Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/5a076c95-9699-31f2-acaf-7ad7e7608698.roa
File:                     5a076c95-9699-31f2-acaf-7ad7e7608698.roa (raw, json)
Hash identifier:          PxuiP8A7TSlkpSatZdKUB6TKIVDe0bhxTBbsAcKoc+U=
Subject key identifier:   E5:F9:DE:C3:C0:65:B1:6C:E4:FA:D0:CB:9D:D8:9B:F0:29:3D:67:C4
Certificate issuer:       /CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
Certificate serial:       010D0C9F43285848159FDE88ACD0FD2BFC0B3280
Authority key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/5a076c95-9699-31f2-acaf-7ad7e7608698.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     14618
IP address blocks:        2602:808:4002::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:de:88:ac:d0:fd:2b:fc:0b:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=b6b05524-023d-4154-bb56-78e8ce36df4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:c4:c9:32:27:a8:b1:dd:6c:40:89:a7:4d:
                    e2:cf:e9:47:84:94:d7:18:3d:17:a5:5f:2f:2b:c2:
                    2f:9e:15:35:ba:40:78:f3:f7:d0:12:eb:fc:83:fe:
                    4f:ce:28:a9:30:2c:8a:d2:6e:27:7b:8c:0d:a6:57:
                    68:63:cc:46:97:32:d6:f8:e2:4f:d6:07:5d:03:cd:
                    cd:52:ab:40:76:c6:f1:83:0a:65:f2:8a:0f:b0:c9:
                    be:75:d2:5c:2a:a4:e7:fa:b9:cf:86:48:91:36:48:
                    58:61:fd:7b:75:82:7f:06:c3:78:ef:61:62:60:39:
                    d4:61:76:b0:4d:1f:65:6b:7a:c3:68:77:36:a1:59:
                    64:07:53:c4:f6:b9:fb:21:ee:0c:d3:63:b3:69:42:
                    a6:1f:24:e9:e2:f7:b3:5b:41:ba:58:44:2a:16:25:
                    b4:b5:e0:2c:98:05:84:d2:a5:50:52:63:f8:99:4a:
                    1f:ba:db:73:bc:fd:f9:88:1b:a8:09:7a:0b:2e:b1:
                    06:22:61:8e:c1:2f:03:4a:75:12:d2:65:fd:f1:e2:
                    a1:73:bb:a9:a3:d4:fd:96:da:a9:1b:0b:dc:26:b5:
                    0c:db:17:41:b2:bb:e8:cb:98:1d:7b:ea:45:ce:13:
                    b4:e8:64:af:14:d6:a6:4d:04:79:6f:f5:33:63:55:
                    f8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F9:DE:C3:C0:65:B1:6C:E4:FA:D0:CB:9D:D8:9B:F0:29:3D:67:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/5a076c95-9699-31f2-acaf-7ad7e7608698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl

            X509v3 Authority Key Identifier:
                keyid:03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:808:4002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ec:cd:5b:46:cb:75:3b:61:ee:92:ac:dc:43:d7:18:9c:1f:
         9c:d9:dc:fe:17:00:70:7f:5e:80:b5:ff:68:e4:e0:63:f8:a9:
         4a:2f:b1:39:b6:e5:13:8e:0b:b9:2f:b0:10:1c:b8:f6:91:ae:
         a5:ef:9e:cc:4d:ad:83:1c:96:3e:69:4e:33:03:1d:2c:e9:76:
         1d:84:4c:56:e6:f6:69:43:1a:00:90:a4:0c:e7:69:63:4a:df:
         63:64:c0:d8:8b:5e:54:13:d9:26:a5:be:74:71:c1:4c:62:b8:
         34:ac:82:8f:72:2b:3b:7e:44:c0:d7:1c:29:dd:76:c4:28:c7:
         52:92:89:de:ed:9e:f3:16:d4:d7:1e:5e:bb:58:0d:1b:e9:9b:
         86:c6:6d:e5:22:d1:64:5d:61:10:74:bd:5a:b3:02:cc:90:73:
         ab:b5:de:32:58:b5:2c:e6:98:15:18:7b:ad:61:e9:92:5d:60:
         19:cc:b1:48:9a:46:71:07:e0:ff:c7:2a:be:9e:01:83:74:91:
         b0:df:4a:10:b3:30:ee:1e:4b:2e:92:a2:62:81:0e:2d:be:18:
         22:d6:87:52:6c:46:b8:de:05:10:30:d6:6e:9d:ab:67:d8:51:
         e2:17:bd:1d:61:79:4f:1a:60:7e:d3:72:3c:bf:d7:3b:13:15:
         4d:90:61:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:26 2025 by rpki-client