Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa
File:                     fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa (raw, json)
Hash identifier:          klF5Ecx2/yEDksordMF/KIcbebcniSh3Rr0cY2yuqJ0=
Subject key identifier:   AC:BF:31:CC:22:50:6B:A6:3F:50:96:B2:A6:61:4E:42:C3:F2:68:30
Certificate issuer:       /CN=dccebd00-21a5-4af6-b51a-e1f651e635f7
Certificate serial:       010D0C9F4328584823953E8A3D66FE46DBEC2D50
Authority key identifier: F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa
Signing time:             Sun 08 Dec 2024 14:00:51 +0000
ROA not before:           Sun 08 Dec 2024 14:00:51 +0000
ROA not after:            Sat 08 Mar 2025 14:00:51 +0000
asID:                     0
IP address blocks:        2001:505:140::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:23:95:3e:8a:3d:66:fe:46:db:ec:2d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dccebd00-21a5-4af6-b51a-e1f651e635f7
        Validity
            Not Before: Dec  8 14:00:51 2024 GMT
            Not After : Mar  8 14:00:51 2025 GMT
        Subject: CN=60bbfeb8-9070-4211-8cfb-f10b4f585678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:aa:d7:ee:98:f7:1c:50:be:74:d6:16:bd:
                    98:ce:87:28:46:78:2b:d1:8e:51:f8:ce:2e:ca:e1:
                    b4:6c:e9:84:04:24:61:92:4a:63:80:e3:bd:90:5e:
                    02:b5:e8:33:83:d9:ee:19:69:eb:a8:7f:01:01:62:
                    c4:b7:16:20:f7:7c:8d:35:7f:65:03:95:12:94:8b:
                    5f:f5:c6:6c:6e:1a:1b:a6:04:75:f7:39:fd:38:94:
                    a0:19:2b:b5:14:70:8b:b1:65:71:13:b7:f7:cf:13:
                    fb:89:e7:eb:a4:17:cf:11:1d:ce:ed:68:4e:02:30:
                    67:a8:d4:b6:37:b3:86:97:e5:7c:8f:fc:ec:07:e9:
                    39:f8:ff:ff:a7:66:ee:af:a3:f8:da:a4:d5:2e:3b:
                    68:5b:61:e7:e0:4f:78:ee:4d:cc:85:38:fc:17:ae:
                    78:c0:33:7a:22:f1:d3:9b:13:fa:bb:e8:ac:33:7e:
                    ed:74:6f:c1:ab:5e:88:9f:83:f6:6b:37:dc:77:16:
                    37:86:96:e8:fe:5c:45:95:a6:1c:fa:f3:27:df:89:
                    cb:c4:e9:ad:2c:65:65:f9:f8:37:bf:4e:93:f9:b8:
                    79:33:ce:27:d6:0e:86:92:19:e3:02:ce:e1:cb:d8:
                    20:0c:30:a5:9c:22:88:42:84:db:3e:41:e7:8f:3a:
                    5c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BF:31:CC:22:50:6B:A6:3F:50:96:B2:A6:61:4E:42:C3:F2:68:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl

            X509v3 Authority Key Identifier:
                keyid:F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:505:140::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ce:04:8c:30:40:56:8b:59:66:87:49:b4:cd:84:8c:95:e7:
         d3:d0:74:70:9a:3d:cd:12:14:5a:71:78:ba:34:b8:4d:ed:2c:
         bc:89:24:20:42:28:59:87:87:b8:bc:53:3c:db:d0:c4:3d:0b:
         ae:98:0e:4b:e6:1b:40:6e:70:d9:35:c2:76:35:bb:89:eb:c7:
         e2:16:b4:7b:d1:58:94:d8:53:31:77:a4:3e:e8:37:dc:ac:cf:
         f3:03:06:63:a4:36:ba:46:15:15:0a:89:c3:90:00:d8:ae:34:
         c7:3b:9f:43:36:32:18:c0:4e:ab:42:e3:21:fa:e4:0e:91:47:
         89:be:f6:74:83:48:1c:55:a7:21:a8:12:4d:62:f3:01:19:22:
         48:0a:cf:7d:bc:1c:f8:40:65:76:20:7e:ff:d3:79:9a:c2:34:
         54:79:2c:6e:9e:89:6d:df:8e:ed:8f:ca:ed:1f:a2:0c:0b:40:
         c5:51:a0:99:55:20:a2:a2:ca:61:85:8d:3a:36:a5:db:fb:27:
         e6:b8:cd:d4:41:57:73:e0:4f:90:b2:89:b2:25:af:c5:8b:32:
         f7:70:c6:26:c8:d8:2c:a4:00:74:3c:7a:eb:6e:c4:2b:60:6f:
         b5:c2:91:c8:eb:f2:b9:1a:5b:27:05:4a:14:fa:a4:26:5a:fa:
         17:84:7a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:00 2025 by rpki-client