Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/8772ccd6-b189-3648-86b4-02b297d28b4d.roa
File:                     8772ccd6-b189-3648-86b4-02b297d28b4d.roa (raw, json)
Hash identifier:          2sYZQp7Vt1rvDtvZZMqowV03OiyLOkzGWQwfNz8kzb4=
Subject key identifier:   71:D6:48:38:A6:39:90:77:4D:3E:66:1B:36:83:EF:8F:C5:6D:D1:CC
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F432858481C9A79304C6E7C543AC48280
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/8772ccd6-b189-3648-86b4-02b297d28b4d.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     19168
IP address blocks:        2602:fd23:9::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:79:30:4c:6e:7c:54:3a:c4:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=9be572f0-8c5e-405d-b595-90870e7337e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:54:70:99:2d:9d:7c:29:e0:fa:9c:2b:49:
                    8c:eb:7b:b9:5e:1f:e4:75:bd:1e:ab:24:2a:b0:74:
                    a0:4d:e3:55:1c:2f:44:d9:4b:df:5b:4b:2d:10:d0:
                    b3:e6:ca:7c:3b:fe:d5:5b:cb:93:66:e3:a1:d3:47:
                    e6:c3:eb:31:af:37:e1:cf:72:8e:30:e8:19:0e:51:
                    48:5b:0a:aa:d4:62:7c:34:40:bf:52:f7:bd:00:52:
                    42:2a:f1:82:7d:a0:41:8b:5a:e4:1e:0e:5d:18:84:
                    31:19:1e:f4:b7:94:84:92:ec:36:b2:03:75:d7:03:
                    b7:da:0d:4f:c1:42:f5:74:37:b7:6a:13:e8:cf:1f:
                    ee:11:33:76:d2:36:5f:10:55:d6:3f:e8:4d:11:1f:
                    ac:6c:64:8b:f5:d5:bd:42:71:dd:e9:6e:ca:eb:13:
                    bf:06:16:f8:04:5b:e6:a2:9e:d9:e4:24:ce:a5:ec:
                    f6:58:80:e7:4f:b1:ed:32:ba:a8:2f:7b:81:41:a0:
                    0b:4f:fb:16:df:df:f8:4f:35:55:d9:5f:19:0b:8d:
                    c0:a6:24:7e:4f:50:76:f3:b7:db:cf:b7:16:d2:c5:
                    0e:0b:e9:c8:a1:ca:6e:37:3e:a4:c2:4f:94:da:27:
                    2d:df:ff:c0:0b:ad:6b:6e:d0:e5:30:8b:42:d0:50:
                    69:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D6:48:38:A6:39:90:77:4D:3E:66:1B:36:83:EF:8F:C5:6D:D1:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/8772ccd6-b189-3648-86b4-02b297d28b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd23:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:60:db:ca:c4:90:64:5d:a8:c5:0d:fe:8c:df:0b:8d:bc:a4:
         eb:39:e3:31:e1:67:05:86:c2:fd:92:0b:69:c2:ba:06:9f:e6:
         44:27:bf:6a:cc:d1:a6:40:e5:25:70:38:7a:0c:2d:ee:0a:b3:
         bb:33:c4:ef:ab:10:ed:4c:32:69:c0:1e:46:cd:e4:39:4f:11:
         e5:4c:15:e2:23:a6:10:c0:e3:fc:00:a1:69:83:3e:c5:46:19:
         86:c5:7a:92:45:8b:4a:63:90:42:d7:2d:be:25:2a:f9:7d:06:
         0c:c7:d1:1c:3d:bc:de:04:38:71:9f:2b:97:57:31:50:16:7f:
         10:dd:5e:6c:c7:42:ef:3b:27:85:96:e8:1a:af:1f:ac:cd:e3:
         6b:8c:cd:c1:f6:8a:f8:3a:77:69:9b:2b:8d:bb:7f:2b:8e:c9:
         c5:aa:ee:41:02:e6:08:d1:a0:76:0f:23:8b:d5:ba:9a:a2:02:
         31:d0:68:16:25:56:c8:7c:dd:a1:dc:b0:68:64:1d:28:a8:8b:
         05:de:58:9e:a4:af:24:36:38:90:5b:23:5a:47:96:32:56:58:
         d6:1d:1d:35:2e:4f:d4:b5:da:fb:f6:f6:ab:ca:3b:56:38:d5:
         e5:74:fb:c9:27:e4:db:e3:69:7d:98:ab:d5:32:b5:06:15:c8:
         58:23:4d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:26:01 2025 by rpki-client