Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/d4835f23-c62a-3ced-954d-94b4dda54d19.roa
File:                     d4835f23-c62a-3ced-954d-94b4dda54d19.roa (raw, json)
Hash identifier:          g4TzjIQnVHtsOnOBBKv+VaX+AK8IxxCARFZ2OE5SleQ=
Subject key identifier:   92:11:68:04:16:1A:31:A3:5F:C6:E2:EF:01:C9:89:B3:2F:DB:3C:AA
Certificate issuer:       /CN=940078fb-65b7-4c74-922c-09f44f222b6e
Certificate serial:       010D0C9F4328584812D526D0429DC7A991F3C8C0
Authority key identifier: 45:F5:D6:A8:D8:00:E9:0D:69:24:18:70:88:48:D7:BF:CE:DE:FF:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/d4835f23-c62a-3ced-954d-94b4dda54d19.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     20473
IP address blocks:        2602:f8a2::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:26:d0:42:9d:c7:a9:91:f3:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940078fb-65b7-4c74-922c-09f44f222b6e
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=18d99836-d170-4bae-b473-c281b2427830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b7:8e:1f:76:7d:69:9f:08:5f:a9:79:09:f9:
                    91:b1:b1:5c:64:0e:0d:8b:32:84:08:02:e5:81:ca:
                    41:0f:42:ff:05:11:e9:9f:f6:38:33:53:22:e2:52:
                    8f:e2:84:8f:71:65:98:23:92:1c:cd:06:1f:71:f8:
                    09:e7:6b:de:3f:69:56:04:0d:29:48:89:66:02:f6:
                    2a:9f:21:1e:c7:01:ce:8c:53:5c:96:cf:cd:9f:03:
                    2d:e9:ce:92:c2:39:c9:ef:ab:79:d4:df:77:6e:d3:
                    63:b1:77:86:68:73:cd:d8:24:ec:9b:2e:50:cd:27:
                    67:cb:61:59:c5:ee:a7:5b:07:68:10:10:9a:56:c8:
                    36:b2:68:fc:de:6a:4c:fa:ed:33:e8:ed:5c:ca:0e:
                    11:34:57:7b:04:bb:c5:85:96:b5:47:3e:8a:c2:ce:
                    aa:86:d0:e0:a7:b2:be:36:80:18:4f:ed:29:20:65:
                    db:6f:6a:2b:c4:4f:20:ac:02:21:b7:76:0f:9c:44:
                    73:21:e9:19:4c:9b:a8:fd:1c:6a:eb:38:65:1e:e2:
                    02:c6:a6:96:b8:10:e7:a8:bd:33:0b:ce:d5:7d:89:
                    9f:7a:64:8b:da:bd:40:cf:b7:e9:e9:6a:63:64:fe:
                    83:c6:15:60:ab:3d:a2:d0:81:1c:0a:70:a1:6a:04:
                    fc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:11:68:04:16:1A:31:A3:5F:C6:E2:EF:01:C9:89:B3:2F:DB:3C:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/d4835f23-c62a-3ced-954d-94b4dda54d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.crl

            X509v3 Authority Key Identifier:
                keyid:45:F5:D6:A8:D8:00:E9:0D:69:24:18:70:88:48:D7:BF:CE:DE:FF:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8a2::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:94:e0:7b:b2:7e:89:0e:9a:0a:71:0a:25:d9:ff:12:9b:27:
         32:45:be:7b:57:ef:d0:8e:16:c2:fd:6e:b7:a1:dc:d7:93:4e:
         4f:ce:6f:eb:12:97:c4:29:72:81:92:05:2f:85:e7:93:44:fa:
         4a:c9:fc:6e:5e:f6:06:a3:d1:9c:2c:50:a3:2e:e0:38:40:22:
         89:89:25:eb:9b:84:e4:8c:fe:38:af:51:5c:8d:1d:32:f8:29:
         e6:02:f9:bf:7e:30:b5:81:bc:da:b4:92:87:eb:98:eb:49:11:
         3a:f5:11:8e:9a:4a:4b:4b:0d:69:98:59:80:6b:76:68:ec:99:
         bf:4c:97:c1:db:13:8c:b6:bb:ac:86:8d:31:4b:1f:0a:5e:99:
         a2:01:ec:57:b9:5b:fc:ef:97:0c:18:e9:75:68:7a:a4:46:eb:
         8d:53:29:b1:40:09:1f:78:18:40:ac:fa:d8:ed:c1:04:94:b4:
         ed:0f:4c:bf:a1:7d:80:3d:58:79:0d:3c:ca:a5:7e:12:93:4e:
         2e:04:6c:49:5e:d9:4f:83:62:3e:85:fa:05:04:2c:5d:03:26:
         88:c6:dc:e5:b7:69:18:d9:b6:cb:19:c7:5d:30:02:db:46:e9:
         b1:76:f0:47:0c:24:7e:c4:db:72:f8:e7:cf:f2:3e:2f:2d:1a:
         65:f0:51:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:50 2025 by rpki-client