Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/6e1bfdd4-6910-383a-a378-bf872efdea0e.roa
File:                     6e1bfdd4-6910-383a-a378-bf872efdea0e.roa (raw, json)
Hash identifier:          KHD3kELw4rS/3iTwnnEdjxT7h6iC0Xm+fx3atgreqQM=
Subject key identifier:   50:54:89:9D:5A:FA:68:46:89:10:91:34:42:72:FE:98:C1:C0:9C:02
Certificate issuer:       /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Certificate serial:       010D0C9F432858483E1AAA83775906A7E3DAE2F0
Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/6e1bfdd4-6910-383a-a378-bf872efdea0e.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     174
IP address blocks:        2604:ebc0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:aa:83:77:59:06:a7:e3:da:e2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=effd09bc-b9bd-4ba6-a7fb-0542c4daea69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:01:f7:da:95:f4:83:73:87:11:e3:40:58:
                    80:6d:20:2f:6c:6b:7f:40:20:27:81:61:b5:de:ed:
                    8b:b4:28:f3:c4:d0:53:5c:0d:40:6e:7d:45:7e:7e:
                    23:0a:ec:cf:52:21:c9:b4:4f:39:22:fe:6c:c3:93:
                    f3:95:e9:24:69:2d:20:a1:f9:f2:35:b3:8b:af:63:
                    61:17:df:f7:0d:c8:9e:81:a3:a4:4f:14:95:2f:93:
                    ce:bf:ec:2e:90:28:05:c2:df:cb:5f:94:71:4b:81:
                    0c:5a:74:ff:bd:4a:11:f5:ff:6d:c1:d4:60:78:ab:
                    84:1a:6a:d9:49:45:fb:74:3a:8b:8a:cd:b3:4a:85:
                    92:78:a6:f3:af:61:38:94:7a:83:53:cc:db:bd:cb:
                    1a:ec:46:8c:12:a7:ec:17:92:92:54:06:cd:93:aa:
                    a3:ff:66:09:01:14:42:23:88:d4:d5:97:67:dd:b9:
                    dc:56:91:d4:15:e2:a5:3c:bc:f6:eb:2e:1f:d0:97:
                    9d:77:9a:91:4b:8e:c4:9c:28:14:b0:a1:99:d5:a8:
                    53:d5:78:09:11:82:12:6c:51:a2:98:20:83:85:2d:
                    30:f8:f5:4c:dd:3c:cb:bb:46:88:20:f9:44:83:d4:
                    67:2c:1c:41:21:b0:63:13:41:c7:c9:e7:4b:72:a9:
                    a9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:54:89:9D:5A:FA:68:46:89:10:91:34:42:72:FE:98:C1:C0:9C:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/6e1bfdd4-6910-383a-a378-bf872efdea0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl

            X509v3 Authority Key Identifier:
                keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ebc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:c0:15:d2:81:50:16:65:4f:aa:a2:09:85:57:52:4c:aa:2f:
         73:97:86:99:a2:13:90:7e:61:85:ff:ac:80:ff:6b:58:e0:a9:
         4f:eb:46:ab:aa:9c:1e:33:a9:dd:8a:f1:a2:b9:d1:c4:8f:20:
         c3:4f:42:5d:d2:46:e1:79:3f:6d:96:1d:55:ff:db:2a:bc:66:
         17:13:46:87:d3:1e:f6:00:77:8e:52:1f:80:8f:70:c7:5a:5a:
         50:15:71:b6:b3:45:9f:3b:48:8d:b4:48:c6:76:96:31:92:6c:
         e9:36:87:41:e0:10:65:23:8f:4e:e5:dd:45:6b:02:74:c0:79:
         ed:b0:55:23:bf:ad:58:7a:13:2c:c2:ff:61:95:cc:f2:38:52:
         6a:3c:e1:e8:92:f5:4e:5c:f4:e0:d9:5a:54:0c:12:70:b2:89:
         be:c6:79:a4:d3:dd:89:9a:f0:3c:47:f7:b6:b9:bc:06:76:d5:
         19:42:4f:7d:0f:68:b5:e7:3d:7e:c6:b4:9e:2a:d6:e8:23:4f:
         af:b9:ee:f0:34:18:5c:8f:6a:7c:7d:fc:ac:4a:c9:5c:75:81:
         9f:a5:9d:b5:64:7b:2f:94:a8:50:e6:74:45:00:62:9e:c1:22:
         1a:fe:6e:84:20:9c:69:58:2b:00:65:19:1b:1c:dd:88:95:8d:
         28:1a:43:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:42:12 2025 by rpki-client