Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/ff11d196-488e-3232-b5a8-49623fac902f.roa
File:                     ff11d196-488e-3232-b5a8-49623fac902f.roa (raw, json)
Hash identifier:          A+l7+a5wN9FBR9ke+WCCs6ISAivud6o99034jY47X/s=
Subject key identifier:   C8:0D:10:E1:4E:FC:C8:19:1B:D2:91:7C:3F:6E:03:EB:FD:7F:A2:74
Certificate issuer:       /CN=611dbbed-256e-489b-8656-320fdaca032f
Certificate serial:       010D0C9F432858487A207DA8FE0282B8E19394A4
Authority key identifier: 34:01:17:47:F4:DB:06:E2:96:FB:D7:3F:F5:17:E1:AF:C6:1C:D6:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/ff11d196-488e-3232-b5a8-49623fac902f.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     11796
IP address blocks:        2603:b000::/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:7d:a8:fe:02:82:b8:e1:93:94:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=611dbbed-256e-489b-8656-320fdaca032f
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=da996c9e-c53d-4ee5-8b6f-a537ec169307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:25:97:e8:77:19:4b:59:d1:52:4c:bf:ef:6a:
                    ff:a0:5c:6a:72:b8:4d:31:d5:ad:9f:40:21:4e:44:
                    d1:81:c0:97:3d:c3:1b:b8:85:eb:a4:2b:d1:06:f9:
                    75:eb:df:cd:67:19:0c:7e:02:fb:a7:e6:e2:85:9f:
                    f1:00:d5:ff:9f:c9:d4:6f:83:54:70:32:e7:24:a3:
                    56:79:c0:d8:d9:ae:bd:03:bc:97:3d:2e:d1:c2:89:
                    8c:4e:ee:3b:83:b5:9c:89:a2:5b:76:f3:72:33:15:
                    43:00:16:e8:4e:f6:d2:32:e8:75:24:5a:91:72:8d:
                    ca:85:a9:fa:80:09:a8:1e:22:41:40:18:f3:a9:37:
                    97:dd:e9:fe:ea:51:5c:31:44:3d:d6:8c:58:f9:7f:
                    15:81:d6:6f:62:0f:41:a7:3d:0e:31:5d:b3:f3:1b:
                    99:4e:8a:d5:6d:bf:bb:77:ff:fe:99:b0:49:aa:1c:
                    01:a7:12:d4:23:b3:9b:8b:4a:c9:b6:d9:31:0a:05:
                    66:95:09:1d:5e:82:8c:a8:53:76:f7:24:29:af:24:
                    5e:36:99:f4:d9:4f:19:fb:63:d0:a4:ba:b4:9f:33:
                    11:4d:40:80:e2:ee:37:bc:45:32:36:5d:e7:f9:2c:
                    dd:e4:6d:1e:16:59:d1:bb:88:70:72:ee:8e:14:75:
                    69:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0D:10:E1:4E:FC:C8:19:1B:D2:91:7C:3F:6E:03:EB:FD:7F:A2:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/ff11d196-488e-3232-b5a8-49623fac902f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/611dbbed-256e-489b-8656-320fdaca032f.crl

            X509v3 Authority Key Identifier:
                keyid:34:01:17:47:F4:DB:06:E2:96:FB:D7:3F:F5:17:E1:AF:C6:1C:D6:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:b000::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d8:e2:40:3b:51:40:26:1b:6f:f8:43:f8:26:08:73:16:1d:
         bc:c9:05:96:01:d8:8f:20:29:12:ac:6e:4e:a6:cd:f9:74:60:
         16:9d:c3:dc:26:eb:01:3d:27:ae:c7:b2:84:80:32:f9:52:42:
         6a:1d:0a:04:ff:4a:27:bd:38:db:30:18:7d:67:5f:5e:d1:8b:
         f2:b5:c6:d6:fe:ef:e9:bf:5d:4b:34:3f:20:c4:27:86:5d:f3:
         4a:f4:da:7d:d3:24:80:f6:3e:64:e2:d1:81:79:af:0e:30:49:
         cd:4b:3a:84:cb:86:4d:53:d0:fa:69:6e:c1:13:61:7e:07:af:
         a1:53:20:2a:a8:b2:bd:39:48:26:0b:f1:2c:67:67:6b:1c:9e:
         d9:20:61:dc:36:c1:5c:09:84:e6:25:34:e6:de:7d:e6:36:df:
         3d:d7:59:b8:c8:14:a2:1a:5c:b8:61:c0:61:80:de:6c:f9:5d:
         05:f2:c4:75:43:b6:c6:07:87:a3:be:21:a9:4b:6a:02:bb:43:
         5f:59:03:d1:f4:76:3a:83:0a:68:58:67:df:b0:12:af:14:6e:
         26:f8:28:58:4c:ff:76:c3:b2:45:61:cd:af:e7:0e:c1:cc:85:
         1c:8b:a5:b3:07:e1:9c:01:c0:49:f3:b3:df:40:e7:7b:0a:6b:
         6b:ba:3e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:35:57 2025 by rpki-client