Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/6e971fc1-df5a-3890-ad2c-de395e1e2134.roa
File:                     6e971fc1-df5a-3890-ad2c-de395e1e2134.roa (raw, json)
Hash identifier:          QqY7OGzCtWoy/l99Kdt9VNlmS2sdqEtHrwszu6JKhCE=
Subject key identifier:   8A:BD:34:97:C8:CA:11:3E:E1:4A:3C:8E:7F:96:9F:1D:AD:29:C6:90
Certificate issuer:       /CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
Certificate serial:       010D0C9F43285847F2BA2AA83F968B7F252003C0
Authority key identifier: 64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/6e971fc1-df5a-3890-ad2c-de395e1e2134.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     22462
IP address blocks:        2602:fec6::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:2a:a8:3f:96:8b:7f:25:20:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=4545175a-c881-4f89-90a8-8899adcd4e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:cf:6a:08:0d:b2:9b:af:7d:fe:41:75:3a:
                    6d:31:0c:c8:24:8e:af:19:dd:50:2f:12:0a:c1:4a:
                    13:2f:7d:b4:4f:4f:e5:75:75:07:94:db:dd:e5:3b:
                    b1:c7:b9:2e:24:aa:ae:3e:f8:ec:2f:ab:ca:28:33:
                    ba:82:44:dd:a8:c1:02:5a:43:7f:c9:20:ac:e0:c9:
                    82:2b:6b:23:a2:4c:f1:00:f8:02:bd:30:ff:68:3e:
                    34:0b:08:b3:a1:eb:88:c1:e4:22:4c:84:a2:9b:49:
                    da:6e:a3:9b:67:b9:1f:1a:d1:c1:3d:b1:dd:8b:5e:
                    63:95:62:4f:f5:02:90:9b:f4:9d:37:95:f3:fa:58:
                    16:85:41:3a:e1:25:2f:b4:28:57:82:a7:6c:f2:83:
                    e6:c8:6f:c1:77:67:6a:31:ea:22:3d:b1:53:3a:6f:
                    22:1d:a7:26:14:88:50:36:19:0f:8c:66:1a:de:33:
                    65:e4:4c:c8:97:b0:c6:42:b0:b0:a5:73:35:99:d4:
                    12:b6:16:8b:77:c9:dc:25:0f:31:47:47:e0:94:4f:
                    57:78:d9:24:7b:e0:21:02:2f:d7:61:13:3b:d7:00:
                    b1:7f:bf:31:fb:ca:a9:27:89:56:2f:55:f0:f4:e4:
                    8a:f7:5e:e7:ef:76:d7:8e:1f:9f:1d:73:7c:3a:72:
                    54:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BD:34:97:C8:CA:11:3E:E1:4A:3C:8E:7F:96:9F:1D:AD:29:C6:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/6e971fc1-df5a-3890-ad2c-de395e1e2134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl

            X509v3 Authority Key Identifier:
                keyid:64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fec6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:4a:d9:2a:24:aa:01:d7:8d:89:71:75:51:70:1e:4b:94:36:
         c3:66:3b:a0:bc:92:8b:00:a9:b7:cb:a8:15:df:32:ea:bb:a8:
         a8:2d:11:18:23:3f:ca:89:c4:9a:5b:8c:91:9b:9a:31:5f:f8:
         31:d7:dd:26:75:48:94:bf:45:27:b2:44:2d:9b:ab:e3:30:7b:
         39:05:1b:22:52:75:bc:5e:b0:f0:5c:1b:4f:07:55:79:a5:64:
         a2:d2:b5:f5:4a:10:84:10:87:40:eb:a0:33:da:b5:6e:fa:a9:
         b7:f3:9b:52:48:2c:ab:b0:93:fa:dd:d5:52:a6:0e:a7:34:2a:
         0e:b3:c3:ab:e4:31:52:eb:4e:60:88:b5:65:0f:d1:b4:c1:ec:
         48:11:fa:bf:26:b6:39:6a:1c:35:b8:11:38:ca:f8:77:c9:da:
         f6:79:e8:dc:5c:55:4a:90:7a:3a:3e:e0:9e:4a:19:69:ac:57:
         32:d7:c6:24:01:4d:a0:3c:cc:53:c5:03:ef:1f:4c:c3:ed:bb:
         33:e7:c9:76:11:d8:46:00:92:6f:f7:51:9e:12:cc:c8:57:26:
         2e:56:9b:72:da:63:13:f7:e9:12:b3:e7:8c:5e:c2:5d:14:08:
         bd:96:1d:aa:f8:22:35:ad:93:cc:f6:11:39:c0:0e:46:29:ba:
         7c:82:53:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:52 2025 by rpki-client