Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/c01fa5af-9add-32ad-9e4a-fe57adab934f.roa
File:                     c01fa5af-9add-32ad-9e4a-fe57adab934f.roa (raw, json)
Hash identifier:          IEVDoPQR5JBDvxxhkXzCoVVZohlGyGOL3kzl33cS9bE=
Subject key identifier:   AE:86:B3:E7:7C:65:F9:A0:B0:9A:A1:43:B0:04:68:DF:30:82:CE:6A
Certificate issuer:       /CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Certificate serial:       010D0C9F43285848159FD44EDB7880E01C759580
Authority key identifier: 75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/c01fa5af-9add-32ad-9e4a-fe57adab934f.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     0
IP address blocks:        2602:fd10:700::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:d4:4e:db:78:80:e0:1c:75:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=b0f2f239-9ea1-4245-b827-47ef18acef31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:40:78:27:1c:03:e5:ee:4c:ad:a1:1c:93:96:
                    aa:32:1c:01:71:26:e1:be:ce:8d:74:85:db:f2:c3:
                    4f:13:91:96:80:1c:da:e6:ab:2f:2a:e0:da:e4:09:
                    43:47:78:85:b7:c6:9f:88:16:8f:fa:48:91:52:fa:
                    f9:9f:73:8f:19:37:cd:ae:08:5a:c2:71:c6:aa:ee:
                    f9:d5:e2:4c:7f:c1:59:d1:7c:65:4b:b5:71:5a:a4:
                    63:0b:da:3e:7e:39:18:15:ee:f1:85:de:75:f2:1d:
                    81:c7:1c:fb:d8:a1:c0:70:9e:e4:fa:3b:29:eb:af:
                    0c:b7:c7:77:bb:e1:7b:7c:ce:87:b4:fb:14:ab:b7:
                    61:f1:ac:49:94:9e:d0:e4:35:99:61:76:b7:c2:19:
                    5b:a2:8c:22:cd:76:1a:21:b9:e9:3f:27:18:ad:cd:
                    c9:c2:02:88:b4:75:c1:5f:13:7a:e9:0a:f5:3b:c2:
                    0f:df:88:37:d6:1c:e8:4c:42:c8:7c:aa:30:97:e0:
                    15:5a:01:31:fd:ad:e5:6f:f7:ed:05:10:95:5c:5a:
                    bf:95:0d:be:a0:75:61:b4:4b:73:d9:0d:30:51:8f:
                    37:8b:4e:19:ae:11:a2:7e:de:4c:8e:2a:8d:9f:4b:
                    a4:b3:a2:8b:16:a0:a2:9a:77:5e:44:b0:12:47:4b:
                    00:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:86:B3:E7:7C:65:F9:A0:B0:9A:A1:43:B0:04:68:DF:30:82:CE:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/c01fa5af-9add-32ad-9e4a-fe57adab934f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl

            X509v3 Authority Key Identifier:
                keyid:75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:49:47:18:21:78:c3:fc:96:6e:69:e6:8c:53:ba:01:b9:49:
         d3:4f:b9:16:64:d1:fe:50:cf:f7:65:14:68:19:e5:3d:e8:52:
         4e:9b:97:17:f5:31:c7:80:d1:9b:a3:07:1c:d7:15:e6:fe:44:
         31:d1:a9:99:5b:00:e8:af:0a:8f:24:df:8a:db:f9:04:72:54:
         da:14:cc:3e:03:b0:a1:cb:6e:a0:4b:50:b5:3c:e7:ec:dd:8b:
         d1:4b:ae:cc:f4:9f:8f:33:2f:88:1d:a1:b3:67:01:37:0b:17:
         eb:21:f5:f6:52:33:57:b2:20:c6:3d:b3:1b:22:6c:18:d2:9b:
         d2:d0:62:0e:6c:0d:01:a4:f3:28:30:0b:bb:2f:03:43:ad:2d:
         8c:5c:2f:1f:4a:7c:87:48:35:43:51:34:10:f1:3d:1b:aa:fb:
         65:94:5a:6a:ab:e3:65:13:db:b2:67:53:27:d7:8f:83:c8:d8:
         5c:16:7c:22:d7:b0:d0:9e:2e:a0:bf:7b:ae:2a:ca:a4:52:86:
         0b:20:16:0d:41:3c:14:73:b0:a1:d0:65:e7:59:a1:33:96:f4:
         e0:10:99:19:bf:01:66:52:f3:f9:2f:a3:be:04:92:5e:13:37:
         9a:03:24:02:97:f5:0a:a5:84:20:5a:ef:f6:6c:f5:cf:e2:f5:
         6b:67:12:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:29:59 2025 by rpki-client