Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa
File:                     7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa (raw, json)
Hash identifier:          oVGwWbrWPxj7F0rkyfPDE70e9ZOSVo6LpFtEHcaYTYw=
Subject key identifier:   54:59:C3:38:A3:28:64:2B:23:5A:E9:ED:AB:01:23:38:4B:8F:37:0D
Certificate issuer:       /CN=e175b8e9-bd62-4026-9a15-873e2b01713b
Certificate serial:       010D0C9F432858486D90594B47BB17D29C96E9A0
Authority key identifier: 2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     3464
IP address blocks:        2607:f808::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:59:4b:47:bb:17:d2:9c:96:e9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e175b8e9-bd62-4026-9a15-873e2b01713b
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=2b3568b3-18ea-4479-80d8-8d6b30948b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c7:52:b9:c4:e1:7e:d6:49:70:24:ce:88:ed:
                    44:0b:ba:24:a4:ab:8d:6c:e3:c2:93:8f:6c:bd:4f:
                    79:c2:1b:f1:15:81:06:8b:37:99:d4:c9:85:5f:82:
                    71:89:60:bc:ba:85:64:e0:4b:4c:1f:a7:ba:be:4b:
                    80:09:c8:cb:ac:53:b5:d0:09:92:ce:77:55:98:d6:
                    dc:6b:fd:d6:ee:a6:89:f1:85:bf:4a:8b:10:1a:5f:
                    be:fa:5b:47:8f:ab:93:9f:6b:62:98:1b:ae:49:e7:
                    47:7a:4a:ab:b5:c2:3f:a3:e1:ab:3b:ab:f5:51:76:
                    43:74:17:0b:52:20:95:9a:4c:91:2b:79:aa:98:07:
                    e5:84:2c:dc:31:d6:b9:19:21:64:9b:d6:e1:69:e9:
                    39:d2:dc:4f:b2:6a:9c:9a:e6:dc:86:0b:e8:9a:a3:
                    86:a6:b6:e6:f5:e2:86:9e:bc:e8:03:e9:2f:c4:5e:
                    02:37:1c:8e:50:82:04:a0:d3:c4:48:71:bc:62:91:
                    82:2c:ed:e6:1f:7b:9f:52:ed:98:91:89:f6:6c:26:
                    2c:cb:e0:12:4b:f6:1a:92:70:73:16:28:ee:1a:d3:
                    65:d4:39:ab:37:b2:4e:5a:0e:84:21:b9:1d:3d:2a:
                    61:4b:68:f6:4f:2a:94:f7:76:03:eb:9a:1a:1b:78:
                    be:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:59:C3:38:A3:28:64:2B:23:5A:E9:ED:AB:01:23:38:4B:8F:37:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl

            X509v3 Authority Key Identifier:
                keyid:2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f808::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:3a:cf:97:80:94:3a:38:ba:75:53:fe:fd:f0:29:47:10:19:
         42:35:fb:b9:91:be:33:f6:82:95:02:41:bb:77:1b:8b:40:38:
         d0:7d:e4:76:4f:66:54:84:bd:8e:ce:44:59:59:51:93:21:c9:
         60:4c:fd:5e:e6:12:94:01:cd:b4:01:03:8a:bd:20:d4:7e:c1:
         b3:6e:17:0a:bf:75:48:ae:c8:88:42:73:e6:de:4e:1b:07:0d:
         eb:ea:82:dd:db:95:e4:cd:87:85:2b:1f:ad:19:fe:db:3d:32:
         87:c8:0d:dc:85:2d:89:bd:94:60:bd:da:cb:b7:c1:cc:92:8d:
         dc:ef:0a:cb:b6:f5:00:7e:d3:41:52:02:e2:8a:5e:f0:79:10:
         91:69:47:ce:f8:7c:e6:85:b4:d2:68:76:0c:32:d0:4a:26:0b:
         1b:76:a0:38:e0:24:c9:44:b8:5e:c2:90:a2:dc:50:4c:8d:cf:
         e7:b2:48:ab:d2:f5:6e:d4:e7:d0:93:6e:3c:1a:83:0d:4a:10:
         8c:2e:b3:f3:9f:01:5a:70:14:42:49:ca:da:f7:35:d1:ae:11:
         31:be:94:ce:27:3b:2a:d1:10:0a:f5:d4:0e:02:c8:59:1b:3a:
         d7:b1:75:ea:16:6d:58:a9:2a:54:e7:80:f5:73:d9:d8:ed:88:
         91:dc:88:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:23:51 2025 by rpki-client