Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/788f972d-81cb-3079-82c2-6c1926c28690.roa
File:                     788f972d-81cb-3079-82c2-6c1926c28690.roa (raw, json)
Hash identifier:          TYO17InBpo9NYnXn/SGEHw5ARagymRlxGQjtdl0c51w=
Subject key identifier:   02:CF:94:70:AE:76:0A:1C:02:03:33:B6:6C:2F:17:DF:0A:8E:D0:7A
Certificate issuer:       /CN=d106a247-9308-46e9-9d88-ae987a6bdace
Certificate serial:       010D0C9F432858481C9A92CACC0DED215021ECB0
Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/788f972d-81cb-3079-82c2-6c1926c28690.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     201106
IP address blocks:        2604:9cc0:1c00::/38 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:92:ca:cc:0d:ed:21:50:21:ec:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=8bf621c6-a57f-4146-9655-ba8e3f34e9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:56:21:54:ca:b9:68:e6:c2:c7:df:cd:b1:40:
                    62:f2:76:2f:8a:58:3e:a8:79:30:ef:31:ec:7c:18:
                    52:b7:fd:43:20:7b:34:a1:75:2b:16:fa:1d:60:da:
                    e6:d3:9d:85:08:33:2b:0e:6f:9d:e1:87:d2:6f:8c:
                    bc:a3:c9:13:bf:66:90:52:77:41:f5:b1:27:97:f7:
                    5b:bf:22:36:77:92:50:1c:15:f7:ae:10:9d:03:08:
                    45:c3:52:12:15:81:b9:75:b0:b3:f0:7a:38:88:14:
                    df:a4:33:92:21:b7:dc:0d:b9:9b:85:83:2b:b1:1f:
                    13:40:f5:01:ea:35:01:8b:51:09:5c:a6:90:f7:02:
                    5b:5d:58:54:69:df:de:9a:36:a9:b1:84:bf:84:91:
                    f4:b2:65:44:28:9e:e6:9e:99:5d:ce:5d:a8:d0:f1:
                    f2:7a:86:c7:d0:8a:e6:83:78:6f:83:64:e2:fc:54:
                    ed:37:d5:9b:f1:f9:76:41:5c:a2:f8:e7:8c:72:b8:
                    58:c0:c1:2c:f5:c6:c6:cc:27:33:f2:63:b2:26:de:
                    c5:93:f7:64:a1:80:4b:bc:01:f5:71:0e:0a:bb:2a:
                    62:09:b4:28:70:a3:c1:92:bf:c5:bb:b0:1c:f2:f1:
                    44:bd:3c:92:e5:0c:d1:ca:79:e3:3c:da:b6:5e:e1:
                    12:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CF:94:70:AE:76:0A:1C:02:03:33:B6:6C:2F:17:DF:0A:8E:D0:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/788f972d-81cb-3079-82c2-6c1926c28690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl

            X509v3 Authority Key Identifier:
                keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9cc0:1c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:89:ec:a9:18:c0:f9:c5:67:2e:54:e5:e3:a2:29:b0:6e:08:
         a0:8f:f2:65:45:9b:ec:d5:ab:ec:6d:0c:8c:64:c5:60:91:72:
         f0:ec:ef:96:05:38:2c:fc:bf:b8:b7:63:65:7f:91:91:84:62:
         f4:af:2d:13:bf:bb:8e:72:6c:cf:99:06:93:00:e3:21:1c:66:
         47:47:f8:ba:f2:b9:76:2b:ef:80:29:b4:c6:cf:e5:3c:d0:cc:
         22:20:14:48:c6:4e:01:31:78:b2:6d:5f:88:d8:5e:b2:39:e4:
         26:d9:53:4a:81:1d:dd:5b:02:a7:b5:3a:e9:c4:e0:77:4b:34:
         29:da:75:db:9c:a1:8d:e0:aa:f6:c7:2b:2d:4b:4c:e6:8f:ca:
         00:f8:45:76:99:d1:e2:fe:91:12:03:cf:1b:6d:46:47:20:46:
         ed:94:9c:6a:80:c0:34:c7:29:32:25:98:89:b6:e6:ef:66:d5:
         17:84:b2:9d:32:01:d1:5b:89:39:73:27:83:c2:3a:7d:89:c9:
         92:ba:9f:48:c7:e0:7d:11:4f:ba:52:cb:2b:8a:fb:ff:e7:ab:
         d6:e1:e5:81:14:79:fc:f1:33:b0:a5:c1:e6:96:e7:1f:a3:7e:
         b7:17:3a:da:26:cb:a0:3c:36:37:1f:88:0d:48:50:63:64:52:
         1c:41:f1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:35:09 2025 by rpki-client