Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f9c13f5-2eae-3a0d-940e-1fa1255ed9c9.roa
File:                     8f9c13f5-2eae-3a0d-940e-1fa1255ed9c9.roa (raw, json)
Hash identifier:          yagYngC7OQ/OgyETLo3nGjRUnBCLz/kULIg4eoxU6Ok=
Subject key identifier:   29:8B:38:80:FA:77:82:5D:90:AA:36:CD:3D:AD:AF:9A:B8:CC:72:D1
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847DC64ACC092CFECA71BB8C580
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f9c13f5-2eae-3a0d-940e-1fa1255ed9c9.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     64267
IP address blocks:        2602:fefa::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:ac:c0:92:cf:ec:a7:1b:b8:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=2d109b7d-ccb1-44f5-b21c-ef53837ad55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:0d:93:01:58:6d:98:4e:2e:e7:f7:f1:23:
                    a8:ef:b3:71:3c:35:fe:65:16:2a:a9:35:93:d0:4a:
                    4e:1a:d2:a0:d4:29:c3:ad:4f:7a:8b:d6:48:77:53:
                    20:06:3e:61:6d:ee:e4:37:78:2f:b8:99:d9:fe:88:
                    e0:a4:24:ee:b1:8b:67:37:1d:27:f9:9b:37:59:f3:
                    fc:b8:87:1b:1d:50:7f:bb:81:0f:5b:ed:6a:4e:e1:
                    ba:e9:62:0b:95:d0:c6:d6:dd:6c:c6:84:75:9b:89:
                    44:d5:a8:ed:1c:94:0c:9d:42:0d:02:09:51:e9:84:
                    cb:35:6c:3b:d3:05:1f:5b:29:1d:92:bf:63:08:71:
                    c2:d6:57:32:61:ea:8f:33:56:91:ae:51:36:e9:b4:
                    df:8c:87:2a:82:b3:47:d0:a9:4d:e4:80:45:a6:13:
                    0b:b7:ed:60:d5:f6:ef:9c:7e:b4:bf:e1:bb:79:98:
                    51:b6:f6:b2:af:4d:6b:15:5a:3e:c0:fc:ad:b6:e3:
                    55:82:34:50:08:77:2d:07:ad:0d:d8:13:5a:ec:19:
                    a8:5a:04:44:d8:4e:48:4d:cf:67:a0:a8:a1:ca:14:
                    25:d6:6d:8f:c5:3c:b4:3a:d1:31:3b:db:a3:43:d6:
                    f1:47:1e:d7:25:16:df:2c:58:dd:15:06:97:a1:7f:
                    a1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8B:38:80:FA:77:82:5D:90:AA:36:CD:3D:AD:AF:9A:B8:CC:72:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f9c13f5-2eae-3a0d-940e-1fa1255ed9c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fefa::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:b0:11:cd:26:f9:91:5f:c0:ec:84:3f:33:b1:ac:bc:b2:61:
         b8:29:88:7c:32:b0:57:c7:2b:bf:8b:22:ae:8f:c8:36:49:4f:
         1a:3c:88:01:9c:56:2e:d7:e3:88:9b:76:d9:08:00:3f:6d:21:
         38:7f:fd:13:49:93:99:e1:04:96:03:39:cc:07:c2:f7:e1:09:
         2d:23:eb:8c:1d:b7:6a:d0:6e:ee:61:d4:45:ff:cc:1a:c7:ce:
         3f:47:78:5a:5f:89:95:c0:84:3c:2c:82:30:06:47:a4:ec:a1:
         42:32:e4:c1:e7:be:90:57:77:b1:54:1e:40:22:9f:7b:b6:25:
         8e:bb:a0:f4:b9:b6:0c:4b:cf:c9:64:ea:02:b6:3e:19:63:77:
         c6:d9:f0:c5:d6:9a:8e:2f:92:49:e3:b8:2f:92:c7:eb:60:30:
         3d:42:da:ea:0d:60:83:25:27:cd:87:5a:42:f8:bf:46:c3:bf:
         30:97:23:a0:ff:60:66:e2:4a:3c:94:f3:0f:01:f3:88:0c:e7:
         e3:9c:f4:d2:39:1e:ce:05:0d:9d:25:56:26:f5:6b:ae:e2:21:
         46:d5:ba:4e:3c:0f:a7:64:df:0d:22:4b:15:ea:96:8c:1c:32:
         bd:98:7c:3e:56:6c:a9:72:63:52:a2:7d:ff:b7:f9:62:f0:91:
         e2:24:b5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:02 2025 by rpki-client