Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d3b9852b-2053-3254-ba51-db1cf7758052.roa
File:                     d3b9852b-2053-3254-ba51-db1cf7758052.roa (raw, json)
Hash identifier:          x3UOTHHMcDQgs9E4v0ecNoAc8/dVImXinhCa6R5Y7C4=
Subject key identifier:   40:7E:D6:B4:53:7A:D3:E3:41:AE:F1:AB:34:FF:8B:BF:8E:0F:DE:75
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285848494564F7E56BA362FEFFFE40
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d3b9852b-2053-3254-ba51-db1cf7758052.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     398549
IP address blocks:        2605:dd40:8260::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:64:f7:e5:6b:a3:62:fe:ff:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=229ad11f-d121-4d2c-abd9-5c7cf89d78a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a7:4a:3a:75:f3:f4:18:ac:ff:aa:ab:7e:1e:
                    b0:b4:37:6b:dd:45:9a:82:ad:68:ea:30:b4:1e:23:
                    ec:8c:9c:11:17:2f:23:68:a2:35:c6:72:03:48:5f:
                    72:8a:ad:3f:9a:34:a7:b5:19:e9:9b:16:a8:11:b6:
                    1e:22:25:ac:06:bf:88:0b:da:c8:44:a1:22:4f:be:
                    7d:f1:4e:b3:01:f0:6e:14:61:a0:31:60:c5:30:04:
                    e0:c5:e5:7e:0b:ff:51:2d:17:3b:56:d5:9b:41:ad:
                    5e:62:c8:b3:17:b4:fb:27:c1:dc:a8:15:40:7f:36:
                    86:95:f4:d4:c2:b2:48:7b:10:79:5c:c2:fa:8e:9e:
                    a2:60:93:98:22:6c:06:c7:3e:5c:22:5c:88:9b:dc:
                    bd:91:47:58:b1:15:b4:a1:0d:c4:e1:ab:03:c1:fb:
                    6b:8e:f5:bc:d0:02:25:57:af:3d:ac:34:7d:c1:1e:
                    29:d1:cc:71:09:cd:2e:e6:22:b8:29:19:fa:da:85:
                    61:d8:16:a2:30:65:ce:08:d3:56:94:fa:a8:7d:7f:
                    32:4c:d3:82:03:54:7b:77:9f:33:38:aa:e8:28:7b:
                    6c:3e:e2:f1:0a:ab:a4:62:4a:75:70:f0:40:93:cc:
                    43:08:5a:38:13:12:47:a4:49:7c:a4:88:6b:62:b6:
                    cf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7E:D6:B4:53:7A:D3:E3:41:AE:F1:AB:34:FF:8B:BF:8E:0F:DE:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d3b9852b-2053-3254-ba51-db1cf7758052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8260::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:45:3d:69:cf:71:7e:7d:f0:36:e1:04:2d:1e:f1:bf:d6:15:
         aa:2c:45:60:25:11:d6:47:91:fb:d5:01:74:a6:fe:f7:a9:3c:
         04:f4:17:99:33:43:4f:9c:db:07:eb:b4:59:22:e8:62:e4:3d:
         75:c1:ef:70:0c:73:be:7f:1d:13:e3:49:73:aa:6b:f9:d2:99:
         a1:32:32:2e:27:6e:61:ec:57:9c:c0:0c:5b:1f:7c:6a:c6:a4:
         c3:e7:4b:4b:67:e8:fc:86:d9:fe:11:bb:5e:cd:97:66:96:e3:
         f9:b6:e0:36:0a:6b:b5:66:79:7b:bd:ae:96:bb:6f:f4:70:a3:
         54:e4:e5:3e:65:bd:de:a3:3b:46:ce:ab:fa:6e:bb:5d:b0:d7:
         6b:a9:e7:89:00:fc:09:8f:7b:33:e4:85:71:db:6e:b3:42:74:
         23:4b:d5:12:28:d4:37:2a:dc:89:4c:af:dd:4e:04:23:e5:f9:
         07:4f:af:cf:60:6c:74:85:3f:12:10:9a:32:e0:d4:58:a9:cd:
         d7:58:c9:ff:c9:2c:82:f5:1f:d6:99:d8:2b:fa:29:d1:7f:cd:
         3c:a9:b9:a0:05:ca:b7:e3:08:19:a8:17:dc:f0:ae:bd:dc:5d:
         0a:93:1f:f8:0d:c7:e4:ef:1c:e4:6c:14:1b:42:31:59:22:28:
         e6:35:be:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:51:54 2025 by rpki-client