Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/6a90e447-7abc-3928-b6e5-a5cff7ab56b9.roa
File:                     6a90e447-7abc-3928-b6e5-a5cff7ab56b9.roa (raw, json)
Hash identifier:          gqcK6fAEFvZOm3V2HZEDDgMF3ABiZARQaQHBPfQPZ/o=
Subject key identifier:   58:E6:C9:27:B1:92:A4:1A:62:95:DA:E9:97:E7:CC:D5:FC:97:F8:06
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F432858487A20862D5395E4B6DE5CAA40
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/6a90e447-7abc-3928-b6e5-a5cff7ab56b9.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     33211
IP address blocks:        2606:ca40:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:86:2d:53:95:e4:b6:de:5c:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=c51c745f-7ff1-4fe7-b4bf-963cf25e39e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ec:51:2a:6d:bf:3b:84:3d:b9:c1:3c:d9:4c:
                    f4:f2:c2:56:55:b8:40:34:09:db:06:70:55:61:5d:
                    61:34:71:d8:78:f1:59:17:45:3b:d8:19:05:2b:9a:
                    0e:a0:68:b3:32:3d:ca:07:58:6d:4e:9e:d6:30:8a:
                    e8:59:66:d5:04:9c:79:b7:6e:7e:7a:42:f2:35:7e:
                    1a:0c:8d:c0:db:0d:1d:78:6b:47:53:eb:6b:70:53:
                    69:42:68:bf:38:40:de:32:e9:d5:fa:ad:57:13:11:
                    21:4f:01:1e:21:12:81:38:b3:46:e8:35:5e:b8:13:
                    b7:f8:b2:9b:1a:d6:5c:07:35:4b:77:bd:e9:ce:25:
                    e1:0a:41:06:c8:68:6d:91:e3:75:ea:2d:20:7b:b7:
                    05:07:c2:39:47:bb:50:47:70:3c:5d:f9:14:bc:6e:
                    c9:32:d7:97:8a:5e:79:81:55:a2:45:91:4f:0c:83:
                    74:cd:68:7e:71:af:43:b1:73:4b:f7:58:04:b0:d1:
                    5b:2d:7d:4d:ca:1c:9c:cf:be:41:2b:3f:5f:95:96:
                    3f:f8:79:f0:5e:1e:d1:23:84:e3:ab:fc:b4:74:bc:
                    b9:04:1b:9f:de:5e:f7:2a:31:04:10:70:ed:f5:00:
                    82:18:62:00:0b:01:36:26:5b:e4:08:fc:b5:8b:ae:
                    35:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E6:C9:27:B1:92:A4:1A:62:95:DA:E9:97:E7:CC:D5:FC:97:F8:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/6a90e447-7abc-3928-b6e5-a5cff7ab56b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ca40:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:6d:dc:bb:d4:bd:72:7d:db:01:a3:4a:78:b3:c1:26:1a:cf:
         89:53:d1:2a:ff:94:a2:7e:54:d3:c8:1a:71:a6:50:a4:1b:a7:
         d7:98:b6:e2:f9:ae:e2:eb:0e:38:dd:9b:4b:7a:93:d7:c8:0e:
         3d:0e:50:b4:89:0b:51:f1:f8:c7:e0:55:3a:9a:d8:4e:5a:5a:
         61:b4:bc:cd:7a:24:0b:60:70:10:51:d9:6b:c3:0e:f0:5d:1e:
         51:8f:f2:c7:51:8e:34:20:fb:2b:8d:3c:58:e1:5c:bc:f3:ff:
         31:69:44:f8:08:bc:33:68:d1:b7:df:bc:3a:57:2d:8c:fe:a3:
         a7:15:dc:61:69:4d:cb:fe:d1:de:9b:03:70:5c:df:68:c3:70:
         2e:0b:9b:c6:6d:47:34:2a:a4:f5:33:23:ae:c7:96:21:4c:3b:
         62:93:19:52:59:ec:3e:d7:b8:ef:33:e6:94:ad:b9:8b:dc:f9:
         7a:63:90:64:50:30:7c:71:2f:1b:7f:db:b8:ea:fc:52:6c:07:
         6d:0a:22:7e:45:1a:62:35:ad:f4:09:07:c9:09:93:45:02:34:
         6a:f2:ef:ba:0b:50:ba:04:e8:1b:b9:2e:e5:45:e3:0d:92:06:
         bc:8f:25:df:43:90:b1:f8:6d:47:be:84:cd:c2:5c:68:83:3b:
         41:c8:23:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:12 2025 by rpki-client