Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa
File:                     705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa (raw, json)
Hash identifier:          myVoC4SdTxJQPY8f0E+v6GP0vpSFcomf6pzuvSi3x0E=
Subject key identifier:   26:61:57:9B:5A:EC:F4:FA:74:AE:93:A6:5D:1A:48:7F:44:BE:D0:7C
Certificate issuer:       /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial:       010D0C9F432858482EC00EC03D8E6543A3098000
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     23467
IP address blocks:        2602:816:5000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:0e:c0:3d:8e:65:43:a3:09:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=d1a436b8-264e-4cc5-b3a6-ef52c2ca5bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c0:f3:48:1f:4e:18:25:e4:f6:66:7a:a4:e2:
                    00:77:81:94:28:18:df:a3:e9:98:b2:63:8f:b7:a4:
                    02:9e:36:a6:c8:55:71:27:11:d2:80:47:d9:42:f7:
                    bd:26:87:7f:e8:ef:69:2d:f7:56:07:9e:11:2b:36:
                    4c:a3:21:d7:58:33:87:90:e0:29:8e:13:f4:66:a4:
                    9b:04:d5:f8:40:08:a9:9a:3a:1e:70:49:24:5f:bf:
                    1a:54:1d:34:9a:6d:46:0e:92:88:e5:dd:bb:3d:77:
                    c5:0e:59:9a:8d:9e:87:b2:8f:bb:62:62:f7:ae:9f:
                    0d:aa:be:90:99:9b:9d:50:e5:0d:87:dd:c1:9d:ba:
                    6c:5d:b3:4d:a1:40:af:b9:8a:79:6f:54:61:05:1c:
                    1f:90:1d:45:6e:53:80:ad:6a:fd:00:69:df:ca:49:
                    81:75:35:ad:6f:c4:d4:ec:80:c7:b5:d3:b0:f0:5b:
                    db:78:85:27:83:42:f2:5d:14:df:6d:cf:1e:37:15:
                    a8:d0:c2:26:31:67:61:7f:68:9f:77:68:9a:18:fa:
                    4f:ad:ff:78:1f:4d:b9:2a:45:61:1a:8b:d7:72:0e:
                    cf:dc:22:5e:1a:a3:04:51:fe:19:df:13:14:ff:33:
                    71:0f:2d:e5:a0:cc:df:3f:6c:58:13:f6:ba:9b:6b:
                    b9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:61:57:9B:5A:EC:F4:FA:74:AE:93:A6:5D:1A:48:7F:44:BE:D0:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl

            X509v3 Authority Key Identifier:
                keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:816:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:1a:19:9a:e1:a9:21:fe:1d:75:17:2f:68:30:e2:0c:e0:be:
         cf:c5:b7:19:da:43:79:b6:13:07:0a:26:1d:72:61:90:93:42:
         58:d9:98:14:fd:4d:f4:fe:b1:e8:ab:cc:bc:59:0d:bd:82:88:
         f1:fa:89:15:c7:8e:55:99:b6:a3:d8:27:ab:06:76:6d:a5:9e:
         e8:9a:a6:3a:8b:f9:8c:8d:b2:14:24:b9:80:bc:a0:06:40:c1:
         d7:c0:c7:85:e7:48:40:5e:2c:a5:7b:63:71:51:01:0b:39:63:
         f9:28:58:ff:e8:d9:fc:fd:ba:af:28:20:86:c1:0b:bf:60:7e:
         e4:31:8c:42:e4:d8:7d:d4:d3:59:5e:9c:25:af:24:b8:5f:1a:
         1d:80:8a:56:88:1d:2a:3e:6e:fd:d0:13:06:f6:16:69:55:13:
         1a:f2:4b:87:fc:19:a4:a3:ae:7c:1c:b0:17:05:1c:e6:89:b6:
         eb:53:35:2b:3c:d0:7f:8d:2b:75:e2:64:3b:bd:71:a5:1b:d5:
         e0:2e:50:bd:4d:ea:12:7b:e5:cd:18:84:d7:31:8b:db:0d:0b:
         bd:dc:ec:71:21:64:64:bd:42:7f:99:57:e6:8a:fc:ac:9a:34:
         61:ac:3f:50:79:ec:40:44:42:13:98:93:42:13:60:13:ac:a5:
         bc:da:57:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:28:48 2025 by rpki-client