Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/ad74d413-d09f-3c72-81ef-ecad2ed09e58.roa
File:                     ad74d413-d09f-3c72-81ef-ecad2ed09e58.roa (raw, json)
Hash identifier:          gFbDlDo9gldxogjVMG2NKUeoV3Avvl1fkaUmG8gRdxc=
Subject key identifier:   92:CF:15:FC:07:03:66:0A:D4:38:CC:2F:22:D8:7B:07:B3:D9:E6:22
Certificate issuer:       /CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
Certificate serial:       010D0C9F4328584819CFBFE3FA882AE8BB9B7B30
Authority key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/ad74d413-d09f-3c72-81ef-ecad2ed09e58.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     398960
IP address blocks:        2602:808:4000::/44 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:bf:e3:fa:88:2a:e8:bb:9b:7b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=9a2584c5-692b-4b69-b382-eefe9833cf5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:12:59:2e:21:9f:39:8c:79:72:2b:cd:dc:db:
                    06:73:e4:ee:91:0a:28:80:a3:b9:b4:3a:68:dc:c7:
                    92:53:d0:48:bc:bc:5a:df:93:05:e9:27:fb:90:ce:
                    8f:8d:28:03:39:b5:66:53:54:d1:23:96:dd:42:3d:
                    c9:b3:07:cf:e5:e7:47:20:9c:87:cf:29:99:09:88:
                    f1:95:1d:f5:50:43:85:02:af:ef:d1:b3:4a:17:1b:
                    c4:95:7a:d6:f3:2f:1e:e4:68:72:e9:6a:02:aa:90:
                    22:c1:30:6f:e4:29:88:ad:31:44:a8:3d:68:ab:28:
                    6f:55:41:58:ee:6c:66:3e:d6:6c:c9:33:a7:d8:23:
                    16:03:23:49:01:6e:9e:a0:6c:06:40:4b:e9:db:28:
                    fd:d2:c5:0d:1e:d5:eb:90:0c:5a:79:19:76:9e:43:
                    2b:ac:2b:bc:93:ac:02:0f:4a:36:a1:36:12:c8:4b:
                    46:7e:f6:b3:64:8a:c5:7c:2d:4e:dc:38:32:89:38:
                    03:1b:db:86:6d:e6:98:9c:b8:04:65:ad:8a:ed:e5:
                    7f:fa:8b:ed:b9:9d:ff:89:b1:fa:a2:ce:75:5e:1e:
                    30:33:99:85:e3:3a:7b:b6:b9:dd:4b:a2:f2:0f:e6:
                    53:43:d4:8b:f3:94:2a:6b:05:ec:29:e2:92:0f:f9:
                    b8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CF:15:FC:07:03:66:0A:D4:38:CC:2F:22:D8:7B:07:B3:D9:E6:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/ad74d413-d09f-3c72-81ef-ecad2ed09e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl

            X509v3 Authority Key Identifier:
                keyid:03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:808:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:f2:ba:93:9f:4b:25:e3:e5:ed:00:03:6c:d2:8c:64:3b:ef:
         4b:0b:3f:6f:82:56:12:ee:00:d5:e6:8a:eb:ba:eb:32:c4:36:
         f2:9d:c9:f6:76:db:c0:a3:7f:c0:f5:4a:bc:a5:d9:31:26:eb:
         67:d5:14:46:3b:06:50:92:20:33:e5:d0:03:1f:8e:97:5d:e2:
         ec:de:fd:5a:43:82:0c:13:8d:e2:c6:fa:bf:b5:26:e7:83:37:
         d8:7d:ea:52:c0:42:b6:b1:e4:fc:1f:16:30:32:7c:ac:f5:6f:
         d6:96:e6:45:22:f0:18:73:8e:b4:16:c2:35:00:5c:ca:13:c2:
         8f:1d:a1:00:40:fb:3d:93:b0:34:e9:71:62:08:4c:ce:8a:f1:
         60:49:f9:fa:5a:ed:7f:e4:93:de:50:f0:56:63:ac:19:5f:3d:
         09:3d:60:81:3e:ac:f5:a6:bc:02:f7:a5:62:a5:85:48:25:5e:
         fe:3f:45:3a:6a:0f:b9:74:b5:21:ac:fc:73:4d:bd:c4:64:7a:
         30:24:79:b8:1f:ab:bc:68:a8:d9:6c:38:18:ef:40:ba:ef:73:
         2b:d9:7d:22:23:f1:c0:34:99:74:ee:be:29:95:ff:ff:a2:75:
         7f:56:97:99:70:2a:ae:b9:fd:98:4a:6b:ee:8b:b9:be:7b:08:
         a7:74:23:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:54:54 2025 by rpki-client