Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/d18c8c5a-b60b-3f8c-87cd-1167886890b3.roa
File:                     d18c8c5a-b60b-3f8c-87cd-1167886890b3.roa (raw, json)
Hash identifier:          9Ftt/jfg5Cm0JIxTJymhBwHxC4o2JxnZtsLVakn0YQM=
Subject key identifier:   AB:53:5E:84:52:CB:07:30:6E:EB:6B:38:91:FD:E0:F2:8E:B0:14:C9
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584839EABCA5FCAE88661454E500
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/d18c8c5a-b60b-3f8c-87cd-1167886890b3.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     23059
IP address blocks:        2607:f4e8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:bc:a5:fc:ae:88:66:14:54:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=70584077-4465-4d74-811b-ecd55ea71504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c3:f0:52:4a:0d:61:ba:2f:7d:14:96:d4:46:
                    09:85:e5:9e:73:5a:bc:4f:85:7e:82:bb:d6:ab:a1:
                    c0:35:30:69:80:9f:ea:7f:f8:72:18:f5:a2:ca:4f:
                    b7:58:17:1e:ed:41:ff:2e:e5:f8:a1:4e:52:54:f3:
                    47:3a:9b:e7:b0:c1:49:e8:4b:44:80:bb:19:34:bd:
                    ec:4c:9a:c4:bc:ec:5f:25:96:0a:88:de:0d:e4:d7:
                    a7:92:0d:36:80:2f:05:39:35:6e:0c:02:f6:1b:7b:
                    cc:f1:8f:47:5a:54:90:2a:94:e0:46:e1:bf:62:35:
                    75:60:0a:78:84:41:5a:a1:ad:3e:dc:fa:46:af:50:
                    84:9e:05:a9:1d:f9:30:2a:68:35:3f:ea:0c:d1:e7:
                    49:cf:0d:c4:98:d6:62:de:a7:be:38:36:32:1e:a1:
                    37:bf:00:b4:96:64:f9:2b:97:0a:ce:7e:59:3f:16:
                    e1:6c:9b:d7:2d:a0:48:b2:69:f0:52:26:bb:78:0b:
                    e0:73:6b:72:1b:7a:78:df:f2:20:ec:b2:41:12:46:
                    4c:3a:59:95:05:51:06:58:b0:72:e3:3d:f9:f7:98:
                    36:b4:a2:c3:89:40:d9:d5:84:51:29:76:1b:44:df:
                    46:dd:ad:9c:fe:a1:44:6d:a0:ce:54:5c:f6:ff:38:
                    3a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:53:5E:84:52:CB:07:30:6E:EB:6B:38:91:FD:E0:F2:8E:B0:14:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/d18c8c5a-b60b-3f8c-87cd-1167886890b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4e8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ae:c8:d7:21:76:9e:b7:4f:92:7a:0b:b8:be:3a:4f:f1:e2:
         c8:8a:34:87:fd:2b:db:57:02:ed:95:0f:df:34:f1:14:96:ad:
         8f:d5:2b:b0:39:10:58:9c:7c:f6:f5:b9:0a:a7:db:8d:fa:ad:
         30:d7:91:93:3b:08:d3:64:36:be:77:9a:c8:5a:57:39:ef:17:
         c8:9d:c3:b8:d9:41:57:ba:cd:af:54:b9:7d:1a:e5:04:9f:d7:
         cc:56:88:e2:89:9e:2b:09:a0:31:67:2f:b9:93:aa:19:78:4e:
         da:88:3c:ef:5e:a5:04:38:ee:08:8a:31:66:3e:59:7c:e4:5c:
         2e:5e:f3:3d:a5:c8:3d:71:1f:1c:1d:db:f1:2b:78:5e:d3:72:
         e3:fe:0f:17:8a:8b:7f:66:54:06:7f:42:c0:82:8f:a1:75:3d:
         da:c5:1f:a4:1e:df:46:bb:ff:60:c7:ca:bc:31:1d:d6:cb:51:
         37:8c:0f:e6:52:6e:ba:70:85:d9:41:f0:49:4d:8f:18:e6:d6:
         23:56:88:08:61:8f:68:4f:42:f7:b9:43:ba:55:01:96:d0:19:
         7e:82:79:8c:4d:63:d0:2d:5c:b3:d9:3b:ed:73:0a:03:d5:53:
         b5:5a:fb:b1:c1:e8:b0:b1:1a:ec:a3:9d:be:83:6d:81:e4:31:
         11:90:a5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:12 2025 by rpki-client