Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/46286078-f61e-3aab-8dc8-b7dddadab07b.roa
File:                     46286078-f61e-3aab-8dc8-b7dddadab07b.roa (raw, json)
Hash identifier:          1MVO/uiTWfBvRqXB8WjPd2rf1VHrjR22/cyT6XbiSsE=
Subject key identifier:   34:51:B0:9C:3C:0D:A8:E9:53:43:75:17:88:D5:F3:F5:50:CC:D8:76
Certificate issuer:       /CN=837c453a-673f-4481-b4c4-21ece5899901
Certificate serial:       010D0C9F432858484C1037E6DDB221845DE85A00
Authority key identifier: 5C:6F:74:D4:FE:AB:73:A7:EC:FC:13:4A:C5:E5:25:9D:48:14:38:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/46286078-f61e-3aab-8dc8-b7dddadab07b.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     46475
IP address blocks:        2620:a6:2001::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:37:e6:dd:b2:21:84:5d:e8:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=837c453a-673f-4481-b4c4-21ece5899901
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=0316f287-be9f-4be0-9c64-12cbaf3f409b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:b0:7c:91:8c:b7:c1:c5:20:47:c7:d4:9b:
                    aa:2d:21:80:3e:7a:c8:17:54:b7:c7:1f:ee:0f:3b:
                    1c:4c:4e:73:fa:45:69:bb:72:d4:26:3e:11:19:98:
                    fd:40:71:2c:b9:6a:e6:4b:7a:70:60:23:ca:76:0c:
                    5e:5c:6c:c6:39:13:2b:ac:cb:6d:e6:3d:c4:a2:e1:
                    28:5f:3d:c3:13:ff:2c:3a:d2:09:3a:d8:94:b1:0d:
                    8d:e5:f5:18:38:5b:24:34:15:d6:be:ae:b0:07:40:
                    1a:89:a9:a5:11:3a:a3:51:23:b5:33:57:38:59:23:
                    cd:90:a2:7f:67:e1:38:23:74:20:e2:79:26:fa:5c:
                    78:62:4b:23:05:8d:9d:32:eb:13:c2:d8:e8:49:48:
                    19:a2:8d:17:2f:a9:82:b5:d2:d7:c2:ab:8f:bc:6b:
                    68:21:55:d7:b9:d3:2b:2e:0c:d9:83:8d:a6:60:c3:
                    ea:d4:ee:78:ce:7e:52:70:91:fd:0e:c2:48:c7:d5:
                    da:40:ed:c1:14:ad:12:8d:67:b5:ab:59:2d:fe:09:
                    b2:e9:4c:fb:79:e6:fc:16:23:0c:5f:63:b5:79:90:
                    c6:12:0f:d6:9f:ef:57:0a:fd:60:8d:36:db:50:4e:
                    9f:40:3f:93:b6:f6:77:dd:7d:75:42:3a:43:c4:e4:
                    22:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:51:B0:9C:3C:0D:A8:E9:53:43:75:17:88:D5:F3:F5:50:CC:D8:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/46286078-f61e-3aab-8dc8-b7dddadab07b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/837c453a-673f-4481-b4c4-21ece5899901.crl

            X509v3 Authority Key Identifier:
                keyid:5C:6F:74:D4:FE:AB:73:A7:EC:FC:13:4A:C5:E5:25:9D:48:14:38:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a6:2001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:4f:58:15:c0:7d:bb:eb:5d:fa:35:fb:8d:1e:79:44:de:df:
         f6:2b:2f:96:88:67:9e:f7:0b:1e:0e:ed:f6:c0:5e:16:d8:e2:
         5f:2a:a1:9c:f3:fb:38:56:32:d2:69:40:bb:d7:ff:d5:b2:34:
         22:bd:62:e6:45:3f:79:91:02:8c:b6:46:88:9d:f5:59:ec:8d:
         6b:9e:7a:6b:68:30:80:c9:bf:a2:48:02:3d:fb:6b:b2:11:1b:
         be:e8:87:d8:f5:5e:79:61:82:37:6d:eb:9f:f9:49:5f:64:b6:
         69:66:24:17:1b:07:6f:56:5f:98:c4:f4:bd:42:80:57:00:e4:
         e0:69:45:84:84:ff:cc:a6:75:c0:f6:5d:ad:d7:dc:1e:66:f8:
         76:b3:88:3d:48:91:4a:da:8d:e1:e6:b3:5f:8d:93:75:31:86:
         35:85:98:b9:33:b3:f3:61:f2:6b:1d:92:68:ae:cf:35:0d:fd:
         41:50:2f:98:59:47:06:f8:64:3a:2b:4a:10:26:55:69:80:b5:
         6d:c8:96:e6:85:ad:69:ce:9e:70:7d:66:5a:bd:27:4e:82:a1:
         b8:f0:85:c5:48:e9:a2:b9:2a:f8:a5:92:05:7f:da:a9:d4:6a:
         69:80:06:90:4e:94:61:3e:15:3a:1e:3c:3e:8c:44:09:b4:c7:
         01:99:14:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:31 2025 by rpki-client