Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cb2488e8-3a71-39cf-a957-c90cfee1b82e.roa
File:                     cb2488e8-3a71-39cf-a957-c90cfee1b82e.roa (raw, json)
Hash identifier:          GKfnsr4VBkQJWMo6i7RDI7ARpo1Dg7Rwy3HmG4Wbna4=
Subject key identifier:   E8:D6:FE:EB:0D:0D:85:75:05:F7:EE:73:EB:A0:FD:DA:8B:7C:2A:18
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9B0AE774E49151384E4080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cb2488e8-3a71-39cf-a957-c90cfee1b82e.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5750::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9b:0a:e7:74:e4:91:51:38:4e:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=c7b8b2f4-85e8-4bbf-8410-ec3f85245ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:9e:31:f5:94:7b:38:28:61:73:0f:18:f7:
                    73:4f:c6:53:89:40:8a:43:a0:0e:ac:be:8a:2a:c0:
                    91:e0:a0:cb:e6:a7:a9:1a:67:ca:21:eb:ef:78:25:
                    de:af:ef:31:10:b6:aa:a8:4e:9b:ca:d3:16:5e:8f:
                    43:88:0c:8f:75:88:6b:8b:b1:fe:6f:09:9f:0c:44:
                    15:21:cf:22:b6:78:59:9c:14:9e:de:20:ef:cb:6a:
                    fd:f9:b8:a7:2a:ab:a3:d8:84:16:bb:b7:37:a9:de:
                    35:97:85:85:2e:1f:6b:1c:52:82:f6:e3:d1:9a:02:
                    ae:b6:9f:f0:4e:ec:46:1a:11:da:20:fd:d3:a5:0d:
                    f0:0a:b1:e6:57:8a:3e:9d:c9:8f:4b:35:91:03:9a:
                    d2:33:8d:03:3e:19:74:cf:2f:98:4e:41:cd:2b:8f:
                    cd:4d:11:ae:63:4b:5d:a9:a8:c1:6a:27:e2:5b:16:
                    9d:d7:46:26:0a:ef:0c:f4:99:6b:45:06:2f:15:82:
                    d3:21:85:83:44:87:ee:67:48:41:37:be:5d:9d:31:
                    7f:ea:22:d7:eb:0e:70:52:60:00:1b:70:1f:5c:4c:
                    0a:30:f6:ad:fa:45:b9:b5:49:68:4c:e6:e6:58:fe:
                    e9:e9:be:5e:3c:aa:09:6f:a4:90:6a:0d:03:3b:5e:
                    51:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D6:FE:EB:0D:0D:85:75:05:F7:EE:73:EB:A0:FD:DA:8B:7C:2A:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cb2488e8-3a71-39cf-a957-c90cfee1b82e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5750::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:52:1d:bc:e7:82:07:62:63:a6:d0:28:49:23:92:5a:28:48:
         a6:48:c8:da:c6:a8:a6:1e:9e:6f:79:91:ff:9c:fd:f7:f0:20:
         42:b7:03:66:1a:e2:10:55:2a:16:f8:17:99:81:82:66:66:8c:
         89:4a:2a:bc:11:28:d7:a4:c3:52:61:e3:37:4a:30:24:3e:dc:
         a7:3c:b3:34:d5:a1:31:46:c4:5e:a6:a5:20:f9:91:ab:96:96:
         ab:0c:e8:e8:03:3a:cb:29:80:a3:be:07:37:e8:d1:05:db:52:
         cf:cc:7a:fe:e4:5a:52:c9:ce:78:5a:a7:7f:66:2c:05:ae:02:
         d1:04:3c:25:7e:a9:2f:49:cb:4f:58:ab:8d:fc:1d:5f:05:41:
         ac:61:3d:21:5e:80:97:86:c8:2f:20:30:4e:4e:1e:a0:f5:e2:
         74:32:f6:4d:ea:76:bf:42:43:67:95:d4:2e:42:e3:2a:96:b1:
         35:c5:2b:7d:f1:26:6d:a4:01:7f:8f:a3:cf:7d:ae:0f:1b:d6:
         0a:37:66:68:7f:e7:84:a4:da:6d:19:7a:a5:27:40:c0:b6:84:
         d0:86:21:f5:d6:a3:12:37:04:28:17:36:dd:0e:29:74:a5:d1:
         bd:7a:1a:8d:28:a9:dc:bb:b9:85:44:01:61:8e:f3:6d:3f:04:
         01:3e:66:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:23:07 2025 by rpki-client