Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/4a247fb2-d251-39e2-9524-5faafe908f7b.roa
File:                     4a247fb2-d251-39e2-9524-5faafe908f7b.roa (raw, json)
Hash identifier:          gd4Gcpj0l/IrKzQO3h9dwm9UzpO2XdrbIxoXr6G3m/4=
Subject key identifier:   6A:AB:84:E7:85:35:61:6E:7D:10:F9:BA:4D:DA:99:BD:E2:B4:14:39
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285848090FA6BB8824783312563E80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/4a247fb2-d251-39e2-9524-5faafe908f7b.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     62651
IP address blocks:        2604:fc80:2000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:a6:bb:88:24:78:33:12:56:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=adc9f5c8-9056-4bef-bfed-1433612e88e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:62:77:0c:27:51:92:42:fc:62:ef:15:1f:75:
                    c3:9d:03:54:82:a1:be:93:e8:c3:df:e9:d4:4b:ae:
                    12:ee:da:06:3d:a5:37:f8:e4:8c:b3:83:31:b2:19:
                    8a:4e:85:9f:59:5c:30:ed:c7:c4:27:13:cc:2f:67:
                    b3:b7:5d:3e:a2:d4:da:db:54:ae:59:1c:38:1c:2c:
                    08:6d:82:4e:cf:64:72:ea:34:33:fe:fb:dd:cf:2d:
                    b6:18:b4:80:ec:ed:dd:3d:c4:ab:2b:dc:30:b2:4b:
                    02:f8:6a:81:f4:c6:f3:e6:fa:77:40:7e:73:39:c1:
                    eb:f1:56:e7:8e:32:d4:ac:9e:68:24:10:72:3b:7b:
                    c3:40:c8:fe:af:41:4f:c3:17:50:9e:8d:8f:fd:41:
                    1a:98:d2:8a:a5:74:f4:5a:b8:7a:8e:c1:2f:a1:cd:
                    c8:f0:9e:84:77:26:87:be:32:dd:e0:42:8a:75:fe:
                    3f:b1:ff:54:51:a9:7d:04:ad:02:23:25:ca:34:1a:
                    f3:29:eb:0c:4f:d3:bb:45:0c:e5:c0:e5:43:17:05:
                    3c:b6:1b:45:f5:01:6c:3f:cc:77:0f:78:51:ef:15:
                    c2:ad:1d:3d:a9:25:c8:b1:cf:ef:80:1b:a3:30:e1:
                    46:cd:51:96:84:36:8f:a2:05:10:5e:2f:c2:79:dc:
                    bb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AB:84:E7:85:35:61:6E:7D:10:F9:BA:4D:DA:99:BD:E2:B4:14:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/4a247fb2-d251-39e2-9524-5faafe908f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fc80:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:59:17:fe:1b:9a:3f:53:57:b1:98:45:9d:c6:6e:60:76:94:
         f1:f7:d4:9f:41:ff:c0:de:67:aa:51:4d:67:b9:a2:48:14:03:
         2b:91:f0:8e:22:1d:15:28:2e:45:7e:7b:13:78:b0:61:11:0b:
         cf:49:8f:e9:c8:e2:35:f5:98:32:ee:d4:5a:67:88:ea:d8:1c:
         32:bb:5c:be:6b:7c:b9:ab:74:3a:09:66:29:a4:09:15:a3:ff:
         91:1b:01:84:27:78:d2:f5:c7:68:a4:0d:fd:5c:82:0d:ab:be:
         cc:41:39:8e:6c:fb:24:19:c8:5e:fb:7d:41:4e:da:44:c4:49:
         a3:d1:0b:9e:de:1e:02:28:0a:5f:62:0b:d1:4b:12:d9:fe:81:
         79:61:b1:e6:02:56:66:e1:5e:06:ab:b8:83:dd:40:bf:a8:0b:
         cc:a7:c4:ac:26:21:ab:e1:1a:d3:48:4e:b9:1a:af:a8:ac:45:
         bd:5e:cf:5d:7f:ea:32:5b:e7:75:78:25:22:8b:93:0f:b3:6f:
         ad:83:bc:8f:b8:c7:a5:b0:7a:31:c3:b6:61:dc:de:1e:c6:99:
         2b:52:9d:34:f8:39:18:a3:6d:12:dd:ec:d1:81:c8:c0:cf:f2:
         4a:8b:e2:5b:bf:f6:61:14:02:1a:31:0b:e5:96:c0:55:9f:87:
         37:88:2a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:37:26 2025 by rpki-client