Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa
File:                     643dea32-ad94-36d9-a6c5-90366af478b2.roa (raw, json)
Hash identifier:          KrazFg02O+Yjj3XdhEjgAUDdMlXFcx0g11NrrbQ9hng=
Subject key identifier:   14:7D:1E:B3:BE:F3:01:7B:91:33:28:F7:CB:DE:34:1A:14:9D:28:C5
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F43285848748B1984D7FB62E613CC0600
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa
Signing time:             Mon 06 Jan 2025 14:00:52 +0000
ROA not before:           Mon 06 Jan 2025 14:00:52 +0000
ROA not after:            Sun 06 Apr 2025 13:00:52 +0000
asID:                     40249
IP address blocks:        2602:fb78:10::/44 maxlen: 48
                          2602:fb78:20::/44 maxlen: 48
                          2602:fb78:30::/44 maxlen: 48
                          2602:fb78:40::/44 maxlen: 48
                          2602:fb78:50::/44 maxlen: 48
                          2602:fb78:60::/44 maxlen: 48
                          2602:fb78:70::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:74:8b:19:84:d7:fb:62:e6:13:cc:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: Jan  6 14:00:52 2025 GMT
            Not After : Apr  6 13:00:52 2025 GMT
        Subject: CN=b7768625-fdbd-434b-a304-565261f3a6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:23:94:b3:c3:07:0a:62:0c:8d:8c:6d:9f:13:
                    11:e9:3f:a9:1c:e1:e6:c8:5a:3f:02:da:b6:02:47:
                    ee:b8:b6:34:66:2c:35:79:aa:b2:b2:19:0b:71:98:
                    ca:6e:1c:61:ee:57:6c:44:af:26:91:87:86:6f:19:
                    c9:1c:60:89:b3:81:6f:fb:83:a6:9f:2d:0f:f0:d2:
                    e5:84:dd:5d:00:7c:2d:ca:46:93:f9:ee:f1:c2:7d:
                    e6:41:ae:1d:87:a0:90:d3:68:76:a8:d4:03:9b:13:
                    32:42:7e:a5:40:7d:bc:40:fa:f5:4d:b8:8c:6d:0b:
                    12:2c:ea:d9:86:ed:e2:f3:d4:33:86:f4:e5:1c:97:
                    83:cd:f1:06:1e:d6:ec:a6:de:fd:cd:68:cd:d8:f9:
                    4b:85:0f:03:0d:94:b9:b2:ef:fb:74:a5:5f:16:07:
                    af:36:a6:69:56:b9:7d:06:8d:28:e2:bd:2a:71:b9:
                    11:f1:22:2d:fb:fe:35:97:40:c0:37:09:83:b3:08:
                    8a:0b:8c:34:78:cc:a7:60:31:dd:69:ee:ee:da:c6:
                    07:ce:f1:cf:96:b7:9d:aa:7b:13:fa:a6:62:24:ed:
                    74:10:82:6a:67:4e:b8:d5:4f:6f:0b:c1:70:04:0c:
                    ae:dc:11:9a:50:b2:9a:b2:48:63:49:6f:31:34:ea:
                    83:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7D:1E:B3:BE:F3:01:7B:91:33:28:F7:CB:DE:34:1A:14:9D:28:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78:10::-2602:fb78:7f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:27:23:ab:3d:e1:1b:ec:8b:32:75:9a:b9:86:89:38:1c:61:
         59:6a:24:12:53:77:88:16:d1:59:74:e5:33:d0:3b:49:09:2b:
         4a:63:77:49:3a:1f:89:4b:c1:96:f8:e3:80:48:72:ea:93:57:
         03:ac:8a:53:ac:8f:e1:7b:cb:10:b1:15:64:ce:1e:2d:02:ca:
         06:b3:80:a2:ef:e3:ce:b3:29:f9:a5:28:6f:88:9d:4b:db:2d:
         8a:03:00:93:9e:c0:d6:af:78:e8:46:41:3d:dd:fc:09:51:eb:
         5d:dd:fb:ce:9e:07:1d:40:1a:1e:e6:5b:30:f1:e0:9c:cc:5c:
         26:05:bd:ef:40:18:9d:2f:2b:33:1c:11:5e:e8:d3:54:7e:be:
         fc:4a:66:a0:26:db:99:6e:0e:6a:1b:6d:5a:e6:a7:81:f1:b5:
         4f:19:3c:3d:01:a8:f5:0a:a0:31:31:f8:b4:f6:c9:da:0a:03:
         ec:7b:50:ad:3c:81:f1:4f:26:84:e6:58:53:df:3a:52:74:cc:
         5c:17:79:f2:a7:1b:de:9f:d8:92:fe:49:fb:12:73:f1:e7:00:
         1c:7e:90:e2:e5:be:63:e0:d5:1b:84:9e:99:08:8a:57:c2:1d:
         5f:21:a7:9a:9e:5b:45:62:d3:19:23:3c:f4:9d:b4:07:8b:5c:
         85:46:83:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:37:47 2025 by rpki-client