Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/43b85e93-b21a-355f-8f0d-adb59dbff348.roa
File:                     43b85e93-b21a-355f-8f0d-adb59dbff348.roa (raw, json)
Hash identifier:          MEeAwZEyGYQheWbMMBRXAncQhtX8ENJY0pJCH6KAQN8=
Subject key identifier:   18:6D:E1:D3:D2:A8:93:F0:17:57:E8:6E:69:A8:BB:38:AA:C0:67:0A
Certificate issuer:       /CN=e4f064d0-9017-41e7-be21-c7b9883020d5
Certificate serial:       010D0C9F4328584849457752CDCB2CB2AAD04308
Authority key identifier: 6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/43b85e93-b21a-355f-8f0d-adb59dbff348.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     21903
IP address blocks:        2602:fa6d:200::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:77:52:cd:cb:2c:b2:aa:d0:43:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f064d0-9017-41e7-be21-c7b9883020d5
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=c21360c0-dded-42f5-9dd8-374a1c2ac28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6b:37:ac:b1:47:4d:70:0c:2b:23:e8:8a:fe:
                    06:0f:71:9d:61:b3:4b:35:1c:be:97:60:57:44:60:
                    e4:c5:35:4e:bd:c3:4d:9a:aa:d1:90:40:4a:a5:7d:
                    e1:2f:41:46:ab:a4:04:92:d9:4a:0f:2c:20:0c:8f:
                    b5:e9:df:0a:75:15:06:fb:cc:cf:d2:8a:0f:d6:af:
                    61:8d:ec:cf:78:3d:69:6f:fe:c4:82:96:ad:ed:d0:
                    73:fe:55:f2:b8:01:65:67:a4:6e:f1:ed:64:bb:47:
                    a9:c0:04:61:c1:6d:fd:d4:13:a4:91:99:44:98:cf:
                    a2:44:4e:b0:4c:cc:21:20:84:bd:3c:6e:1d:c5:01:
                    eb:49:7b:1e:8d:64:2c:3d:51:20:74:14:f7:81:e9:
                    97:af:a6:2f:b8:1e:ef:13:22:df:b9:1b:d7:20:d7:
                    8a:d8:95:65:aa:24:f5:2c:49:5f:a7:b4:7a:b5:e9:
                    fd:d5:b9:f1:98:b3:cb:6b:87:7a:2a:10:81:ca:23:
                    1c:a5:53:bc:48:75:17:a5:7b:93:4b:d8:ea:ef:58:
                    79:51:7c:e7:e9:2b:67:ca:47:bb:ca:19:37:08:76:
                    7d:7c:ea:f0:d2:d7:0a:fd:e6:c2:f2:9e:22:39:43:
                    38:bd:d5:28:be:6a:a6:0e:e7:8c:f0:e1:67:1c:6d:
                    62:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6D:E1:D3:D2:A8:93:F0:17:57:E8:6E:69:A8:BB:38:AA:C0:67:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/43b85e93-b21a-355f-8f0d-adb59dbff348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6d:200::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:07:30:49:7f:a7:36:dd:de:66:e7:e3:c5:37:2d:db:8d:a2:
         f3:46:37:1f:e9:b6:ff:a5:09:f3:5c:e2:97:43:bb:8c:9d:ab:
         70:04:38:2a:11:ae:b3:4f:a7:8d:19:2d:6d:de:b4:f0:f3:00:
         28:e6:67:da:8f:59:fb:e3:13:25:bb:89:9b:33:20:35:59:1e:
         3c:b8:d9:72:12:dc:1f:1f:96:44:37:0a:f7:4b:01:39:09:96:
         e2:19:7a:45:59:a6:30:eb:82:62:87:05:12:c4:f5:06:84:2a:
         28:9a:dd:f2:fe:7e:11:8e:71:59:ce:26:76:8a:f5:35:1d:f0:
         b9:e7:46:de:ba:4e:61:27:b6:c9:de:15:f1:55:16:a8:a2:1e:
         15:0e:14:9c:0f:7e:e6:fa:f3:07:8d:f2:81:40:f5:e4:3d:d1:
         3b:3a:1f:1b:c5:ac:b1:2d:e4:0d:7d:1a:f3:75:1e:1b:6d:cc:
         2b:38:e3:f1:d0:cf:87:8d:bc:80:87:b3:88:5a:4e:92:2c:78:
         d1:37:83:73:87:44:3e:df:99:ab:57:55:92:c1:c7:9c:2c:fd:
         df:16:71:4e:93:99:ea:fc:7f:64:f4:db:81:df:0d:f3:2e:7f:
         41:03:84:31:fd:53:5c:bc:96:74:a4:fe:ef:f6:9a:74:9e:73:
         e6:dd:bd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:34 2025 by rpki-client