Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/82929927-aeae-3a6f-867f-694f2e45a249.roa
File:                     82929927-aeae-3a6f-867f-694f2e45a249.roa (raw, json)
Hash identifier:          3LrLJLrKqPkwoquuGnvwGvNqfl8OI5J2oXLlqws76CM=
Subject key identifier:   C7:3A:4E:70:E3:BA:D0:E1:88:76:51:19:37:39:04:76:2F:83:6E:CB
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F432858481B3FDD6F5564F71FA883A400
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/82929927-aeae-3a6f-867f-694f2e45a249.roa
Signing time:             Thu 05 Dec 2024 14:22:24 +0000
ROA not before:           Thu 05 Dec 2024 14:22:24 +0000
ROA not after:            Wed 05 Mar 2025 14:22:24 +0000
asID:                     62240
IP address blocks:        2604:fc80:3600::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:3f:dd:6f:55:64:f7:1f:a8:83:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Dec  5 14:22:24 2024 GMT
            Not After : Mar  5 14:22:24 2025 GMT
        Subject: CN=470e52f4-2f7e-4b6e-9f6f-df7b4e606f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:15:c7:16:62:b7:d3:f8:50:a5:d3:b2:6b:1e:
                    95:83:64:fb:76:ff:1a:97:18:7b:be:86:b1:ad:5c:
                    b9:85:3d:8a:b7:a2:36:83:46:b5:df:0e:fd:76:56:
                    e8:ed:78:04:7c:ed:5d:44:18:dc:d9:c5:7b:79:39:
                    66:02:b4:48:01:b1:8f:3e:3b:7e:ad:ed:81:6f:5b:
                    24:86:df:d1:ad:e0:97:50:bb:6e:00:af:7d:37:70:
                    1c:e2:6b:6d:79:b2:41:1d:0c:87:15:3b:39:d9:d8:
                    68:0c:b6:99:ed:1f:95:27:6f:1f:41:75:43:8d:d5:
                    17:a0:6d:fe:8f:35:a4:b1:7c:6f:c3:a5:b8:26:aa:
                    8f:69:85:64:ad:f4:27:5c:98:18:90:03:a5:ae:c0:
                    9c:74:4f:bb:d5:6d:d2:f0:be:71:89:14:c1:54:e3:
                    4b:78:2f:60:61:d6:c3:84:26:38:56:50:f1:31:c1:
                    fe:3b:6a:f2:3c:31:a9:a3:f8:20:96:de:ba:c9:0a:
                    3e:70:f8:7b:06:db:a3:f1:4e:01:e7:09:e6:6c:3c:
                    b6:71:ee:b9:6f:55:43:9b:50:41:c6:f3:ca:8c:b4:
                    d5:8d:0c:8c:44:02:6f:29:f7:30:43:d1:bb:eb:bf:
                    bb:6b:72:57:96:8e:a9:fa:12:f2:a4:8e:fb:ef:f1:
                    c1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3A:4E:70:E3:BA:D0:E1:88:76:51:19:37:39:04:76:2F:83:6E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/82929927-aeae-3a6f-867f-694f2e45a249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fc80:3600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:3f:14:bb:6e:34:ce:69:6f:fe:04:6c:b8:2e:c7:23:23:bd:
         fe:3d:41:f7:6f:4d:50:c6:14:c2:1d:8e:9c:49:04:41:96:a3:
         51:03:d0:6d:be:eb:e5:11:3c:4c:50:70:38:58:9f:8c:2c:9f:
         38:fa:4b:d3:db:b0:2f:3a:cd:52:3e:41:57:a8:f3:91:49:0e:
         2e:a7:da:61:01:d2:8e:4d:0f:0f:79:15:f1:cb:d5:2e:87:f3:
         4e:99:c5:58:96:39:8e:b0:2b:40:aa:1c:dc:35:a1:1b:87:65:
         9f:67:3c:9d:78:50:49:6f:24:ef:76:f0:e0:85:30:4c:d9:91:
         b4:96:fc:7a:87:7f:97:eb:01:cc:b8:bf:34:a2:ac:24:f3:7d:
         30:9a:1c:1e:41:df:44:18:e0:12:1c:ee:8a:20:c1:85:b7:4d:
         e6:98:88:05:ae:c0:56:1e:68:8f:ad:ab:a1:e3:8a:c6:64:08:
         b7:12:1d:bc:09:9c:88:2e:8d:38:8a:7c:25:3c:12:fa:10:40:
         26:0b:84:07:22:a1:2c:a0:7c:93:85:28:40:16:dd:16:4b:e4:
         20:77:9d:a8:ad:29:a6:4c:b9:e2:6e:1d:cc:98:48:c4:88:d8:
         68:9d:c0:80:87:08:79:66:e6:f1:c4:08:65:28:42:f2:ec:80:
         fd:d3:a5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:16 2025 by rpki-client