Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/bcec47f2-9a1e-36ca-aa36-c2b114b450ef.roa
File:                     bcec47f2-9a1e-36ca-aa36-c2b114b450ef.roa (raw, json)
Hash identifier:          jtjvYSQ23LqPaYwemKPz9vFHHnaGE0LzNklRV4YW97s=
Subject key identifier:   03:E5:7B:E0:15:04:F0:92:B7:F8:A0:0B:20:0F:F3:9C:D2:5F:3C:4A
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F432858485E35B52ABBCD137EEA896580
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/bcec47f2-9a1e-36ca-aa36-c2b114b450ef.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     40249
IP address blocks:        2602:fb78:1::/48 maxlen: 48
                          2602:fb78:2::/48 maxlen: 48
                          2602:fb78:3::/48 maxlen: 48
                          2602:fb78:4::/48 maxlen: 48
                          2602:fb78:5::/48 maxlen: 48
                          2602:fb78:6::/48 maxlen: 48
                          2602:fb78:7::/48 maxlen: 48
                          2602:fb78:8::/48 maxlen: 48
                          2602:fb78:9::/48 maxlen: 48
                          2602:fb78:a::/48 maxlen: 48
                          2602:fb78:b::/48 maxlen: 48
                          2602:fb78:c::/48 maxlen: 48
                          2602:fb78:d::/48 maxlen: 48
                          2602:fb78:e::/48 maxlen: 48
                          2602:fb78:f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:b5:2a:bb:cd:13:7e:ea:89:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=e5c1d90e-4dff-4b0d-94d6-bf68009efe68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c9:57:8c:3f:b2:29:57:61:8d:ee:ee:08:ec:
                    1f:e0:cb:1f:e3:59:cb:aa:29:1d:75:b7:e5:a9:b7:
                    4f:f4:6c:9f:3d:13:b3:3d:eb:81:14:01:63:ea:9b:
                    08:14:8e:f9:b8:a3:83:f2:12:3b:80:b5:35:78:50:
                    0d:3f:70:d6:38:6d:22:f2:f7:37:e8:fd:8e:dc:f6:
                    c8:a6:8b:ef:73:2f:0c:76:f7:57:42:5e:81:63:27:
                    d5:60:6f:06:7a:fe:4e:f4:b3:c9:2b:22:68:99:e3:
                    fb:71:45:7c:24:06:c3:87:48:ee:93:f7:9e:d6:4e:
                    2f:e7:98:3e:ab:64:2e:fe:0a:d0:73:53:33:98:df:
                    a8:0b:b8:54:a1:e9:65:da:a0:93:ad:ce:39:61:2a:
                    4b:23:85:00:22:7c:db:c0:b7:e7:ee:08:cb:6f:2c:
                    b1:11:d1:dd:e1:39:f5:11:04:17:ed:f2:d0:ea:c8:
                    99:ba:43:97:11:ec:14:7a:a1:51:a3:c7:39:ae:c0:
                    97:09:cf:93:46:dc:13:96:8c:38:e5:39:c0:77:c1:
                    6e:6a:40:46:98:6a:33:b6:90:a4:0c:a0:9c:c4:b9:
                    78:92:73:20:66:1f:db:75:70:81:f7:3b:6d:b4:1f:
                    0d:18:24:bf:8d:a6:53:19:06:69:d0:9a:14:97:c4:
                    63:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E5:7B:E0:15:04:F0:92:B7:F8:A0:0B:20:0F:F3:9C:D2:5F:3C:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/bcec47f2-9a1e-36ca-aa36-c2b114b450ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78:1::-2602:fb78:f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:56:f4:06:67:ee:0d:c8:79:6c:b0:2d:9d:3a:2e:7f:34:1e:
         25:3f:19:7e:12:d5:f3:38:32:86:d5:0f:11:dd:fe:fb:ba:a1:
         bf:8f:f3:e2:93:d3:da:9a:1c:1f:0c:e4:23:ae:c8:19:7b:98:
         f9:7c:1a:e5:2c:20:ab:0d:46:68:b1:14:65:67:eb:7f:9c:f5:
         ba:f9:c2:7e:a2:57:5a:dd:5e:9b:2f:72:da:47:f6:e9:f8:b6:
         99:d9:8d:98:8f:ea:98:f1:1c:b5:47:10:6b:70:4c:c1:f3:08:
         d4:41:fe:0d:d1:53:0f:ee:83:98:ff:34:d1:5e:99:2e:3e:18:
         24:d9:0e:f3:12:6f:40:04:d4:6c:1a:36:15:3a:c8:40:8a:08:
         de:de:e0:2f:dc:b5:01:1b:3f:97:72:6e:66:7a:17:e4:bf:6a:
         b6:2a:9d:c6:d7:83:db:78:e2:2e:4b:27:90:8c:d5:ae:90:7a:
         2f:c1:48:3f:fb:7f:e0:93:f0:f4:1f:49:f4:ec:b2:22:96:4b:
         3d:c5:b2:85:6e:d9:21:2f:f4:3e:6d:67:63:ad:87:19:70:e5:
         95:a6:59:3e:9d:18:b3:01:6e:45:20:8f:c7:8b:cb:28:4c:20:
         ac:61:e0:4f:9b:dd:c8:9c:f9:e6:95:71:ca:d6:41:ee:27:7f:
         06:dc:f7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:40:58 2025 by rpki-client