Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/fef891a5-b993-3e38-8e28-d12d12385a6a.roa
File:                     fef891a5-b993-3e38-8e28-d12d12385a6a.roa (raw, json)
Hash identifier:          To0AHyyGTiwLoaJAzUCY6TiDu/Pmr381U++IOR+3tLY=
Subject key identifier:   02:D1:B9:E5:39:83:1B:05:A8:D4:5F:83:CB:64:EB:84:0A:89:BC:FA
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584855D59AA067975F1384A90520
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/fef891a5-b993-3e38-8e28-d12d12385a6a.roa
Signing time:             Thu 26 Dec 2024 14:00:52 +0000
ROA not before:           Thu 26 Dec 2024 14:00:52 +0000
ROA not after:            Wed 26 Mar 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2606:7bc0:1080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:55:d5:9a:a0:67:97:5f:13:84:a9:05:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Dec 26 14:00:52 2024 GMT
            Not After : Mar 26 13:00:52 2025 GMT
        Subject: CN=e7039d6b-ac52-4ac0-8210-83ca669aadeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5c:eb:00:59:e8:94:a7:0e:f0:98:f1:57:2b:
                    e6:4c:7f:50:5d:19:a8:a8:93:3f:be:2d:80:5c:bb:
                    cc:3e:dc:00:00:1c:d2:72:42:10:ec:40:e9:c0:9b:
                    1d:4c:3b:48:ef:38:2c:b4:4e:0b:04:76:b2:a0:51:
                    65:b4:0d:aa:9b:7e:ab:72:a9:93:8a:d2:81:74:34:
                    01:fb:7e:11:28:e9:48:d7:55:4f:46:e7:09:4d:ad:
                    b5:e0:a1:54:5e:b3:64:f8:d5:46:62:49:00:53:db:
                    e4:2e:9d:34:b8:3c:b6:cb:f3:e0:df:9b:8d:df:8c:
                    2f:ba:4e:8e:fd:0a:c3:0b:cb:0e:0d:23:26:e0:13:
                    62:98:43:08:6f:9c:f4:43:fc:35:f4:a3:63:4e:22:
                    d2:17:b8:b1:3b:83:69:b8:eb:67:d6:42:48:f5:39:
                    63:96:14:5a:31:66:a2:eb:30:ec:9a:9e:1a:e4:8c:
                    c2:23:79:9d:d8:16:40:13:38:16:3e:04:c3:b9:a9:
                    e5:1a:b7:7c:e3:3a:6f:c1:b1:69:f0:2a:de:30:47:
                    8c:2b:6d:60:1b:11:e1:76:b3:71:52:7d:cc:b2:1d:
                    43:a2:51:4c:9e:b2:05:01:c4:15:cf:e7:3d:40:e8:
                    0d:a1:d3:21:99:98:63:58:0a:18:8f:6b:0e:8f:61:
                    fc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D1:B9:E5:39:83:1B:05:A8:D4:5F:83:CB:64:EB:84:0A:89:BC:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/fef891a5-b993-3e38-8e28-d12d12385a6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1080::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:5a:78:90:51:dd:bd:49:9f:62:34:b5:d5:12:80:90:f6:44:
         3a:c9:f2:0b:10:c7:ab:f9:d7:5b:36:3e:03:5a:d4:20:14:ef:
         3d:9f:02:03:ef:5a:9d:d4:f3:39:87:64:0d:72:1f:d1:e2:ab:
         fc:8a:04:cd:88:4c:a5:45:56:6d:0d:de:56:7d:06:33:da:f1:
         2c:80:24:b7:9b:79:30:60:8d:8c:4a:48:6a:24:d0:23:bc:75:
         39:bb:6a:76:fb:3d:72:6f:d1:dc:09:f8:5a:8c:1e:ff:e9:64:
         05:e0:aa:48:7a:b8:89:1b:a2:76:3a:54:63:80:a7:8c:29:8e:
         ee:88:d2:48:c6:ba:bc:6a:f3:86:ce:b3:5a:fb:bb:49:f0:12:
         2e:31:8e:6f:52:44:70:83:0c:dd:7f:b3:82:73:9d:38:a8:50:
         d7:fc:ef:c1:d1:56:a0:15:10:2c:d8:95:a2:52:2e:41:bf:ea:
         31:97:62:80:5b:b2:cd:11:b3:b0:3c:20:52:7a:a5:2a:61:85:
         90:5a:89:7e:c4:fc:e5:3c:12:a9:40:e4:2a:c7:23:27:be:93:
         a8:39:ee:26:eb:96:cc:1c:30:82:43:de:3e:11:87:7d:e6:e1:
         c2:f5:4c:b3:61:9a:41:a6:d0:48:40:e3:ec:3d:45:de:c6:35:
         fb:ec:a3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:32 2025 by rpki-client