Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/2cf9cd10-d56a-3e13-884e-dd111861228b.roa
File:                     2cf9cd10-d56a-3e13-884e-dd111861228b.roa (raw, json)
Hash identifier:          rFB50OTIv2kBKb+eWfwFKA4ZeI49i2xeHgbdGtbdITM=
Subject key identifier:   18:E4:D0:2F:00:57:B4:73:AE:74:DF:7D:3B:9A:3B:E1:36:FB:0A:B5
Certificate issuer:       /CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
Certificate serial:       010D0C9F4328584827C5347709EED7ABE95D0A00
Authority key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/2cf9cd10-d56a-3e13-884e-dd111861228b.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        2602:80a:2002::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:34:77:09:ee:d7:ab:e9:5d:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=760c2117-3a2a-45ba-8739-8ecef2280bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:bb:7d:63:f5:2b:75:9a:fe:ba:40:24:9f:
                    92:62:ea:cc:61:d0:7b:b0:bc:c3:4f:23:40:28:0c:
                    7f:4d:4b:c2:e9:2c:72:f2:31:17:73:01:43:64:d2:
                    0a:68:b2:e3:d8:f4:c4:3f:22:80:13:59:bc:90:47:
                    4f:3e:54:59:c9:a1:8a:d9:60:ff:da:ef:b6:22:e5:
                    32:48:7b:05:22:eb:8e:ea:4f:d6:c1:a3:2d:87:e3:
                    05:d0:53:f6:a2:c8:06:b7:7d:7f:2d:75:f9:d7:a1:
                    6d:42:6b:03:44:02:10:6a:52:d3:2d:8d:f3:60:73:
                    ba:f0:99:05:be:fd:6c:e7:2c:07:f6:9c:95:08:32:
                    73:e2:06:ad:53:b4:62:3e:8a:49:58:b1:ee:96:b1:
                    10:38:43:a0:d4:cb:b1:cb:04:d6:1a:ef:42:06:b3:
                    3c:bc:a2:37:95:6a:43:9f:87:77:77:80:17:0f:21:
                    ee:4f:37:87:c9:97:a3:82:53:33:6a:90:2a:ae:f1:
                    96:49:30:5a:81:4b:c8:82:21:3d:f1:2a:96:a1:a9:
                    50:5f:c0:b1:1f:ce:00:d8:47:82:8f:a9:f3:78:01:
                    13:76:a0:52:02:9c:bc:17:d5:1d:76:b6:a6:02:6f:
                    56:4b:a4:0c:fe:ba:6d:bd:a3:71:84:52:46:28:72:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E4:D0:2F:00:57:B4:73:AE:74:DF:7D:3B:9A:3B:E1:36:FB:0A:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/2cf9cd10-d56a-3e13-884e-dd111861228b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl

            X509v3 Authority Key Identifier:
                keyid:17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:2002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:57:50:5a:45:21:d6:59:9a:da:ee:4c:44:07:2e:1b:21:6f:
         9c:f1:ee:2c:bd:dd:cc:8c:3c:1e:54:8a:3e:a6:76:9d:d8:1d:
         2a:6e:90:f7:b1:38:39:de:4d:b7:4c:cc:98:77:d0:b6:5c:0b:
         35:bc:58:5d:f3:f2:3b:de:db:25:b1:fa:b4:71:93:7d:45:52:
         6f:84:c0:29:dc:b5:71:98:84:a7:61:59:7a:3c:3c:fe:fa:3a:
         40:84:55:1c:dc:1c:bc:a7:4a:8f:e8:d6:d3:f3:6b:1e:0a:5b:
         4c:0c:54:8b:23:bc:9c:06:c5:0b:1e:ff:8b:b9:00:b0:92:69:
         35:4f:b7:f1:df:76:62:2b:24:14:d4:9b:fb:be:17:df:bc:36:
         36:c0:93:00:99:1d:25:17:9c:7e:6e:4c:18:53:08:88:da:e9:
         45:da:1a:e8:d4:3e:ba:60:ec:f5:7e:ce:08:1e:c0:a0:9b:86:
         f2:ab:ac:bf:e7:38:8b:2a:17:f8:c7:a7:df:37:6b:d8:3f:bf:
         85:2e:2e:14:2a:02:23:43:20:9f:ea:b3:c8:66:2a:74:6e:b3:
         31:cf:75:ab:51:25:64:8c:0b:e5:a9:29:83:9c:4d:be:ac:45:
         72:c6:41:43:1b:dd:96:ca:72:eb:70:97:e0:a4:6b:c9:ed:6f:
         df:ec:f0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:09 2025 by rpki-client