Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9897e08e-3b07-3795-b18d-a3a81becf2a1.roa
File:                     9897e08e-3b07-3795-b18d-a3a81becf2a1.roa (raw, json)
Hash identifier:          zbSNXPaa/EUHNpvf4aOnXlUoh7m/8Ywrt8tE3zwaQ3U=
Subject key identifier:   08:3A:CF:23:CB:B7:ED:08:08:A1:4E:B7:A9:03:89:9F:61:14:6B:3E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9AF53ECF371416AB998320
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9897e08e-3b07-3795-b18d-a3a81becf2a1.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:43a0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:f5:3e:cf:37:14:16:ab:99:83:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=1b683689-727b-4326-b3a8-e76cad97ba87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0a:6b:e8:ee:ac:ff:2b:b0:ce:61:1f:f9:5b:
                    78:f0:78:50:e6:ae:25:41:b0:95:ae:46:e3:e0:7d:
                    7b:3c:c5:75:ca:85:9a:34:d7:be:75:42:2d:f1:4b:
                    1a:ae:fb:f0:88:f7:b1:af:67:a7:bd:e3:55:b1:1b:
                    80:80:f4:17:e8:13:40:a9:2d:c4:a3:61:3c:cf:cd:
                    9e:0c:bd:d8:29:09:6d:ef:3e:d2:17:27:53:45:5e:
                    b6:8c:83:fd:ff:57:6b:37:c4:5e:01:c9:59:ef:81:
                    2e:1e:f8:b8:f8:98:20:f7:88:83:a1:0a:94:85:aa:
                    84:c5:31:74:4e:0c:ab:a8:25:28:76:63:78:91:49:
                    0c:2f:b1:d4:75:38:39:03:87:00:e5:74:7e:c7:c8:
                    45:e8:82:97:26:43:28:1d:db:23:a7:63:1e:16:99:
                    9b:79:88:86:78:32:f8:61:47:7b:db:03:0b:27:8e:
                    2a:29:e4:db:b4:c3:88:6e:95:a6:b3:7f:26:a5:d7:
                    29:7b:35:c8:48:41:8a:9f:8d:4e:64:38:4a:1e:4c:
                    58:15:34:c5:12:4d:7c:80:7b:75:55:42:68:52:34:
                    55:4f:9b:05:6f:69:90:bd:cd:65:94:26:8e:c7:b8:
                    46:17:b3:1e:e2:a3:08:44:b1:b5:51:95:ca:5c:c6:
                    a3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3A:CF:23:CB:B7:ED:08:08:A1:4E:B7:A9:03:89:9F:61:14:6B:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9897e08e-3b07-3795-b18d-a3a81becf2a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:43a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:fc:d3:b7:2b:5e:45:05:0e:d0:27:c6:68:42:2c:ae:c0:bf:
         73:24:2d:33:d5:b5:46:8c:e1:64:92:79:30:35:7f:5b:33:a3:
         11:ac:2c:5c:0c:11:ba:86:44:32:5a:54:c2:65:8f:fb:51:dc:
         4c:a3:88:8d:de:d4:af:3f:93:ac:d5:de:de:64:9a:0e:ff:de:
         9c:d0:a7:95:ce:b9:d8:c1:ab:91:1b:0b:57:d1:04:30:34:76:
         c4:0c:8f:fb:b8:5b:ad:05:f7:18:2a:c2:54:4e:ef:c0:ac:41:
         79:a4:0b:54:b4:a3:02:6e:f5:3a:c7:36:35:0c:fc:97:7b:b6:
         6d:61:99:e6:1e:f8:bd:6d:97:92:d1:97:6d:c4:ea:07:2f:28:
         57:b5:da:ae:f1:17:32:c8:77:18:43:b5:63:ea:0c:3e:52:65:
         67:39:59:de:48:bc:01:f3:5f:13:11:cf:bc:8c:ca:6f:88:2b:
         73:02:e8:24:ca:43:13:16:0a:3e:b6:b9:47:4a:4c:15:8e:01:
         61:70:f0:22:3c:ea:e5:19:41:b6:0e:2c:8d:38:06:6c:08:57:
         e1:01:46:09:2d:24:1f:cb:73:09:c7:1e:2f:c6:1e:08:6d:3c:
         71:71:26:1c:06:d5:c2:0a:e6:96:09:b4:c8:dd:87:84:19:87:
         81:3c:47:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:52:41 2025 by rpki-client