Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa
File:                     c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa (raw, json)
Hash identifier:          X93Iw7+JSWFscSt7dB+8mOpJ9fl7emX9WfPsA//nZD0=
Subject key identifier:   45:AE:D0:E0:5A:2D:6D:DE:01:E3:37:DB:B8:1D:E0:30:F4:21:D0:A9
Certificate issuer:       /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Certificate serial:       010D0C9F432858483E1AAA93C0C56F3976F0D080
Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     6939
IP address blocks:        2604:ebc0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:aa:93:c0:c5:6f:39:76:f0:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=2b29f4ad-b57e-4a5b-9174-13c13f380119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:eb:16:c4:48:82:89:f7:ea:25:f7:14:04:
                    bc:9b:82:f9:86:9f:1b:ee:28:3a:90:d0:c1:c2:76:
                    0f:71:21:ce:08:9c:b2:42:8c:6a:28:4b:23:9b:1e:
                    ac:93:34:bb:ae:e2:5b:84:21:74:c7:7a:95:15:71:
                    ed:c4:b0:58:83:00:9d:60:8b:8b:b1:4d:5f:a9:68:
                    db:01:a6:bb:e6:0e:1e:30:03:75:b1:59:3c:ab:73:
                    de:87:b5:89:37:7d:24:26:d0:4d:91:6a:82:4f:2d:
                    29:90:86:20:3f:e8:70:fa:cc:40:e7:76:e0:1b:12:
                    cd:58:dd:4f:ab:5d:7e:2b:5e:82:19:b8:55:c5:6a:
                    3a:0e:51:ad:79:2d:c6:b1:03:8a:d3:a4:8b:0d:1c:
                    95:98:b6:a7:c5:9b:0a:e6:82:83:08:98:85:e5:00:
                    d8:dc:ae:f7:b8:d5:11:da:5b:02:90:1e:23:7b:87:
                    e8:72:8f:b4:00:ed:d7:ea:b1:2e:49:2e:a8:4f:fb:
                    ef:d6:66:98:4d:19:5c:55:ea:e6:44:c6:5d:43:f5:
                    f9:25:a6:f7:dc:c9:62:ff:aa:bf:ba:76:a5:72:04:
                    f1:d8:fd:2d:f1:27:a7:b8:a2:72:36:12:bb:88:bc:
                    8d:c0:df:33:40:e8:20:69:4e:ce:a3:f4:05:49:51:
                    3f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AE:D0:E0:5A:2D:6D:DE:01:E3:37:DB:B8:1D:E0:30:F4:21:D0:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl

            X509v3 Authority Key Identifier:
                keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ebc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:65:2e:17:ae:0d:49:36:98:18:de:f6:18:58:bd:3b:de:4c:
         85:47:40:76:63:82:e9:7f:ee:5f:b3:8d:63:1d:e5:e1:ac:9f:
         93:00:e6:ab:d6:22:ca:25:39:91:a3:07:0f:90:98:7c:c7:85:
         cb:c4:10:52:18:fe:8e:6f:38:19:9e:ea:20:42:c3:a0:2b:5f:
         02:9b:91:d1:c2:04:4d:ad:ec:31:95:d9:2b:9e:ad:ee:82:92:
         2a:27:62:24:d9:0a:77:1e:48:d0:fa:15:39:05:61:9c:ac:b8:
         78:ec:34:a5:e7:01:6b:98:a0:d0:00:12:90:6f:e4:61:58:17:
         45:b6:59:bd:db:c3:24:0b:6d:d4:c4:f8:89:05:57:68:23:cb:
         1b:a7:49:94:91:7f:42:f7:48:b0:cb:5c:89:c3:d1:37:b5:94:
         62:24:98:02:43:a6:6b:91:0a:6b:9e:a7:0c:8a:21:fa:c2:a5:
         31:8c:c6:43:c4:22:a6:b1:7c:b8:7a:4f:1f:f8:fd:e1:0e:30:
         ac:65:40:fc:9e:03:9f:b2:d4:99:22:25:6f:e8:e8:57:fd:39:
         ce:02:60:8c:9d:38:e0:1f:49:0b:08:c1:7d:55:4c:d4:a2:03:
         1e:08:ec:52:3a:a6:82:99:69:4d:37:8a:90:cf:ce:3a:07:da:
         6c:46:b9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:51:17 2025 by rpki-client