Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/69b645cf-acb5-3301-b224-e2fffc80d0af.roa
File:                     69b645cf-acb5-3301-b224-e2fffc80d0af.roa (raw, json)
Hash identifier:          TI6Sm0Uk/rBRoPdyZsP52gAWtC7xEz1JXHvf7HwjR4I=
Subject key identifier:   78:71:DA:D9:5C:F7:A4:AA:10:AA:04:C4:62:38:D7:94:24:ED:58:22
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A6EF2BE52B8F564E7517C
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/69b645cf-acb5-3301-b224-e2fffc80d0af.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11351
IP address blocks:        2600:6000:fd40::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:6e:f2:be:52:b8:f5:64:e7:51:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=41d983ec-2e5b-4369-b023-919e9ee2b794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:e1:db:61:0f:36:a3:cf:12:3b:09:ef:f0:
                    1e:0b:92:af:0e:0a:dc:df:3f:75:90:80:81:13:b2:
                    2b:c8:a2:d2:e1:2e:65:9b:de:8b:5d:b3:fe:bf:5c:
                    a9:95:84:8c:56:3f:e1:b3:bb:ca:ad:35:72:a2:2c:
                    a5:fc:c7:32:9d:43:99:74:8a:2e:6c:72:06:8e:67:
                    d8:63:20:8b:35:49:4c:0e:26:cd:ab:c8:da:94:b8:
                    05:87:bf:71:68:67:59:61:1b:f7:37:9e:aa:78:c0:
                    8c:71:72:9e:f2:3e:fd:84:d6:76:60:0e:39:c5:98:
                    d7:6a:4e:28:c9:7c:bf:e0:89:2f:2c:a1:24:3e:84:
                    80:66:80:7f:f6:f3:4a:04:76:26:18:d9:a8:9a:9a:
                    9a:6b:07:58:7d:5e:28:11:2b:66:85:91:cb:72:30:
                    fb:3b:b2:00:15:14:59:6d:37:63:91:2b:8d:71:98:
                    18:5f:09:5e:da:b2:b5:e6:85:3c:ea:6e:20:b9:5d:
                    a4:b5:d1:d1:40:1b:a3:6f:7e:ad:79:12:9b:f8:a1:
                    89:db:aa:ac:b2:c3:2e:1e:0e:cb:7d:2c:21:1d:d0:
                    4a:99:64:06:34:7c:dc:fb:d3:b7:23:3d:26:ec:34:
                    89:79:9d:c2:39:9d:e4:91:c5:c9:0a:23:55:14:67:
                    a5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:71:DA:D9:5C:F7:A4:AA:10:AA:04:C4:62:38:D7:94:24:ED:58:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/69b645cf-acb5-3301-b224-e2fffc80d0af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6000:fd40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:32:92:f1:51:18:87:20:58:d5:ed:de:bf:20:ab:a3:f4:ef:
         3a:04:3b:e9:e5:e9:b5:55:3b:86:84:f7:e6:cf:8f:07:9b:6b:
         6f:89:76:89:3c:c5:e8:06:87:b5:ea:f2:30:2e:53:e1:e5:17:
         c4:65:69:5e:42:63:0d:00:66:a5:14:a6:32:04:bb:c5:fc:9d:
         78:a5:2f:58:c1:e8:3a:9f:9f:ea:a9:ac:1c:49:99:91:46:89:
         c9:4f:ea:76:df:d0:85:52:a2:04:5d:e0:8e:64:c7:73:04:1b:
         9c:b1:81:31:bb:22:58:d1:89:09:35:b6:da:da:a3:9d:8a:98:
         22:ff:82:96:a6:63:95:96:a7:c1:dc:8f:ea:43:4b:b2:27:80:
         50:39:72:6b:60:d4:a1:ba:96:5f:b0:1b:9d:99:f0:d8:97:42:
         3a:53:12:35:78:95:58:7d:ee:0e:61:68:9f:18:bf:26:48:8d:
         36:05:f1:71:80:9a:f9:b5:bd:bb:09:8f:90:f1:7f:1c:75:e1:
         39:bc:12:0c:33:ed:76:18:41:82:e1:19:5e:53:bb:62:90:1e:
         71:30:b6:53:f1:99:fd:5b:d1:71:88:8f:ee:e6:f0:b2:6a:bd:
         46:72:6a:b8:5a:2d:be:b8:a0:46:76:53:e9:c2:bb:2f:e9:08:
         d7:31:ea:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:21:45 2025 by rpki-client