Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa
File:                     fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa (raw, json)
Hash identifier:          7MBBczAAxwA3JIH2pp46jqTg+KQkohQ3v60m/Hofg84=
Subject key identifier:   76:75:B1:7C:5B:18:90:16:42:57:46:2B:2C:36:1F:7C:7D:7A:2D:A1
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F432858488DAB4BA92CE30F1CCCCB5380
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     25697
IP address blocks:        2605:7380:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:4b:a9:2c:e3:0f:1c:cc:cb:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=0f455d70-a82b-4edb-81b8-fc3531d1822c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:84:9b:00:ac:9c:2a:64:60:c4:15:41:1a:58:
                    8e:48:fa:88:bf:7a:4f:40:e9:36:3b:78:6b:64:16:
                    80:57:83:47:43:b7:9e:fa:2d:2a:98:e5:62:c7:67:
                    4e:01:d6:dd:da:ff:6b:c1:1d:22:3e:10:15:91:fc:
                    46:53:1f:09:d3:5d:0a:28:f6:b6:68:56:26:3e:af:
                    32:6e:da:b0:3f:20:53:32:a9:d9:cd:fe:b2:c6:c1:
                    3f:c3:4c:1c:6c:3d:49:b4:9a:96:ce:92:e9:8a:6b:
                    2e:b0:11:8d:59:fe:ee:2b:d1:2c:8e:d3:3e:16:85:
                    07:f5:f8:d8:20:31:c2:a0:ac:09:96:61:ab:c9:12:
                    c6:84:1e:e7:81:41:ff:97:24:8f:a0:a1:41:ec:20:
                    b7:98:f4:71:ba:f5:1e:0f:d7:5c:8b:7b:eb:4e:4c:
                    a1:a8:5b:4a:d4:1d:e2:9e:f3:33:a1:1d:f0:e1:6e:
                    93:be:39:b3:20:75:b8:86:85:c9:49:3b:47:f0:70:
                    d4:56:00:e5:cd:7b:f0:b6:ce:49:46:f1:20:23:f6:
                    dc:a6:71:f4:91:e6:1f:3c:29:ab:a4:dd:5a:c8:8c:
                    8c:bf:21:38:20:f2:ea:65:b3:94:f8:c1:11:77:e0:
                    cc:0d:83:82:a7:32:13:c8:74:15:ba:34:e4:b7:ad:
                    f4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:75:B1:7C:5B:18:90:16:42:57:46:2B:2C:36:1F:7C:7D:7A:2D:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7380:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:a5:1d:94:74:9e:39:39:18:f7:2d:b2:dd:ac:35:2d:90:d7:
         c1:3b:25:30:61:ec:0c:00:73:2f:d4:f0:51:2d:b3:20:ac:a5:
         9a:91:4c:2a:9a:f7:76:41:54:e8:b0:c4:0b:61:c5:4e:0b:8f:
         d9:86:e5:48:db:54:0f:ed:82:d0:ef:9a:1f:90:79:58:4d:77:
         26:e1:b5:ec:b5:38:bb:31:9b:b1:88:14:6c:4b:df:62:e3:53:
         46:bb:bc:f2:08:4b:b3:eb:13:21:42:f6:d6:ad:60:17:6e:66:
         0a:96:58:bc:66:c9:39:b3:9a:78:94:6e:98:a3:aa:39:9a:16:
         f7:6b:e4:33:ea:69:5f:d1:38:2b:aa:64:d5:63:54:1a:2d:62:
         7d:62:bf:60:4c:47:b0:0b:05:29:20:b4:09:10:06:c1:00:f0:
         16:d2:f3:5e:31:c0:f7:bc:e6:36:36:62:2c:ba:80:bc:87:0e:
         aa:d6:78:7e:06:dd:55:d4:92:5a:d2:7c:da:64:67:42:a7:22:
         e0:30:bf:9b:d7:28:10:ae:ab:cd:2e:7f:09:d2:12:0b:5c:66:
         ad:bc:1e:42:3f:ac:03:1b:f5:df:03:1b:5e:47:68:7c:4a:ec:
         e4:64:6a:9a:bd:87:9f:4d:f5:03:06:2f:db:52:d8:0d:bd:71:
         02:50:0f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:31:52 2025 by rpki-client