Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/2190bd3a-2a25-3c47-bb12-b5c7711c4722.roa
File:                     2190bd3a-2a25-3c47-bb12-b5c7711c4722.roa (raw, json)
Hash identifier:          VeAJ770Jm5zddaH4oMnSDW5DF/2PbXOSwjX2tmV+Plc=
Subject key identifier:   F0:AB:8F:5D:02:82:A2:2A:66:8C:0C:0F:36:CC:EB:A2:DB:38:7E:C5
Certificate issuer:       /CN=edca2973-b815-4276-ae56-405cc9e280b5
Certificate serial:       010D0C9F4328584849457548CF8C0B4217263C80
Authority key identifier: F0:81:36:B0:D5:E5:62:6E:3C:57:D3:5B:4F:FB:39:6D:25:0D:23:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/2190bd3a-2a25-3c47-bb12-b5c7711c4722.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     13727
IP address blocks:        2606:7080::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:75:48:cf:8c:0b:42:17:26:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edca2973-b815-4276-ae56-405cc9e280b5
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=5956c815-a9b6-4de5-8195-b21192e1c6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:44:5f:a6:15:e4:e3:33:b7:67:c5:37:4d:68:
                    59:6c:ee:30:78:86:f7:2d:be:5b:57:30:36:9f:9f:
                    c1:9a:1b:ba:b5:a1:4c:41:af:16:f9:28:d9:89:95:
                    c2:60:5d:07:62:de:57:94:ea:35:02:42:6d:9a:18:
                    ea:4e:cb:9b:dc:67:08:27:fb:52:cd:9c:58:1b:28:
                    63:5f:70:12:50:8b:6a:c5:a6:83:b6:1d:7e:d4:e4:
                    a4:56:9a:a9:43:ad:c5:e4:be:e2:71:96:84:26:c0:
                    34:be:ca:f9:3b:f9:af:da:f8:3f:ce:10:bc:75:4c:
                    4f:ff:cb:b9:f7:bd:0b:cd:22:aa:48:ad:39:76:68:
                    bb:d7:ab:ab:a4:86:6e:1a:a0:24:71:ad:ec:15:34:
                    ef:17:de:a4:6b:1a:dc:2c:02:8a:d1:cb:37:c9:f6:
                    5c:6c:e5:d6:8d:d0:36:f6:12:36:19:b9:99:3a:44:
                    4c:5d:66:c7:ad:a0:4a:ec:74:e5:e9:4a:19:3b:2b:
                    3d:86:08:c1:31:55:dc:f0:6f:e1:79:74:9e:1a:77:
                    a3:dd:02:6a:f8:3f:49:55:8d:0b:6f:ea:73:56:8d:
                    c4:1f:53:f7:1f:cc:9d:a1:5a:e2:51:1c:03:d3:26:
                    0d:49:00:82:9e:fb:bc:bc:e2:95:39:30:5e:69:44:
                    c2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AB:8F:5D:02:82:A2:2A:66:8C:0C:0F:36:CC:EB:A2:DB:38:7E:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/2190bd3a-2a25-3c47-bb12-b5c7711c4722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.crl

            X509v3 Authority Key Identifier:
                keyid:F0:81:36:B0:D5:E5:62:6E:3C:57:D3:5B:4F:FB:39:6D:25:0D:23:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7080::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:19:fd:e0:7b:0f:9b:b1:e3:b5:d6:0e:ea:3e:7c:37:7b:01:
         ae:0c:f9:7a:7e:b4:36:24:d3:00:47:0d:5b:df:8b:85:68:08:
         4a:dc:2f:81:25:e9:da:ce:5e:ef:fc:0c:02:81:1b:57:49:81:
         a8:df:14:5c:b1:1c:15:d8:8a:c5:d8:0a:ce:52:d1:bb:b0:4e:
         05:14:5c:b0:0d:9d:01:ec:60:69:73:e1:90:84:3a:a9:c9:92:
         4f:a3:9c:09:e0:00:d6:2c:31:12:20:f7:5a:47:2b:67:32:df:
         c6:e1:30:01:18:e3:c6:2b:9d:27:d6:6c:d9:62:68:11:a5:b5:
         a4:b4:ce:05:71:ac:1c:df:81:65:68:08:eb:6e:e3:36:2b:51:
         a3:60:38:cf:6f:94:7f:4c:8f:5e:b1:2c:b0:3c:6c:80:c9:f6:
         f8:38:d7:77:b1:34:e5:2f:fc:f8:b3:6a:6e:ae:11:f9:0b:57:
         3e:5f:26:71:b8:2f:6c:54:96:b5:12:73:4a:71:dc:9e:72:e8:
         39:8d:91:7a:44:5a:43:62:e7:e8:87:b6:4b:4f:f1:9c:e0:ff:
         db:cc:f3:31:46:e9:f5:50:a4:2f:2a:38:6a:0d:89:51:0b:34:
         32:56:e2:83:c9:fa:86:65:82:53:c8:fa:5b:40:ef:fc:da:7c:
         1f:46:d5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:32:14 2025 by rpki-client