Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/e6d28505-b7fb-390f-8e44-e0df401bef2e.roa
File:                     e6d28505-b7fb-390f-8e44-e0df401bef2e.roa (raw, json)
Hash identifier:          Z/F/bVYynxyyLdfJifZMMriTaEF/SkaABCUt/3zoP4c=
Subject key identifier:   2A:95:40:D9:64:8A:35:03:9F:90:90:FB:D1:D0:CB:A6:95:BF:BC:68
Certificate issuer:       /CN=af4b288d-bc7b-443a-b3f4-52662b22717a
Certificate serial:       010D0C9F432858482CD1A9E6F0B5DEF1F2D71980
Authority key identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/e6d28505-b7fb-390f-8e44-e0df401bef2e.roa
Signing time:             Wed 11 Dec 2024 21:24:54 +0000
ROA not before:           Wed 11 Dec 2024 21:24:54 +0000
ROA not after:            Tue 11 Mar 2025 20:24:54 +0000
asID:                     393577
IP address blocks:        2602:f7c5::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:d1:a9:e6:f0:b5:de:f1:f2:d7:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4b288d-bc7b-443a-b3f4-52662b22717a
        Validity
            Not Before: Dec 11 21:24:54 2024 GMT
            Not After : Mar 11 20:24:54 2025 GMT
        Subject: CN=80bcfcb6-11bd-44ad-8f55-36e89b133fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7f:43:8d:cb:2b:5a:40:10:40:d7:48:75:08:
                    34:f5:9b:f0:2b:a5:00:b3:99:e3:5e:e3:2d:9e:d9:
                    fe:3e:ad:fd:32:64:08:cf:78:60:a9:06:c5:ff:c1:
                    26:82:76:7c:65:c0:78:57:45:a6:ff:2a:16:e6:79:
                    db:1d:33:73:25:31:29:de:7c:4e:5b:39:81:28:7d:
                    a4:cd:0d:07:f5:87:e8:4f:41:0c:43:44:17:ac:ca:
                    53:f4:06:3e:a8:18:6c:58:70:6d:ba:87:82:f1:8b:
                    88:3e:25:2b:37:08:15:80:1c:32:97:4e:23:60:ab:
                    3c:53:67:9a:29:92:ae:7a:dd:45:65:65:8b:72:43:
                    df:ff:ae:cb:27:04:b1:db:f9:01:a2:3f:7d:39:db:
                    a6:15:d3:5e:f1:0e:e9:21:62:e7:06:3c:f8:1a:4c:
                    74:da:44:53:11:3c:48:8a:46:0b:de:23:d0:2b:6b:
                    e3:46:a6:5b:67:69:aa:02:c1:db:03:3f:4b:82:1a:
                    e8:24:c7:e5:01:93:d9:42:ba:82:50:69:f9:0d:ce:
                    fa:b5:22:94:3a:21:1d:55:ad:87:88:64:3a:c6:5a:
                    84:9c:f7:93:82:e7:7e:13:96:66:ec:07:e2:fc:92:
                    6b:9b:01:5f:ae:89:4e:ef:1f:d1:3a:f9:18:94:39:
                    63:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:95:40:D9:64:8A:35:03:9F:90:90:FB:D1:D0:CB:A6:95:BF:BC:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/e6d28505-b7fb-390f-8e44-e0df401bef2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl

            X509v3 Authority Key Identifier:
                keyid:33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7c5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:9b:ab:35:40:44:41:e9:d4:df:32:a2:c1:4e:7e:eb:42:1a:
         c0:8c:29:c2:c5:c7:d5:b5:28:1d:b5:c3:f0:d2:f5:24:0e:99:
         fb:64:74:96:2a:2d:0c:71:b0:07:4e:98:cf:f7:17:03:b1:86:
         4e:80:a5:d2:d6:4e:28:ac:9c:b9:2c:a5:67:c0:5c:f2:2a:fe:
         de:cb:66:e4:b4:d0:f7:70:15:b1:be:8e:9a:2a:cf:c4:76:a6:
         81:9e:65:75:03:31:b6:dd:1c:c3:1e:d3:da:6b:a0:3c:f1:de:
         46:7a:73:32:f6:e6:c1:48:3e:8e:f2:a8:2d:81:37:ee:ac:6f:
         a8:a4:85:27:b8:56:ff:91:fa:d3:3c:b4:59:44:e0:6a:8d:23:
         08:03:b5:e7:51:ec:b3:1c:cf:39:70:58:7a:8b:4b:28:3a:f6:
         15:ad:cd:a1:cf:f9:a1:c3:40:7d:f4:39:d9:33:f0:5c:39:63:
         19:c4:61:9a:bb:55:0b:91:68:f8:eb:45:21:90:21:a3:c2:c6:
         cb:ce:a2:87:b0:0c:81:5b:ad:5e:39:eb:51:77:77:4e:89:b5:
         fd:64:05:59:aa:69:35:11:52:f1:d9:1f:f1:3a:f6:ad:1a:56:
         6c:4b:f8:29:03:d2:f3:e3:a9:2c:df:a8:15:53:41:21:b5:0b:
         54:32:cb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:29 2025 by rpki-client