Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1297402b-8649-37e5-9086-dd794003f319.roa
File:                     1297402b-8649-37e5-9086-dd794003f319.roa (raw, json)
Hash identifier:          T5wMlWBLsVboABPUC/M3WPZw0RX6YGX+8odYORJV71g=
Subject key identifier:   1A:6C:6C:57:F2:B2:E2:DF:BA:A7:BC:B2:37:7F:8E:E6:97:86:B9:4E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9B02066FAEC15DAEEA0700
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1297402b-8649-37e5-9086-dd794003f319.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:43f0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9b:02:06:6f:ae:c1:5d:ae:ea:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=3638c844-cf32-4184-8959-106145e12589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:57:9e:20:14:b5:f9:47:67:ec:ca:9e:e5:3d:
                    35:24:d2:5c:e8:c4:bd:f0:c9:4e:44:7f:be:30:c2:
                    59:99:8e:b5:08:3b:0d:62:d9:42:e4:a4:6f:3f:43:
                    c2:08:91:f4:68:8e:1f:f8:7a:8a:3e:83:ae:49:ae:
                    37:5c:2e:34:7c:01:c7:ce:f0:ee:20:45:3b:b5:d9:
                    cd:bf:a2:be:a8:cb:d7:b1:38:01:10:c1:6e:65:03:
                    87:7a:90:86:02:be:4e:76:d3:a7:0e:b5:ab:f1:4e:
                    c3:f7:d2:62:d2:19:7a:35:b9:24:34:58:93:0d:aa:
                    a1:f6:9d:e4:e2:38:e6:18:c4:4e:d2:d9:4a:9f:ab:
                    8d:12:45:ae:16:f5:89:75:8c:ac:5c:44:98:8a:0b:
                    75:91:8f:6a:fb:86:81:32:3c:8a:5e:f1:4a:ed:9e:
                    7a:ed:f9:b1:ed:1b:18:f9:09:83:57:cd:09:d3:3f:
                    7e:01:78:94:42:aa:9d:15:85:67:17:d6:72:ea:2e:
                    65:af:fd:d8:65:28:9b:dc:63:e6:dc:3f:38:18:55:
                    22:28:d3:63:38:d5:fc:05:06:59:9f:3c:71:dd:df:
                    4b:46:2e:39:89:4a:aa:69:ff:d3:14:20:48:cb:6a:
                    64:11:02:9f:4f:25:ef:2d:c6:19:73:14:3e:24:c7:
                    70:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6C:6C:57:F2:B2:E2:DF:BA:A7:BC:B2:37:7F:8E:E6:97:86:B9:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1297402b-8649-37e5-9086-dd794003f319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:43f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ec:23:aa:02:9e:4d:c2:66:83:c4:70:1c:49:8a:2e:c5:84:
         c9:86:6f:45:3d:da:33:0b:a0:ce:2e:ed:ec:45:c8:b6:0e:9f:
         16:5d:ae:27:9d:fd:84:24:1e:df:fd:92:01:51:69:c4:a5:e7:
         ea:a9:5c:ff:0c:1b:62:40:72:7a:a0:1e:2d:ff:d3:f2:7e:48:
         2f:d2:1c:46:03:1f:49:4e:64:00:d6:22:68:97:71:f9:8e:5f:
         cc:32:ad:3e:78:cb:71:dc:60:db:f9:ad:87:e9:bf:22:04:fa:
         33:25:d0:97:53:b5:a3:4f:62:29:e1:f4:6a:8f:e5:52:db:fc:
         f7:1b:7a:3d:e5:16:8b:0f:d6:a0:64:4c:b4:d2:f0:0e:80:47:
         b8:04:e8:e2:b7:af:b0:60:fd:44:f6:66:14:e0:35:40:da:aa:
         63:c6:82:7b:06:e9:1c:6a:85:41:64:20:42:58:c4:cf:c5:04:
         74:27:24:85:5f:c5:f7:58:77:87:ff:8a:62:81:42:40:18:45:
         50:22:de:80:8f:71:2b:dc:a3:a3:03:6c:7f:a1:0b:31:57:d7:
         71:d5:af:16:45:d7:da:61:f8:29:16:73:be:b2:0e:bd:ff:b3:
         a4:d0:50:0e:d6:27:70:79:ff:9d:00:3b:c9:72:5b:a9:d5:fc:
         84:47:4e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:57:55 2025 by rpki-client