Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/74002b2c-4d64-311b-b369-7e7a856a9d5c.roa
File:                     74002b2c-4d64-311b-b369-7e7a856a9d5c.roa (raw, json)
Hash identifier:          uA3ZYIAzuR1McJi7jxjb/JONCuFpbFo0dKx4l/yTK08=
Subject key identifier:   98:83:77:5C:F6:B7:08:CE:01:85:64:98:18:C2:91:28:30:06:61:D5
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285848547024733DC0D7BDEEE16520
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/74002b2c-4d64-311b-b369-7e7a856a9d5c.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        2606:7bc0:1060::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:24:73:3d:c0:d7:bd:ee:e1:65:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=fcfffea2-60a9-4739-9217-1c186c892437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:eb:45:cc:c6:47:c1:0c:13:e6:85:31:5c:
                    fd:9c:9a:86:38:96:89:2d:a6:48:33:57:44:ef:ed:
                    cf:31:0a:dc:aa:c8:e0:c6:1a:88:fc:c1:35:32:2b:
                    0a:e1:b4:58:92:87:3f:e4:3d:7f:a7:0d:2e:e9:ef:
                    52:28:40:ac:56:6d:0c:84:57:39:22:a7:20:f1:ec:
                    3a:11:24:16:79:91:39:9b:ce:61:74:87:7a:0a:4e:
                    9e:17:63:4c:d3:e8:30:a5:a7:de:40:1b:b1:d2:08:
                    83:5b:b2:ae:85:1a:4c:45:87:5f:c3:1a:b5:55:0c:
                    89:dc:a0:cc:4a:3b:ce:ed:6e:a0:a6:16:d2:b0:11:
                    c7:d4:80:62:23:2d:a1:47:29:46:09:bb:c4:65:53:
                    1b:cc:26:80:39:63:61:44:76:eb:17:2c:f0:72:ab:
                    83:04:78:9e:6a:17:4b:4c:77:11:73:97:02:01:27:
                    02:7b:fa:c6:62:aa:e1:f5:e8:78:b1:f4:60:a5:6e:
                    45:52:38:28:87:3e:16:ff:c5:02:23:c1:97:c2:4b:
                    22:c6:d9:21:59:ad:0d:cf:6b:ed:6a:ae:65:24:71:
                    81:34:ac:ae:cd:f7:3b:8a:99:37:c3:1a:3f:96:f7:
                    a3:ea:b3:21:67:86:99:88:ff:7f:89:20:af:da:16:
                    1e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:83:77:5C:F6:B7:08:CE:01:85:64:98:18:C2:91:28:30:06:61:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/74002b2c-4d64-311b-b369-7e7a856a9d5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c8:e4:d7:82:d9:4f:8c:bd:2d:56:03:b4:ba:6e:63:ae:33:
         0b:55:d0:fc:b7:ac:30:07:ff:a3:55:e3:10:39:d2:36:b6:a9:
         3d:8f:10:ac:39:8f:da:b8:2e:06:fe:cc:86:40:63:94:6f:86:
         fa:50:9c:3b:70:a6:c0:7d:7f:c8:d2:a4:b9:a4:c6:47:39:38:
         bf:6e:26:f2:e7:37:51:fc:e2:7f:04:33:8f:b4:f5:e2:e4:70:
         fb:a9:b2:fa:8b:db:de:d0:5d:a4:d1:f9:23:0d:30:c5:3c:f3:
         d6:ec:3c:ba:23:54:cb:2f:6b:e3:5a:53:8a:f3:85:a3:42:e0:
         72:c7:9e:97:4c:d0:89:84:f6:e9:61:74:76:44:35:a8:2e:30:
         f5:5b:ea:e6:4d:59:2e:a1:6c:0c:af:1f:49:bc:88:71:cf:2c:
         ac:bf:5d:dd:41:8e:a4:c9:2d:f8:38:6a:01:e4:1a:10:b5:b7:
         b5:c0:9c:29:e6:ee:3d:67:6f:1c:2e:cc:25:ff:34:73:ad:70:
         b1:9a:87:61:c5:c6:72:e5:f0:ac:5d:71:53:54:62:d7:10:45:
         2f:70:91:a3:82:9d:e3:0e:6d:68:7b:4c:e9:6c:d3:b9:09:89:
         40:27:1d:2f:30:cd:b7:88:01:0c:02:fe:5e:be:58:88:dc:1f:
         e3:37:3b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:13 2025 by rpki-client