Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/9c288285-892f-3b71-b073-ac54e51371cd.roa
File:                     9c288285-892f-3b71-b073-ac54e51371cd.roa (raw, json)
Hash identifier:          VBAVml8P83sfN7N6tJLRC3JTogtca076FMs1dDG5le0=
Subject key identifier:   CB:00:45:C0:72:D1:28:81:AB:73:A2:53:64:8C:A2:5E:58:6A:68:23
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F432858484945653040CDBACAF0E18168
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/9c288285-892f-3b71-b073-ac54e51371cd.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        2605:dd40:8570::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:65:30:40:cd:ba:ca:f0:e1:81:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=774d37f6-7e63-4697-bab4-2e847f1cba3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4d:62:d0:fb:2e:26:81:6f:93:35:ee:33:c0:
                    19:01:0b:c1:53:3a:fe:4a:7a:b6:7e:3c:cc:84:52:
                    cf:18:10:a7:60:e6:14:05:6b:e6:df:5f:6a:a2:9c:
                    8d:68:68:a0:db:70:b1:f0:f4:13:a2:eb:08:65:6b:
                    88:6e:0c:ee:3f:cb:02:60:d1:0c:1c:37:a4:46:bf:
                    40:2a:60:4b:b1:d2:42:83:b0:bd:3c:76:b4:40:ec:
                    47:58:e9:79:aa:57:84:7c:bf:1c:1b:4d:27:c9:b9:
                    1f:65:3e:b9:4b:e3:e8:22:57:15:2c:e5:c4:dc:6c:
                    75:78:fa:30:d4:62:a2:65:55:36:0c:f6:5b:f1:25:
                    f7:cd:bc:51:05:db:ef:42:cd:9b:83:02:01:b1:c9:
                    bb:a4:74:5c:d1:b0:59:2c:4d:d8:dd:6c:95:a5:69:
                    12:ce:94:5e:73:5a:e3:e2:34:97:55:f5:92:3c:c0:
                    75:77:2a:43:0f:98:70:99:0e:8a:56:c5:79:5f:22:
                    33:d5:c3:e5:12:ba:a7:b3:13:26:7d:4e:7a:bf:23:
                    b6:76:4e:18:ed:60:f6:28:b5:0f:7a:4f:47:5d:92:
                    c5:cc:87:3e:e3:13:56:53:4c:7d:83:aa:f6:09:61:
                    27:40:00:dd:34:10:3b:7e:6e:c6:ea:33:a6:69:6d:
                    35:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:00:45:C0:72:D1:28:81:AB:73:A2:53:64:8C:A2:5E:58:6A:68:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/9c288285-892f-3b71-b073-ac54e51371cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8570::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e9:28:ee:57:cf:73:f6:b6:e6:4e:f8:10:85:fa:7f:e1:b6:
         e0:16:67:8b:ad:c2:b8:3e:bb:a4:15:ec:d9:9b:97:7d:d4:2c:
         bf:06:f9:73:9d:18:44:9b:a7:9b:50:7b:6c:71:f9:cb:83:76:
         65:a8:06:16:ab:1f:2a:46:6d:7c:ce:f6:98:06:de:2d:9b:32:
         71:b8:d1:e8:a9:69:88:a1:39:92:78:69:a5:ac:7f:35:52:b6:
         c9:9e:b3:be:d3:e0:d0:e3:6f:cf:df:5e:7b:4a:27:8e:06:62:
         e3:1d:85:88:a8:fb:f4:0e:a1:31:10:9e:73:05:13:32:de:32:
         f4:57:11:34:4e:f7:a3:93:7e:9d:d9:54:dd:5b:7f:de:e5:9f:
         b5:7a:45:a2:45:ba:c9:ba:2b:28:e0:c7:7b:31:91:00:4e:99:
         c3:aa:22:2a:38:a8:b6:9e:0f:ab:52:89:8b:59:ab:d0:ab:02:
         cc:30:bb:2f:4c:9b:3b:76:6e:76:92:c9:29:5d:97:9f:d5:95:
         00:7d:3a:ae:db:cf:63:89:9a:a9:73:65:a8:d7:9c:e7:41:97:
         2a:15:48:1c:ce:4c:07:c1:8a:65:a8:b2:88:a8:31:d9:05:46:
         6d:9f:d7:d9:30:63:0e:43:8d:ea:7d:8e:bd:f0:e4:03:e8:b5:
         7f:ed:a7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:24:12 2025 by rpki-client