Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/70dd74d3-fba5-33e2-b3de-ed44ae36d471.roa
File:                     70dd74d3-fba5-33e2-b3de-ed44ae36d471.roa (raw, json)
Hash identifier:          Hr2ChN/Ywc2qyD0QJDbFDnKvGhcJ3e4+h3RfwHIJ5xg=
Subject key identifier:   AF:8B:FA:98:F7:2F:43:DB:F8:99:51:2D:0A:B2:26:F6:13:B7:36:76
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F43285848186A87D678AA69AA277C8500
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/70dd74d3-fba5-33e2-b3de-ed44ae36d471.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     11873
IP address blocks:        2602:fbdc::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:87:d6:78:aa:69:aa:27:7c:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=0ded5c03-aac7-488e-bfde-86d7f8162d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8e:41:21:10:5f:46:b0:62:f9:b0:74:41:a4:
                    8a:d2:dd:b3:0a:79:50:9b:03:98:3d:5b:9c:d0:1c:
                    d4:52:6c:81:0f:c9:2f:49:06:0b:c2:fc:99:da:8e:
                    c7:d2:95:6d:de:94:ee:a7:83:8a:04:25:40:0d:1d:
                    57:9b:a4:30:56:f2:21:e8:23:35:26:93:d9:9b:4d:
                    1b:84:4b:4d:f4:ce:aa:e0:f6:b8:05:c0:ff:55:24:
                    07:d6:74:37:c9:96:7e:71:0a:16:bf:3d:66:2b:e2:
                    1b:41:37:d7:5c:f7:15:10:71:8f:8e:86:c1:c7:03:
                    28:d1:6c:bb:b7:76:cd:83:4a:2c:d3:22:2c:b5:d5:
                    af:3f:a6:c7:d6:42:5b:8e:5c:0a:36:3f:d6:48:f3:
                    3e:82:0c:21:1e:2f:4c:b5:9c:dd:8e:d0:33:3f:15:
                    64:de:dc:42:65:b2:bb:77:67:af:1f:15:a9:1f:8c:
                    a1:7a:91:ce:1d:3c:64:df:e3:dd:b7:a1:bb:86:e7:
                    da:c4:30:27:ec:19:2f:c9:3e:e8:6a:09:74:59:2a:
                    06:9a:3f:90:79:c9:45:db:96:85:5f:9e:0d:db:c0:
                    c0:c9:7d:4f:77:56:6a:67:4a:c7:f6:18:e2:cf:0f:
                    f8:99:f1:82:e1:0a:97:1b:ce:59:bd:8f:c9:30:f5:
                    f6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8B:FA:98:F7:2F:43:DB:F8:99:51:2D:0A:B2:26:F6:13:B7:36:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/70dd74d3-fba5-33e2-b3de-ed44ae36d471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e9:78:5f:bc:88:e9:0a:c3:4a:a8:42:21:69:0b:c7:e2:77:70:
         30:49:db:bd:fc:d2:d8:9a:b1:9b:6e:24:6f:c9:ab:c0:ee:38:
         40:8d:0c:b6:7b:bd:4b:ea:dc:33:ff:1c:7f:e5:f9:f6:a5:71:
         7f:34:f0:fa:51:65:68:4d:2c:44:65:d8:21:4d:c9:b9:dc:bf:
         c6:00:33:2e:40:e7:7e:e7:d2:f3:78:96:c9:43:a3:3c:e2:07:
         e1:9e:e7:a9:93:82:01:a9:e7:70:a5:1a:45:47:26:06:8b:1f:
         e5:e5:c5:49:98:fc:a6:a3:e8:01:d8:23:c3:24:ce:ce:81:7e:
         a3:b2:f0:f9:9f:e5:b1:35:35:f4:80:54:d7:f6:bb:b5:19:8e:
         5e:2a:39:5a:24:7d:a7:4c:f4:57:c1:54:2e:57:80:3c:73:95:
         ae:ae:93:9d:89:ed:3d:13:31:d4:82:f3:c8:e9:90:a5:be:76:
         e4:ad:9f:ee:a7:a7:38:a4:30:5e:86:e9:bd:32:18:2e:9a:17:
         1c:d5:27:33:a1:2a:b3:13:12:78:8e:41:3d:4a:6e:3a:d6:4e:
         97:5a:86:e4:54:36:c9:da:88:b0:4a:59:cf:53:33:22:26:d7:
         a6:d4:97:5c:c7:3d:10:a7:68:a3:1c:ac:0c:4b:66:ea:2c:01:
         67:bc:52:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:11:20 2025 by rpki-client