Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d5660ed6-4eae-32d0-a79b-c318c7681ed1.roa
File:                     d5660ed6-4eae-32d0-a79b-c318c7681ed1.roa (raw, json)
Hash identifier:          4IwfOw4OMGo7e3rQzt8AsUO97nBEnn/UG+d0z7MZHgk=
Subject key identifier:   D4:96:21:91:71:E6:D6:41:FD:9A:2B:51:53:7D:DB:AF:BF:57:3C:7A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A79D2713D2E4627D9E440
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d5660ed6-4eae-32d0-a79b-c318c7681ed1.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11955
IP address blocks:        2606:a000:1700::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:79:d2:71:3d:2e:46:27:d9:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=e9bfa31f-6af1-4824-9ef6-625a8766a6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ce:f2:52:7a:b7:f7:60:89:a9:8f:d9:47:0e:
                    6b:cd:c1:11:ba:62:a3:a4:b5:c8:18:54:5f:81:9c:
                    82:70:46:48:5b:4d:7a:bd:19:a9:c7:7c:19:2e:ba:
                    62:66:89:f0:aa:25:67:ef:49:b1:0d:a2:0c:bf:f2:
                    9b:67:f0:9f:b1:cb:e3:3f:bb:4b:0f:5f:18:6b:08:
                    9e:3a:af:4a:b4:0e:0a:7c:61:35:4e:6a:a4:cc:9c:
                    2e:30:f1:fd:ed:5c:42:5d:f6:d4:39:c6:84:cd:1a:
                    58:83:0e:3f:ee:0e:d7:7d:59:1f:7d:e7:16:ca:78:
                    28:b0:5d:ef:91:4f:1f:b5:3c:b4:dc:9f:ca:8c:02:
                    9a:40:e5:19:19:f3:8a:bd:1c:af:5d:3e:6d:95:ad:
                    60:1a:09:71:2d:5c:3b:9d:0a:92:ab:b6:9b:a7:7c:
                    6c:d5:66:90:30:06:c6:51:3e:dd:c3:f9:7a:59:0a:
                    ac:28:38:1d:a9:71:2f:08:8d:12:f2:8d:7c:4c:0f:
                    bd:11:20:07:99:d8:13:7b:f3:78:54:97:6c:9a:d1:
                    83:76:cd:ae:94:72:f6:27:12:7f:da:58:b8:b0:08:
                    cc:9a:62:75:17:fd:b9:ba:e9:cf:00:0c:c2:9d:25:
                    6b:72:17:db:bb:0d:16:be:50:eb:eb:6c:4e:18:81:
                    67:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:96:21:91:71:E6:D6:41:FD:9A:2B:51:53:7D:DB:AF:BF:57:3C:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d5660ed6-4eae-32d0-a79b-c318c7681ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a000:1700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:7d:40:9e:ef:63:99:42:a0:d0:5b:cc:48:12:83:47:39:30:
         06:86:b6:42:52:07:6f:6d:c9:1a:46:9e:5d:e4:3b:38:a5:98:
         5b:d3:f5:6a:69:26:41:9e:25:19:c4:54:8e:93:74:35:13:13:
         1e:93:19:56:72:9a:b1:46:40:80:12:ea:c8:e7:52:9f:98:99:
         ac:8e:76:0f:2c:3b:28:3b:c7:e3:cc:77:e7:3c:e7:7c:1b:c9:
         e2:11:3e:d3:c6:2d:4a:6a:28:cc:83:2b:fd:06:b2:42:cb:d8:
         62:81:ea:06:ef:02:14:16:a5:40:ec:69:fa:f0:fd:cd:ef:5a:
         0b:f3:bc:69:02:ff:72:94:55:05:c9:ce:7a:1f:0e:46:0a:b2:
         41:a5:a7:de:0a:9e:41:c0:9c:76:f2:60:8e:36:65:e2:f5:2f:
         d7:35:9e:06:8a:d3:79:e3:b7:44:98:24:62:82:c0:98:b8:b7:
         28:a8:e9:ce:2d:2d:43:33:d2:ce:58:96:68:b2:f5:b3:9d:7f:
         89:79:9e:fb:ed:52:b5:5c:d9:5d:69:dc:e0:e1:2c:7e:30:20:
         88:a7:41:e8:85:02:2e:11:aa:af:7c:97:1a:d2:69:7b:16:12:
         5f:cd:ae:9b:83:9b:53:19:d8:9c:f2:ad:9f:a8:ef:83:df:af:
         e0:7e:5a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:40:54 2025 by rpki-client