Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/f6ca69fc-afe5-3eea-8a7a-15f18ae6e21a.roa
File:                     f6ca69fc-afe5-3eea-8a7a-15f18ae6e21a.roa (raw, json)
Hash identifier:          01xpZV3Osr/a/5+lzM6DZLjsk22t2d9ZazTyQnjiyQ4=
Subject key identifier:   5E:7B:42:1C:EE:01:76:7B:43:33:3D:53:E2:71:E1:39:E0:2F:48:D8
Certificate issuer:       /CN=42b6e093-f636-4e25-936b-6fc6232f50c5
Certificate serial:       010D0C9F4328584863CB06B9647C9B8B63D6EB40
Authority key identifier: DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/f6ca69fc-afe5-3eea-8a7a-15f18ae6e21a.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     955
IP address blocks:        2606:82c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:06:b9:64:7c:9b:8b:63:d6:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42b6e093-f636-4e25-936b-6fc6232f50c5
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=8b57d46a-2ce2-4d3a-9f9f-7fd733f0517b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f0:b3:bc:ed:cb:6a:fe:41:45:a5:07:6d:3f:
                    7c:d1:6c:c8:0a:66:44:d7:65:0a:a6:1c:45:dc:a1:
                    7e:b3:fa:05:97:24:f1:d0:c8:b0:24:54:24:a7:82:
                    c0:3f:0e:a6:21:86:1e:18:83:45:bd:4a:9d:c7:96:
                    2d:f5:25:d3:0a:f5:8f:6f:e9:80:c3:16:7e:06:3c:
                    11:f5:97:f6:c4:a9:a9:b5:c8:54:bd:9f:95:ef:63:
                    fa:37:b4:48:44:58:0a:5f:9d:b0:7a:8d:9d:fd:8c:
                    46:5d:92:26:b8:5c:dd:bf:86:5d:49:bf:a2:97:4c:
                    99:40:5d:0e:2f:96:eb:71:4f:20:19:38:af:ca:05:
                    78:25:3d:83:d5:e3:dc:cd:e9:24:6b:c0:17:5d:e9:
                    0f:91:49:82:37:51:b1:c3:f4:e4:42:2c:97:82:7d:
                    ac:8d:e9:03:30:a4:bb:50:f3:e4:b9:28:8a:c1:64:
                    aa:43:e2:7a:05:73:ea:fb:0c:e8:45:67:7a:cf:ba:
                    f2:d7:85:b2:96:45:1b:73:28:ae:ff:4a:5c:e5:6a:
                    25:1a:b8:7f:2c:09:53:8e:06:fb:24:9e:7a:74:5e:
                    6b:df:bb:1f:f8:c1:2a:c9:ba:ee:11:20:60:49:0c:
                    75:07:7b:d7:90:a0:57:56:b6:1a:b1:de:db:29:be:
                    c4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7B:42:1C:EE:01:76:7B:43:33:3D:53:E2:71:E1:39:E0:2F:48:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/f6ca69fc-afe5-3eea-8a7a-15f18ae6e21a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.crl

            X509v3 Authority Key Identifier:
                keyid:DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:82c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ad:52:cd:c6:00:40:e4:d2:ef:aa:1c:9f:f0:ce:ad:7a:a0:
         b7:f7:c2:76:6d:ed:73:69:6b:a3:b2:0f:97:6f:02:88:09:f0:
         44:03:82:d2:23:3d:39:d6:c7:c8:ed:d7:3c:b4:b9:95:4d:12:
         a1:df:43:36:d1:7b:86:da:17:c4:f9:f8:0f:fb:f2:2c:62:90:
         01:4d:a9:19:76:cd:d1:77:13:c7:b2:d8:54:cf:97:5e:2b:fd:
         7a:0e:d0:96:18:16:df:af:fa:9e:f3:d3:87:88:8a:8e:3e:0c:
         51:ca:b3:c5:10:2d:0c:c7:5d:a0:e0:58:06:2f:91:8d:40:34:
         ec:1d:f1:0f:76:fe:f6:32:54:72:1c:63:b9:b2:6b:86:da:ae:
         66:64:3a:d2:d3:fe:61:8d:18:a6:cc:92:48:4a:22:29:42:9e:
         c7:96:a4:22:bf:35:cd:1c:69:1e:af:6f:df:88:71:d7:74:95:
         53:33:e5:5e:ae:d3:74:74:a7:5b:55:71:67:0f:67:01:3d:19:
         d5:52:18:c3:72:ec:35:e5:ae:f8:20:c0:e7:9c:3b:d0:38:fa:
         85:40:07:3f:92:19:a6:75:76:5a:f3:bb:81:1b:90:98:41:34:
         60:dc:f7:07:44:94:cc:52:eb:a1:65:04:de:8b:a7:21:59:45:
         58:44:3b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:49:48 2025 by rpki-client