Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/a06d614f-16f7-331e-8592-956602a28aba.roa
File:                     a06d614f-16f7-331e-8592-956602a28aba.roa (raw, json)
Hash identifier:          GiBhCaMC5Tl40bZw12e+Ah8cFwhYwpuKhHGak2yh8VY=
Subject key identifier:   24:0A:29:42:D1:BB:D8:B6:BF:84:9A:19:D5:9B:D5:E4:A6:2F:86:DE
Certificate issuer:       /CN=ec23d019-d079-49df-94b6-ad79d138e90f
Certificate serial:       010D0C9F432858486D904DD6009BE72C9D93E200
Authority key identifier: 7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/a06d614f-16f7-331e-8592-956602a28aba.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     399196
IP address blocks:        2606:7540:f000::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:4d:d6:00:9b:e7:2c:9d:93:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec23d019-d079-49df-94b6-ad79d138e90f
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=9eb0944a-91f5-4c01-b0f9-ca980bd9efd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:12:48:9a:1b:ae:b3:de:db:fc:74:ff:0d:d7:
                    fa:44:32:e9:7d:92:9e:93:c6:40:0b:02:28:80:1f:
                    a3:fb:34:36:16:a0:45:fd:1e:27:e0:9b:d5:0c:59:
                    b8:9e:27:dc:c5:c9:74:90:c4:b8:35:df:c2:56:c4:
                    d3:3a:99:8a:2b:c8:2e:ad:9c:39:fd:0e:ef:12:a1:
                    17:71:ad:26:f9:be:05:a3:4a:a0:ac:dd:e1:f4:14:
                    9e:bb:0f:31:91:f6:f7:6e:7a:1d:b2:b1:0d:d8:25:
                    8f:dd:b6:5c:ed:9a:da:0e:71:3f:76:31:37:db:6b:
                    af:e8:50:eb:b3:a1:1d:8c:21:fc:08:37:0f:62:68:
                    54:af:61:83:42:4f:80:4f:07:19:bb:ae:2b:e5:80:
                    fd:ac:87:ed:4e:f5:ea:d0:b4:b4:b2:bb:b2:c3:4a:
                    a8:aa:8d:42:67:1e:d7:ad:23:12:32:43:97:46:be:
                    15:c2:02:43:0f:ca:1c:0b:83:b1:96:5c:8a:26:96:
                    60:f8:82:60:cc:68:4e:a5:3c:ad:3b:0c:9a:e6:d4:
                    2f:54:d4:81:d6:66:b6:95:1d:c8:1b:9e:c7:31:2f:
                    28:c7:3c:f1:f3:e8:35:21:92:c9:eb:ae:37:ce:1c:
                    de:41:e2:98:d3:a9:4f:57:f1:8e:af:bd:b4:ca:f6:
                    be:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0A:29:42:D1:BB:D8:B6:BF:84:9A:19:D5:9B:D5:E4:A6:2F:86:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/a06d614f-16f7-331e-8592-956602a28aba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl

            X509v3 Authority Key Identifier:
                keyid:7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7540:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:b2:89:31:40:f4:a2:3a:eb:c6:db:2d:8f:91:9e:17:33:bf:
         d5:4c:24:e4:95:0c:04:33:91:73:3c:5d:4b:b7:41:34:3e:6d:
         f8:c8:eb:89:de:ff:76:c8:f3:ce:4b:45:f2:78:2e:65:a0:5e:
         07:c9:75:06:38:5e:e7:08:37:58:96:ec:5f:58:97:8e:1d:6e:
         8f:d4:04:17:01:30:5a:9d:a9:d0:9a:1e:6c:83:db:42:cd:56:
         13:63:e8:ad:6e:e5:45:8b:60:16:55:39:4f:6b:89:78:eb:c8:
         2c:cc:84:dd:74:02:e3:31:9b:ef:f0:48:53:5d:6e:5f:e1:e8:
         ea:42:14:6a:95:9e:f6:e1:7f:8d:df:a4:88:57:af:e7:9e:71:
         29:77:47:d9:35:d9:9d:3d:67:b4:16:cb:c5:62:b5:d0:0b:69:
         a6:86:a8:c9:f5:50:bc:d7:a2:8c:1d:16:3f:5e:d9:5b:95:d3:
         14:ec:e8:d6:6b:e4:e9:76:f5:a9:02:dc:6d:59:f4:65:53:3d:
         cf:4d:96:9e:f9:f7:dd:d2:0a:e3:a0:bd:29:d2:ca:68:41:7c:
         74:b2:10:65:68:c6:61:5e:57:9c:43:e9:5d:d0:45:92:c4:f9:
         39:55:a0:2c:aa:12:12:35:e6:00:9a:f5:9d:ca:39:bb:2f:93:
         9a:4f:14:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:44:58 2025 by rpki-client