Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/f9400004-48ae-3c7c-ac1b-3e38fa29b155.roa
File:                     f9400004-48ae-3c7c-ac1b-3e38fa29b155.roa (raw, json)
Hash identifier:          G/wMYQed0I2mJWz8bZzAkBfEsLgHr9hx9EIKx2Cs5cE=
Subject key identifier:   8D:A6:0F:24:D3:4A:C0:BF:84:8A:05:FC:5A:6D:A6:E4:C4:2B:6E:E9
Certificate issuer:       /CN=de848e16-b429-4505-9234-f6d889fd1438
Certificate serial:       010D0C9F432858480BDA74DFBA4868E59A4F6C00
Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/f9400004-48ae-3c7c-ac1b-3e38fa29b155.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     23470
IP address blocks:        2602:fc2f:f01::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:74:df:ba:48:68:e5:9a:4f:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=685abc31-9665-4635-81b9-e9b11dc8bafb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3f:74:78:41:7c:a1:00:90:77:d5:1f:54:37:
                    2a:b9:86:57:17:2a:02:eb:de:20:d5:d4:a7:ea:85:
                    ae:c6:64:70:3c:0f:0c:48:f6:37:92:ef:b4:c4:e0:
                    41:ec:06:e9:98:df:40:de:e5:d0:4a:17:1d:f7:79:
                    87:39:9e:8e:1d:a9:b2:a4:e0:da:9b:48:7b:4f:6a:
                    96:b0:e5:fe:9d:84:a1:93:31:d3:ab:d8:52:e0:26:
                    71:08:70:7a:94:8b:49:71:cf:1a:f4:f7:87:0d:ff:
                    44:39:1e:42:58:cc:75:ef:fa:44:2d:f3:24:d7:ca:
                    71:fa:f8:88:6a:c9:fb:bd:fc:54:5c:c2:0b:b3:da:
                    32:c6:c9:8a:1a:9a:1b:c2:44:64:e8:ab:3e:d6:f4:
                    43:7c:0d:72:17:9d:d4:fa:39:01:9e:b1:64:be:78:
                    f9:e5:bf:d1:36:83:eb:e8:ac:77:71:98:31:70:ce:
                    51:3d:84:4f:1b:55:de:63:37:06:f8:f1:5c:2a:6a:
                    a0:4f:05:84:63:77:43:03:4b:fc:05:52:72:9c:69:
                    34:c5:87:ff:38:25:2f:a6:df:c4:4b:a5:c5:9c:4a:
                    69:a8:80:c0:73:fb:b8:f2:e1:c7:33:6f:1c:c7:bd:
                    22:e2:c8:ac:68:1b:21:d9:58:48:3c:b3:f6:3f:b0:
                    50:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A6:0F:24:D3:4A:C0:BF:84:8A:05:FC:5A:6D:A6:E4:C4:2B:6E:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/f9400004-48ae-3c7c-ac1b-3e38fa29b155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl

            X509v3 Authority Key Identifier:
                keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc2f:f01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:f5:f1:db:ac:8b:52:6d:bf:80:e4:60:50:67:f9:d6:16:52:
         a5:a7:8f:92:3f:31:7d:33:43:8c:b7:ac:7a:36:b9:2f:c0:5b:
         0d:fa:d0:5d:9c:93:a5:f9:68:54:4e:b6:10:71:81:90:ed:51:
         6c:dc:f9:76:05:4c:e9:8f:03:99:1e:a0:2c:47:0a:12:71:08:
         84:af:ee:03:78:69:6d:50:86:7b:01:36:32:b1:65:19:f4:b2:
         2a:7a:dd:78:5b:8c:44:6b:46:26:00:19:ae:07:8a:14:ba:dc:
         6f:7a:73:d9:c1:ea:01:3c:e7:c9:15:f4:5b:fc:4e:79:f8:41:
         49:d1:e5:a4:98:19:c6:71:bc:10:6b:2e:98:99:18:f9:e0:98:
         86:b5:ac:91:2d:48:98:0a:2e:d5:54:40:f3:f1:ba:2a:04:3f:
         fc:11:95:d1:e7:b0:2b:4c:72:a9:55:7e:0a:ef:8e:72:17:ae:
         06:82:f0:b9:2e:34:f2:3e:ca:56:22:b7:cc:f9:0a:00:61:5a:
         4d:4c:f3:45:33:d0:d9:ce:d3:c8:c3:b4:01:a4:bb:e3:5b:6e:
         c1:83:bb:bd:4b:1f:11:2f:03:be:5a:1b:1b:5b:be:a1:35:2e:
         04:5b:72:a0:4e:2a:d3:f6:02:81:af:23:8a:ad:61:d2:e4:52:
         2f:44:6f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:03:25 2025 by rpki-client