Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/1c56b26d-d483-34c7-95b0-f12c1e3289f0.roa
File:                     1c56b26d-d483-34c7-95b0-f12c1e3289f0.roa (raw, json)
Hash identifier:          8amORqde0wt6l4O/Iu3lCkvIRL92XnmMDCYjb9QVOf4=
Subject key identifier:   13:40:15:E7:26:AB:A0:66:3E:C6:1C:13:E0:93:4A:58:C9:61:C1:C3
Certificate issuer:       /CN=615e35f9-bfe1-4c69-bb32-cd252c125c65
Certificate serial:       010D0C9F43285847FDB8C2290E135F5E12E16BC0
Authority key identifier: 7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/1c56b26d-d483-34c7-95b0-f12c1e3289f0.roa
Signing time:             Mon 25 Nov 2024 00:31:44 +0000
ROA not before:           Mon 25 Nov 2024 00:31:44 +0000
ROA not after:            Sun 23 Feb 2025 00:31:44 +0000
asID:                     12233
IP address blocks:        2604:6040:a20::/48 maxlen: 56
                          2604:6040:a25::/48 maxlen: 56
                          2604:6040:a27::/48 maxlen: 56
                          2604:6040:a70::/48 maxlen: 56
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:b8:c2:29:0e:13:5f:5e:12:e1:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615e35f9-bfe1-4c69-bb32-cd252c125c65
        Validity
            Not Before: Nov 25 00:31:44 2024 GMT
            Not After : Feb 23 00:31:44 2025 GMT
        Subject: CN=a27443c5-04c7-4f78-996f-209219f31df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:44:0c:41:c4:28:24:2a:ad:90:29:77:e5:44:
                    e0:9d:ad:f8:5e:9c:e4:8e:ef:a0:f4:54:fa:64:7a:
                    14:25:d2:b1:69:e0:16:76:64:6c:5b:d6:65:7f:29:
                    2b:f5:96:0a:29:f3:f7:7a:af:ee:5d:8b:72:f2:b0:
                    14:72:e5:fe:86:bc:2d:e5:05:b7:a1:a7:7b:6e:fc:
                    06:b4:88:84:10:d2:05:9d:54:eb:1a:cc:9f:6e:21:
                    2d:06:c0:94:6e:4c:17:1c:6f:9e:53:c1:75:0d:31:
                    b6:23:39:d3:d1:b4:1b:c6:50:56:0b:c1:4f:ad:57:
                    d4:c1:df:ba:ed:87:db:98:06:36:f9:38:54:bd:95:
                    92:9e:f1:03:26:d8:64:95:90:61:ba:76:3a:44:c8:
                    2d:84:62:7c:25:7c:3a:ec:2e:a9:43:47:31:f4:10:
                    91:06:a4:f4:6e:cb:9d:e9:54:0d:a0:c6:04:dc:6f:
                    c0:b2:16:0d:fd:50:b3:76:27:a1:e3:90:5b:5b:69:
                    59:de:55:25:ba:d9:7e:bb:b9:3e:7b:67:b2:80:74:
                    e4:56:1e:2e:f4:c6:e3:c8:12:08:ab:26:9a:ed:56:
                    fc:5f:f0:d7:d8:04:e3:4f:56:2e:e7:87:01:16:61:
                    72:4b:5c:89:3e:87:5a:8b:8b:74:a9:2f:0d:a4:b8:
                    64:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:40:15:E7:26:AB:A0:66:3E:C6:1C:13:E0:93:4A:58:C9:61:C1:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/1c56b26d-d483-34c7-95b0-f12c1e3289f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:6040:a20::/48
                  2604:6040:a25::/48
                  2604:6040:a27::/48
                  2604:6040:a70::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:fb:df:db:3f:94:a0:06:62:34:6d:05:8e:ff:61:55:9a:61:
         f6:84:ac:b0:24:7d:29:0b:33:4d:dc:5f:64:54:cc:06:0f:a5:
         73:01:e0:1e:c7:aa:95:e7:0a:b4:6c:ef:3e:2e:02:34:e0:22:
         9b:17:9e:66:4a:90:8d:1e:52:d3:97:f8:78:82:34:54:f2:a0:
         c1:01:10:8c:e3:21:5e:8e:20:45:3d:48:de:35:da:ab:8c:d8:
         58:72:f6:be:1b:4b:2b:91:58:3c:2e:1e:d9:35:26:a9:c9:e0:
         b1:bd:8d:95:3d:54:bc:1a:50:67:07:99:9c:c7:ba:ab:6b:f7:
         82:72:22:cf:d7:58:66:11:60:1d:b3:2f:35:dc:d3:66:17:86:
         80:65:4a:5e:a1:81:7c:69:e6:28:80:26:0b:7e:f9:f7:20:8b:
         2e:3d:ab:75:8f:62:0d:01:49:48:8b:08:18:fd:15:65:32:2e:
         6f:ee:4a:d9:fc:b5:b0:98:ee:8c:5e:9e:3b:32:e3:80:4c:6a:
         10:88:03:2e:74:26:87:8d:da:c1:13:9d:ae:92:b2:ee:65:80:
         8e:d9:3b:ff:fc:8c:27:d2:66:ad:15:c5:b6:47:09:f8:a8:50:
         ea:20:95:1f:1c:81:63:b0:cc:10:95:46:f7:14:33:e3:3f:c5:
         23:0f:da:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:02:21 2025 by rpki-client