Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/0da739a3-2100-346b-8000-c65486881d43.roa
File:                     0da739a3-2100-346b-8000-c65486881d43.roa (raw, json)
Hash identifier:          d7F6/MlxKzp8Wa8RQgIOBZdhiiZ/ui2H8pFpFk8CvQc=
Subject key identifier:   8E:54:4C:8D:85:4F:1F:FB:1F:39:76:E8:CE:E0:D3:1C:EF:27:B1:CC
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584839EABCBCC31255F07E820100
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/0da739a3-2100-346b-8000-c65486881d43.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     55429
IP address blocks:        2607:f4e8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:bc:bc:c3:12:55:f0:7e:82:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=a4a67730-9eda-4738-85dc-2a946bfafa58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b9:9c:ca:11:c7:19:2a:e0:e0:8f:42:03:db:
                    b7:de:1c:de:d8:7b:62:cf:d4:44:1e:ce:46:54:b9:
                    5a:3d:bc:d4:89:cd:64:c8:60:91:1b:34:52:b4:87:
                    1c:46:a0:f9:e6:8a:7b:20:4d:21:45:79:58:22:ba:
                    7b:be:c7:00:0c:ba:1f:b7:f4:0f:75:22:df:91:5c:
                    e4:cb:ca:45:ce:cd:2d:d3:c3:c6:32:b3:8c:77:59:
                    07:90:31:58:d8:da:0b:57:8a:30:56:fd:fb:76:3e:
                    b8:ac:86:fb:05:20:f3:39:0b:de:45:35:94:54:5e:
                    d0:65:e3:fd:d0:0a:da:96:30:52:43:a3:6b:68:bf:
                    7b:d0:cb:a7:22:80:ea:ed:db:08:9e:86:1a:74:2a:
                    20:88:fb:9f:1c:e8:63:36:05:4f:2e:04:49:52:6d:
                    38:b2:b1:b8:fd:eb:c7:24:34:64:01:f9:15:b8:ed:
                    9c:dc:66:85:b4:8c:14:10:56:3b:02:dd:5b:b9:f5:
                    33:10:30:91:96:76:4c:7f:c1:d6:0c:0a:95:b0:5d:
                    f2:a7:98:f8:dc:74:79:37:ba:31:37:2d:55:7d:36:
                    49:bc:ce:0d:ca:c1:62:6a:bd:e1:da:2a:da:f7:ca:
                    8b:09:55:b7:ee:3b:a4:a3:8d:09:e6:3c:8d:cf:b1:
                    1e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:54:4C:8D:85:4F:1F:FB:1F:39:76:E8:CE:E0:D3:1C:EF:27:B1:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/0da739a3-2100-346b-8000-c65486881d43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4e8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:cf:aa:36:77:f3:d9:e6:85:8b:e8:5d:9e:83:50:15:86:0d:
         0a:fe:9b:99:56:04:50:40:03:59:72:7a:9d:9a:94:bf:f6:94:
         b6:f2:04:41:b3:a6:e1:57:06:24:db:63:ee:4f:3b:28:7f:17:
         4b:58:d6:96:d3:ea:38:35:4c:f9:0e:3d:69:df:e1:62:2c:e5:
         c1:26:48:3e:46:2b:e2:80:87:6e:25:5e:ed:b9:06:1d:51:34:
         fd:5c:f1:25:e1:cc:25:a7:72:cf:d3:4c:f4:ed:67:3b:ee:93:
         e7:4e:35:a2:44:de:da:0e:86:ac:ca:41:6b:5a:aa:84:9f:d7:
         52:99:a7:fc:6e:60:5c:59:11:3f:c3:e8:dc:2d:4f:e5:e4:8d:
         03:0c:f6:da:36:d1:85:69:81:50:a6:9d:ad:4e:3d:03:16:be:
         74:4e:62:8a:70:ab:1a:a4:f5:3d:95:c2:e0:18:1a:e9:ae:8c:
         79:cf:1c:36:87:a3:55:02:f7:17:01:62:97:0a:0b:76:75:0f:
         7f:35:e8:82:88:17:26:44:82:ff:be:8a:90:bc:fd:45:9d:69:
         f3:0d:5e:5b:b8:a8:5b:1e:d1:18:b0:a2:19:55:a0:72:9d:50:
         b6:b0:66:4a:ef:3f:74:6e:c7:aa:e9:14:f0:7a:f9:c1:c0:a3:
         5c:3d:51:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:39:58 2025 by rpki-client