Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/283840b4-e99c-3690-8d17-33af512cfe3e.roa
File:                     283840b4-e99c-3690-8d17-33af512cfe3e.roa (raw, json)
Hash identifier:          K6Z5Vt8BkQvWkneTyWKIiAxR5lE55VhbFMBGZbAlwfM=
Subject key identifier:   8B:C6:91:A0:A1:80:CE:F0:97:3F:03:22:E5:C5:3E:B8:36:AD:1C:1E
Certificate issuer:       /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Certificate serial:       010D0C9F432858486D9050270E60F0DD7CD62900
Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/283840b4-e99c-3690-8d17-33af512cfe3e.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     198100
IP address blocks:        2602:814:ffe0::/43 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:50:27:0e:60:f0:dd:7c:d6:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=ef4c959c-c8db-4024-93ce-58ea741e22c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:30:06:e1:24:a4:d8:33:2d:33:31:36:d6:
                    89:44:b6:5f:ae:0d:9d:ec:86:f8:fb:eb:56:3d:27:
                    55:1b:90:a7:97:65:2f:00:6b:3c:fd:8f:54:ff:49:
                    7f:1d:f3:23:8a:e9:f6:75:42:08:ec:d4:3b:c7:5b:
                    7d:c7:e7:b1:cf:5d:f5:06:0c:5a:8e:4a:11:c6:c1:
                    9b:a0:c2:4e:5c:02:8f:37:a8:85:f6:f8:fd:89:e4:
                    e5:6f:ff:a7:4c:da:be:12:0d:94:54:eb:fd:7d:e0:
                    16:1b:f6:df:4d:54:3c:35:dd:c6:01:6d:ab:f6:67:
                    ba:2d:a0:2e:47:b6:8e:4e:0f:71:5c:d3:3f:3c:67:
                    69:3d:44:cb:4d:9e:42:c6:f9:b2:60:99:ef:33:b5:
                    e1:8e:9e:0a:e0:3c:fa:e6:d3:69:cd:fe:97:d3:a8:
                    2a:2a:7e:f0:dd:63:ce:3c:bf:bf:04:72:a6:12:7a:
                    68:f3:d0:c3:2f:6b:38:56:0b:30:79:67:3f:f1:64:
                    f2:59:3e:26:c9:47:4b:4b:51:7d:59:2b:cd:db:99:
                    ac:f6:bf:52:7c:09:d8:3a:73:ee:69:b2:8b:cc:cb:
                    d4:14:ae:83:ad:a1:fe:ff:9f:33:0a:b6:2e:f2:ee:
                    f5:2e:ef:35:72:55:dc:77:cb:4a:b7:63:e8:86:0a:
                    a7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C6:91:A0:A1:80:CE:F0:97:3F:03:22:E5:C5:3E:B8:36:AD:1C:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/283840b4-e99c-3690-8d17-33af512cfe3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl

            X509v3 Authority Key Identifier:
                keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:ffe0::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:a4:6c:13:c5:aa:d1:c1:0e:0b:05:e5:66:4e:57:f8:3a:74:
         93:5a:1c:ba:c3:9c:1d:e2:e9:72:95:f6:90:32:c0:48:cc:55:
         71:53:a5:c8:7f:7a:79:36:49:4a:04:dc:ab:81:d0:cc:5e:db:
         d9:8f:31:da:d3:01:a5:a4:3b:bd:a7:71:bf:99:fd:3e:c7:1c:
         78:92:b3:be:f4:59:82:f7:d5:69:bf:ab:6d:f9:bd:44:a8:ff:
         ce:2d:b9:d5:b8:cd:92:04:79:70:5a:47:51:ad:da:08:d0:09:
         e3:b6:47:8c:b9:e8:69:7e:e0:b6:b9:e7:47:9a:4b:bd:5d:4a:
         42:c3:33:c5:ec:7b:51:06:8b:42:f1:6a:1e:1b:05:fc:80:39:
         da:52:ba:7e:e8:ee:36:98:92:35:9d:a7:51:c1:59:c1:42:07:
         af:3e:fd:1d:e8:c1:b6:75:1a:92:5a:44:5f:16:63:cb:15:a2:
         1d:72:7b:1e:78:25:1a:69:e0:c0:53:67:09:02:c9:35:bd:cd:
         a4:cb:80:30:72:55:16:9a:d3:ff:ce:65:8c:07:23:2f:37:92:
         bc:a2:3d:13:86:ea:a0:24:fe:78:7b:03:11:a5:70:8a:18:4d:
         2c:6f:b4:0a:d4:85:dd:06:e4:85:70:f4:46:3e:cb:35:3f:da:
         3c:79:4e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:40 2025 by rpki-client