3c:0e:97:81:3e:de:09:9a:
                    ea:75:fe:47:88:5f:ff:71:6d:c6:eb:99:64:a2:97:
                    42:67:8d:5f:5b:b5:3c:58:05:17:bf:79:96:36:a3:
                    06:bb:52:bc:42:2d:20:46:f8:55:ee:3e:08:26:00:
                    8d:bc:8b:db:09:34:e9:42:d3:79:d8:f7:63:48:e2:
                    50:2e:c9:2f:0c:3c:d8:5e:9e:fc:e7:8e:d4:c2:42:
                    d8:9b:b9:18:e5:a9:f7:f2:7c:1b:69:b8:fd:57:7c:
                    4e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C1:5D:26:54:4C:FE:50:AF:62:DE:9C:32:5F:CB:22:38:76:ED:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6aaad683-79f6-35a2-a574-00d76e7571ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:75:56:08:62:8b:ee:a8:99:91:89:0b:f8:3c:3b:8f:2f:4e:
         5a:16:8c:fe:b0:09:1b:55:f9:f3:e4:d9:b1:1c:d2:5a:16:fe:
         c7:74:a5:75:a0:88:ed:ca:70:52:d9:9b:2e:2a:66:de:68:87:
         08:a3:51:df:0a:8b:f0:ac:d2:5d:bb:a6:6c:13:15:4d:db:53:
         84:63:29:2c:8f:32:7a:37:6f:59:2e:bd:d6:b8:da:de:37:06:
         16:f5:9e:25:a0:a1:c7:ee:d6:b8:cc:2c:d3:fc:ce:4a:c4:02:
         15:99:8e:2b:08:b1:ef:52:21:8f:2e:45:9f:9f:e1:6a:cc:aa:
         bb:d4:a8:45:91:4b:16:77:ed:ec:75:2b:f0:68:2b:a4:a6:83:
         71:73:20:04:4b:d3:3c:48:e9:30:19:34:d1:f1:e2:0b:ab:06:
         47:19:43:31:e1:1d:91:27:eb:9d:96:0b:61:7c:d7:49:fa:2c:
         46:ad:ad:20:40:10:d6:bf:1a:89:d2:90:e2:e7:32:83:55:00:
         61:e7:90:c0:04:36:ad:b6:1a:9d:7e:73:2a:76:93:84:3a:51:
         30:48:af:43:e6:04:1e:6a:9e:b8:15:aa:5e:05:6b:98:6b:9b:
         aa:6b:e8:05:0d:b7:e8:3d:1d:75:72:1f:82:d6:d6:54:3e:08:
         65:90:c9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:25:52 2025 by rpki-client