Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa
File:                     7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa (raw, json)
Hash identifier:          m7HcL3A2x6zwQRk3mQSpxM2gYx1DTdBLJpAtbq1hfkw=
Subject key identifier:   F1:9E:8B:D5:7E:53:90:84:08:30:23:25:52:86:58:28:28:80:90:B2
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F432858487A2083FBC0E9F37824923700
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     21949
IP address blocks:        2606:880::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:83:fb:c0:e9:f3:78:24:92:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=c81f356e-5569-4e28-b366-a77a04e19188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ea:0a:2e:23:30:05:18:a7:f7:3b:ca:5c:f2:
                    91:2a:08:8d:33:e8:51:2a:99:59:f1:a1:12:8e:0b:
                    21:4e:b6:65:25:9a:11:ad:6d:1e:32:6f:3c:c0:b1:
                    61:c1:10:c9:73:5b:e7:b9:ea:1d:e3:45:81:f5:ab:
                    27:0e:d3:68:75:1d:fa:ee:2e:e4:46:21:d6:13:7f:
                    dd:97:f2:12:14:36:d0:0c:89:9f:06:4e:26:36:0a:
                    b7:42:f7:eb:9d:4c:d1:82:d9:bd:dd:13:33:16:e6:
                    2f:90:f1:ef:f2:66:87:58:96:b7:8a:57:8e:af:84:
                    d5:b4:55:09:85:8b:d1:86:94:39:0b:6a:95:f7:75:
                    fd:e0:e2:16:cc:57:af:56:fa:41:af:c9:b2:72:9b:
                    3c:1e:93:1a:15:e8:52:e3:8b:8d:6a:12:b3:21:76:
                    58:2d:2c:de:76:bd:c2:26:35:5a:c0:62:b0:ee:4e:
                    5c:e7:35:93:66:21:34:a5:06:b9:d8:92:69:fc:fe:
                    bc:f9:d8:8e:e8:61:e6:78:44:13:5e:5b:05:b4:b6:
                    44:c1:dd:0c:c6:d2:9b:bc:a1:f4:59:59:54:53:21:
                    54:1d:07:d0:c3:e9:99:32:a6:7e:3b:ff:ab:c7:a9:
                    ba:04:07:38:a4:8a:95:ea:1e:81:86:fd:7e:9f:f0:
                    79:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9E:8B:D5:7E:53:90:84:08:30:23:25:52:86:58:28:28:80:90:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ca:1c:69:b0:19:78:87:18:48:6a:cd:ac:12:ff:b0:9f:c9:
         49:0b:e9:95:0e:a6:a5:72:21:ac:09:23:36:f6:87:02:a4:2a:
         79:f2:3f:86:0c:02:15:a4:76:b0:51:e4:68:b6:9d:80:ef:ca:
         ff:de:05:8f:64:98:39:60:55:8a:15:22:5d:b0:d2:b8:fe:9b:
         a1:b2:8d:99:bc:6b:e2:72:0d:e8:a9:82:09:dd:ec:d7:51:a7:
         74:4d:af:b5:a6:d5:2f:b0:13:31:9e:4b:b3:48:1a:4a:b0:f3:
         e7:99:fb:2e:b0:c3:af:f5:14:e0:85:ec:2c:f9:aa:67:3b:a0:
         d8:64:ee:56:8f:62:77:31:d0:3f:78:94:e0:7d:1b:85:d4:24:
         25:52:93:e8:e8:1f:4f:ed:70:04:c2:e6:ae:e7:7f:b4:51:6d:
         9f:44:cc:e6:b5:1f:b0:6e:ce:01:d2:fb:51:d9:27:e7:ce:63:
         be:c7:36:60:f2:a4:83:a8:d6:53:2b:3d:51:55:c9:40:7c:d1:
         06:49:c3:71:76:44:28:de:69:5d:78:29:91:e1:88:43:2a:b3:
         3d:58:ec:9a:8f:78:c6:ed:3c:3b:6c:08:9c:62:87:18:63:5d:
         b2:63:7c:05:e8:5a:be:20:11:23:7e:39:61:11:19:63:ea:50:
         99:c1:57:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:58:22 2025 by rpki-client