Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f46bce4a-e3c6-324e-b5bd-5676ed5674e3.roa
File:                     f46bce4a-e3c6-324e-b5bd-5676ed5674e3.roa (raw, json)
Hash identifier:          SMAmMAKc6tKrYZiCSGXzqNtYV1oJSDZD6bX44DXa38Y=
Subject key identifier:   97:2F:31:6C:8C:F5:01:53:8E:C1:19:C4:50:74:35:6F:DB:0E:1F:B2
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F432858480EA5110118465C884DF53880
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f46bce4a-e3c6-324e-b5bd-5676ed5674e3.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     20253
IP address blocks:        2606:bc40:203::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:11:01:18:46:5c:88:4d:f5:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=4139d38b-c646-46ce-be4c-13da6f338641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:97:6b:7d:39:b7:a4:30:ef:c5:20:f5:7b:
                    30:58:8e:11:90:9a:81:b4:0a:2c:ae:14:bd:53:b8:
                    a0:70:52:80:65:c7:07:5a:e7:2b:f2:7e:f6:bf:3c:
                    c2:96:5a:5d:94:db:d8:cd:3a:81:b9:1b:cc:b6:0a:
                    1a:b1:50:df:20:4a:69:f2:d9:8a:09:ee:de:49:e6:
                    5d:1d:c6:32:ea:3b:d6:83:9f:15:ee:c1:77:b2:ec:
                    02:19:10:44:7c:70:aa:0a:4a:f1:fa:b6:4c:40:67:
                    fe:e8:10:b6:c4:05:7b:fd:e3:9a:89:df:4c:3e:20:
                    9a:a8:a8:9a:00:4e:b2:75:42:0d:03:2f:ea:e6:f7:
                    42:f4:65:1b:a6:f0:06:f0:1a:45:ae:f5:70:39:cd:
                    17:33:e1:0a:dc:7c:d9:ca:5c:f8:11:d1:79:cc:7c:
                    db:42:75:13:ff:e7:51:76:26:3b:c7:6f:ae:8b:cb:
                    ef:8a:bd:5e:84:09:29:10:4f:e2:66:fb:9d:2b:f4:
                    68:de:86:bb:d6:f6:ed:77:41:01:7c:64:ca:bc:1b:
                    d4:5f:9f:ca:a3:20:8f:88:b0:38:3a:31:49:98:7d:
                    dd:50:f9:22:21:7b:0e:7b:ff:5e:8c:7e:c8:23:ab:
                    d6:bf:6d:1e:7f:9e:fa:ba:9c:32:4a:23:b8:de:91:
                    e2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2F:31:6C:8C:F5:01:53:8E:C1:19:C4:50:74:35:6F:DB:0E:1F:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f46bce4a-e3c6-324e-b5bd-5676ed5674e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:203::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:69:0e:28:bd:66:54:05:03:da:ce:5c:03:12:33:4b:cf:dd:
         7d:d4:0e:d8:71:9d:d0:ff:40:48:2a:ae:3f:11:7c:1f:eb:33:
         de:68:08:35:6a:3f:cb:cb:1d:8c:c0:cf:46:ae:e8:39:60:70:
         c8:2f:18:e4:a9:a0:c5:27:e2:29:d0:6d:de:ac:df:04:2a:fe:
         f4:0a:a4:d1:fa:e9:7c:f3:b5:06:5e:0c:7f:4d:91:ee:96:0a:
         38:28:82:de:46:a7:89:f1:51:71:b3:39:d6:c6:26:60:50:6a:
         9b:ca:b2:32:91:ae:fe:13:89:5e:e4:57:41:e9:2c:39:04:02:
         d3:cf:90:af:ca:a2:e1:5b:20:cf:fc:01:a3:38:e0:70:ea:87:
         5e:8a:7d:ef:e7:7d:0b:49:ee:cb:84:49:fc:34:2f:fe:e1:bd:
         87:a0:59:80:d7:62:e5:d1:8d:45:49:12:cb:e7:60:19:c4:73:
         7e:69:fa:e4:36:29:e7:b9:fc:03:c5:50:d5:aa:15:c0:b6:12:
         44:c6:d5:bf:18:49:1b:1d:de:22:3e:49:ed:a9:1f:af:60:00:
         73:bb:2b:ca:97:45:17:da:3e:ca:2b:6e:d1:5f:96:94:93:a6:
         d5:7e:6f:46:29:02:83:9a:01:ed:bb:77:3b:36:b2:41:cb:e2:
         36:55:7e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:16 2025 by rpki-client