Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa
File:                     b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa (raw, json)
Hash identifier:          lmSDqB/6hVeSkjf5vS2vPXWcUiR0wRotFC7wmj5+eGU=
Subject key identifier:   73:4F:73:F3:FA:99:90:E8:18:DC:C0:A1:8F:5E:E6:8F:9A:09:FB:89
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584855D59AB24D44EDDE39B97380
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa
Signing time:             Thu 26 Dec 2024 14:00:52 +0000
ROA not before:           Thu 26 Dec 2024 14:00:52 +0000
ROA not after:            Wed 26 Mar 2025 13:00:52 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:55:d5:9a:b2:4d:44:ed:de:39:b9:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Dec 26 14:00:52 2024 GMT
            Not After : Mar 26 13:00:52 2025 GMT
        Subject: CN=a6fba6d3-3e8a-439d-9a22-a93b74fafbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ff:e6:40:9e:59:37:2b:b3:85:6b:d6:a3:3a:
                    79:6b:7a:f3:3f:f8:bf:d1:a9:48:2e:08:cd:7a:4f:
                    92:aa:85:9a:27:7e:66:60:6d:3b:38:de:7f:fd:55:
                    1c:f8:d6:1a:ec:53:83:a8:3c:4d:42:51:24:0e:83:
                    a1:fd:63:c0:26:c2:07:5d:7e:50:23:ba:73:2b:cc:
                    52:a1:21:fd:de:35:c2:88:52:2a:c6:95:1c:2a:5f:
                    37:1d:98:61:91:3d:2a:be:be:7b:6e:99:ed:b6:90:
                    02:61:f1:e4:e5:e4:8f:f9:6e:b9:71:d7:0a:a4:90:
                    4e:d0:f4:88:20:a7:44:a9:50:16:f6:b1:f1:f5:5f:
                    ce:ba:27:b5:00:78:2c:5a:e8:40:7f:c8:3f:c1:44:
                    24:31:ea:ea:37:10:24:f7:d8:00:de:36:8f:c9:6a:
                    6a:89:57:52:8b:f8:f3:b0:fa:9e:cc:a4:57:88:3a:
                    77:54:bd:27:bf:63:45:57:52:68:56:73:e2:dc:23:
                    8b:46:f3:f1:cb:df:bd:c2:71:a9:ad:d5:0b:c3:4a:
                    df:e4:e2:fe:d1:78:bf:a4:5c:d6:f5:5e:5e:9e:74:
                    7a:7a:49:47:0a:58:78:c6:3a:50:84:82:36:b1:37:
                    18:ed:59:21:70:19:e6:1a:07:64:24:61:cc:8d:f0:
                    68:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4F:73:F3:FA:99:90:E8:18:DC:C0:A1:8F:5E:E6:8F:9A:09:FB:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1080::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:d3:7b:29:43:30:39:a4:53:8d:0b:a0:3a:e3:15:d1:e5:31:
         cf:8c:db:04:6f:4e:e5:4b:83:59:1a:af:42:f1:e7:42:7e:c7:
         12:e1:10:47:19:bd:b3:7c:fe:53:c5:e8:6d:90:8c:39:1d:d1:
         03:29:93:55:fe:48:fc:71:47:f0:fc:54:65:25:13:68:b6:f0:
         67:80:ef:73:99:8e:96:8c:8c:12:f5:c0:ea:24:62:9b:58:d3:
         c0:5b:6c:89:1e:a4:68:19:fc:c3:1c:5f:e2:3d:59:08:fa:a3:
         6b:b3:c1:7a:57:fe:56:c5:1c:ce:c6:b3:86:61:d6:e9:4e:88:
         3d:0f:47:3e:31:ed:83:41:6f:81:d6:82:b5:93:eb:1a:4e:d6:
         f6:a3:94:0c:3c:7b:fe:1a:ba:69:38:f5:c7:ec:fb:30:7e:fd:
         89:cf:6d:d3:f9:52:21:09:5e:ab:3e:55:a2:0e:26:34:cb:87:
         2e:5d:eb:9f:e1:0f:6b:90:15:45:dc:b6:19:69:d1:d5:98:6b:
         5e:c5:e0:9c:19:d3:33:42:88:8e:12:10:fe:dc:52:39:47:13:
         1e:92:c9:1e:a1:ef:4e:3b:b2:78:86:cd:f9:c7:7c:aa:9f:f5:
         dd:46:1e:75:86:0c:19:0e:ee:0b:e4:db:cb:25:9f:c7:42:61:
         eb:77:8f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:42:27 2025 by rpki-client