Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/604f226b-cfa2-3c4a-a155-e07054c86908.roa
File:                     604f226b-cfa2-3c4a-a155-e07054c86908.roa (raw, json)
Hash identifier:          axR/Elvs/0urX5JhUT9RYNg5l7Z4HuBjgAGfBmM9vGM=
Subject key identifier:   66:59:35:EE:E1:D8:EC:2C:96:B8:B8:EA:C3:BB:5C:03:35:E9:34:EF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E62ABD257909C5CBACF88008
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/604f226b-cfa2-3c4a-a155-e07054c86908.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        2600:1900:4000::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:bd:25:79:09:c5:cb:ac:f8:80:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=b8e398a4-e285-471a-8485-7a4b5c388d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e1:67:b2:03:a3:a4:1b:a1:40:f1:c0:fe:1f:
                    2d:98:fe:95:b4:db:87:44:4e:70:ad:36:ca:8d:36:
                    b3:3c:a1:c0:ce:59:75:68:bd:5d:65:de:31:03:5d:
                    d3:f4:e1:e2:7c:a2:aa:4e:ee:1c:67:3e:41:2f:1b:
                    b2:3a:cc:56:ba:92:00:47:d0:f2:e1:e1:42:26:6c:
                    2c:2d:1c:af:63:74:db:2b:bc:e2:8a:91:da:6d:a6:
                    53:5e:dd:4f:2e:d2:c3:2f:22:7e:9a:31:4b:48:e7:
                    b6:29:32:65:5f:de:07:c1:c8:cd:3d:c5:c9:b7:5d:
                    e4:b9:91:73:56:f6:dc:55:56:d3:20:0c:c3:09:e4:
                    97:10:96:04:e1:1d:16:fd:9c:41:0f:e1:37:c8:b7:
                    6e:e7:a6:5c:fc:6b:5f:16:45:1d:ad:d7:03:36:bb:
                    04:81:df:41:69:2e:0f:11:9d:2e:8a:fe:dc:5c:4b:
                    dc:72:f9:97:d8:16:b9:6b:f8:13:cd:a5:5a:e2:a6:
                    c8:be:31:5b:13:b5:3f:84:e6:2e:69:8c:96:4d:11:
                    f4:8a:a2:23:7e:1f:59:f2:0f:72:ad:a1:7c:97:e9:
                    0e:c1:ff:6e:98:8f:5f:78:86:71:74:ec:e9:61:21:
                    bc:e4:7a:ca:bf:0c:0c:bc:d9:d0:3a:9e:72:b4:eb:
                    a4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:59:35:EE:E1:D8:EC:2C:96:B8:B8:EA:C3:BB:5C:03:35:E9:34:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/604f226b-cfa2-3c4a-a155-e07054c86908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:af:38:f7:81:72:bd:3f:a5:b6:27:79:d4:45:df:fb:7b:15:
         44:e2:f5:e2:4c:c6:e2:41:38:0d:b0:3c:b1:4c:be:de:f8:1f:
         54:63:b3:b1:78:cb:97:68:44:e1:db:52:90:10:45:9f:21:fb:
         be:43:95:1f:a4:84:91:38:00:b7:f6:dc:87:af:b3:6b:73:23:
         d0:ed:14:2e:ac:d1:27:86:31:16:67:ae:da:c5:de:a6:db:76:
         2c:c7:5f:1f:49:f5:c3:f8:6f:f8:1d:3a:6d:35:63:f6:71:5a:
         36:05:ad:2b:14:37:24:c7:68:0a:f4:cc:d7:a4:29:7f:28:b5:
         62:49:08:c4:d2:da:5e:3d:82:f2:38:4e:5b:0b:cc:d1:d1:b0:
         93:49:72:fa:79:ab:cb:c0:34:89:1f:03:6c:32:ff:04:e9:8e:
         9c:0e:16:ea:12:08:7a:27:a5:90:a1:d2:8e:47:0e:6b:aa:0f:
         a5:26:e2:37:e3:e8:9e:7d:2e:59:21:14:0d:cc:6c:45:2e:d3:
         9a:ab:ac:2d:db:a7:f6:7f:23:26:47:88:7a:8d:e7:e4:96:65:
         9b:42:97:48:ac:3b:00:4a:94:4b:d2:0a:2e:f9:f2:e5:92:94:
         81:8f:da:ec:7d:d1:8f:9e:60:e9:65:ec:15:77:0a:5c:ca:a7:
         ca:89:5b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:31 2025 by rpki-client